der: 15687:15691 ERROR: BC_REGISTER_LOOPER called without request 10:32:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="b6e51cb1cbf4cbded17ee74f602dd274bd7a99aacd1db9965726f90d853693ecb675a2e710c68b196c44683a8ee47d4f484e94bc0b11b4bfefd2716e7ce3fe605ed151a0", 0x44}, {&(0x7f0000000000)="1d450f419a4de08c76b442c898ce8da39587c8dd66b079c0d8ebfb7f0766e7db14bd4a6ee7c99dd2c316e54fea280eb08370c7fd0d029b3e6038a447e13c", 0x3e}, {&(0x7f0000000200)="cf4e937be20d400f342f89ccf19725139989e9f6caf2db4890ca824c75e6cbdfbbe3c5a86aa1065cef96f5e13cde771cc60df8e4ed3aa732d95d0c0f47f3a3", 0x3f}, {&(0x7f0000000240)="d77730af5ef8f8c6f36042857754115cc1846dcfb148725606ebdea77d85f57bd88e9871eef8ba0e945e715ba7e4b95874fa193ada5e25a4fdd01122ab9cbf6e3ae4366a506af057cf7ef63b281fa8afd881b83f0177f2ebf457c41af6707998bceabf5b9523135d537d84120a6615ec75343c1329133f0d3433183c4f07d64312d3870755c3e64a435a01ebda2cb6e113d13ce1430bf962bc9e6e4ed6ed1de9b3b507068f64d92f02c562c8adb89cbec42546bb491a7956ca0cce900dbfde00c59648ca62b619a33b8505c017bf0d6bb7", 0xd1}], 0x4, &(0x7f0000000380)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1]}], 0x20, 0x4080}, 0x1) 10:32:36 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000500)=0xe2b4fe) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x10040, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r8, @ANYBLOB="2c67726f75705f69643da6f831c2d11578cf620f962e75d22447c26f1fe05aeec16578e686926fd7110ecd4e8fd023c02df1abc7b393778d3ce81959673e017b1c003975f1c7a300205783fd6fde6f8bc0a2ddefc5ea418829691d1d11d688df1155d450b55a6433f1d672fe2cc6769e2ff6ee0639", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000000000,allow_other,seclabel,\x00']) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x2, 0xffff, 0x9, 0x9}, 0x8) 10:32:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:36 executing program 1: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 10:32:36 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0031276e037d1168a9f81b9d02ee3c0000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000140)={0x8e44, 0x8, 0xfffffffffffffff7, 0x2, [], [], [], 0x2, 0x0, 0xfff, 0x0, "630e90db5000c7099658378f1bd2cab0"}) 10:32:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000001c0)) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 512.799992][T15950] binder: 15949:15950 unknown command 1848062208 [ 512.807783][T15950] binder: 15949:15950 ioctl c0306201 20000e00 returned -22 10:32:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:36 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) 10:32:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x80, 0x3b8}, 0x8) 10:32:37 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCSBRK(r1, 0x5427) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:37 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000500)=0xe2b4fe) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x10040, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r8, @ANYBLOB="2c67726f75705f69643da6f831c2d11578cf620f962e75d22447c26f1fe05aeec16578e686926fd7110ecd4e8fd023c02df1abc7b393778d3ce81959673e017b1c003975f1c7a300205783fd6fde6f8bc0a2ddefc5ea418829691d1d11d688df1155d450b55a6433f1d672fe2cc6769e2ff6ee0639", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000000000,allow_other,seclabel,\x00']) 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 513.080397][T16276] binder: 16274:16276 got transaction to invalid handle [ 513.153747][T16278] binder: BINDER_SET_CONTEXT_MGR already set [ 513.162914][T16276] binder: 16274:16276 transaction failed 29201/-22, size 0-0 line 2994 [ 513.216691][T16278] binder: 16277:16278 ioctl 40046207 0 returned -16 [ 513.243203][T16276] binder: 16274:16276 ioctl c0306201 20000200 returned -14 10:32:37 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xf000000}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) [ 513.347815][T12248] binder: undelivered TRANSACTION_ERROR: 29201 10:32:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:37 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000007c0f4e00000000fec8f332cf131e9580db07c43631724e99769ab5a62a493df6eef45b68808435f459cd45675429757bb84584a693fa7d9175d6a9e3a54a37aaef4c064c2fee76d56466ee8cbd90f48aab14bd030445c80cd02222cf078a0fa76fb9089e4884b615183c9f52ab90b0b9f689341c95802cb797e805412e88824ab5f9eafba53bc214e6d9a65dbbca6cb08c25d848aa12304ad8d47e16b50e9666ea8be99844b8f13e189e4f629d2f57ff7f74576d332dad2ec5f45ab7d3c41d33bcc2433c84b0baa93176ac8b471d448ed1c8b9f424bedeea6bbd"], 0x0, 0x0, 0x0}) 10:32:37 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) getsockname(r0, &(0x7f00000007c0)=@can={0x1d, 0x0}, &(0x7f0000000840)=0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x198, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0xb57, 0x7, 0x1000}, {0x7894, 0x100000000, 0xfffffffffffffffd, 0x7ff}, {0xb37, 0x3ff, 0x1, 0xff}, {0x7fffffff, 0x2, 0x9, 0x140000000000000}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x44}, 0x40000) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x2e, "f6aaf37d190d5e70fe9303ad770e19167e2dd5f0cddb2d14c94826fb9a4b786bb08828e861ff2a216c7d898265fe"}, &(0x7f0000000280)=0x36) sendmmsg$inet_sctp(r1, &(0x7f0000001680)=[{&(0x7f0000000140)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="b1a6460816e4b10e649997801da7", 0xe}, {&(0x7f00000001c0)="3307bd8ac90d16b83b637881f14a77ed725b831fe9b3008748ec7ae9d1a3b2985dc5d102b69481bf06a32ef99b249655f6077238", 0x34}], 0x2, &(0x7f00000002c0)=[@authinfo={0x18, 0x84, 0x6, {0x1e7a}}, @authinfo={0x18, 0x84, 0x6, {0xa6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x800}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffff2e0, 0x3f, 0x8201, 0x5, 0x1ff, 0x8, 0x5, 0x551, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xe}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5000000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x200}}], 0xe0, 0x800}, {&(0x7f00000003c0)=@in6={0xa, 0x4e22, 0x9, @mcast1, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000400)="a6ddeee60998866062af3cd574acd6f52f9a2400a49511bcbcdaec329d71c0e00ff32d3dc9b4b3799d60681185e913d2e96d3d", 0x33}], 0x1, &(0x7f0000000640)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x9, 0xffffffffffffffe0, 0x1, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0xd3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3f}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x33f8}}, @init={0x18, 0x84, 0x0, {0xb0e, 0x11, 0x81, 0x8000}}], 0xf8, 0x4890}, {&(0x7f0000000740)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000ac0)="9f59c381c4bab9097b0f3a3e300d65e6b01b83bd6e29c05d8ed351ec12f10585ed69e4937d5f007528cdc4cfb9067595bc410060649c48a8e2f3eabfa3f819b23634b3ab266a6a4093f5fc010ae33b1e32086b38c1f050ac2fa7e707d2def2edc4251c7407872588c5ad255733903f8e0bb7c36a309fd354dd72ce2dbefeabc6a7c09eabc569a5488db60423b193bfd29ba1203ebec1676f1ab8cbf129b79b7ba174bcdbb5de8b29", 0xa8}, {&(0x7f0000000780)="ca579d5400fdd03e2b93f7248b", 0xd}, {&(0x7f0000000b80)="9f51590820d88469736dbde71f5b9c312e7bfd7cff68c118227120ef0bf95df52da887ab87fca0b2328ae359273667c42de69f57534045ac684e3417731725365a231b678038d2e8ffc84d64650a3c1bf049427e7ac29ac87b6a7a3f8cc6e6662c889157e512eac0f558981a4554ff0d1df601fbe69a0c140481de139a1fdca1409b16f000ddbfc5fd20cb34aeeebc22e16a977633bf95a5b13e2a17e24fad0b7b2fe0d308fa5f1d3580e7ecebf7a813988ffbc654ed", 0xb6}, {&(0x7f0000000c80)="f191098a871fe4c30a3b9592cf866c762cc7a73858181792811e79bbd0fe0d1577da9ab78bfb29f5c9b6d723acf4c225bc5dee3ce47a82665257731ae207bd2834b72a073851304171348c3a0a95569f8e4334fa00ac04acceeb7d09c46e96263047aa19bdcd5c113e6e2ab9c81d7491bfd1890190e370c81715c486ac5838e8b5e9a6df2d44349874", 0x89}, {&(0x7f0000000d40)="2ff458b3436247d3ce3357a6b0436da3fd3156d5423610a3d067b561d8c7eb39efb6124d46df1fa57a8155b770dcb6adf8a633783d12445bc8dcc2b62b7b3830873795022a4485a49198df7ac2a0dbd20923d57707488c0f7a30735698b540158c8317696bf73392f289eb3b8994c684247e1d8c5e40457abf489425899580b3bdd282c4e9f10632584bef9dc97fd052d4cfe6d0127570892c42d8bb8b9ad0b0ef83a9347fe21b2ead88fd34d805d4092c182c84160d0a1ee4cb81554444443740ff7bc5af5a3fefb45ea964d2b0c398f2ce00873f6298116cced9c3aa7ab125ca62195c90d58f37d0c2f1", 0xeb}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="e85b33532641a3b95cd5997fb39166fa6933eec741139f993b0e8b35c9d1e1bc6e20ecaa67ed470285d2a8ffb863462867a5c3932a566c3f0195305e54c654fa08d9836e35ea190370affe3f1b64b34daad9bd5b97397bc28c0a", 0x5a}, {&(0x7f0000000f00)="ce7875349fe43742b79cc9c8f30396292014a4f2239ec46cae974b9521bd99162f02b055fe81e4aa84fa7858b674cde07ad86ee57476247886997acc658b27857b1bbfd1d703a3fc8c250ff98c8bb4b980ae129acd079c46245e454e23425201ce90459534e85e96c46adbb8042d14ab0ece69494dad6c03f801c6f76410500b9832", 0x82}, {&(0x7f0000000fc0)}], 0x9, &(0x7f00000010c0)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x100000000}], 0x18, 0x1}, {&(0x7f0000001100)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001140)="91372a8d1b33fab7bbc47d21edba1d0e17914263251e3bc327f1f3ce736db79168a5f1494cf1ca7c7fc0c104db76120daf2fdf61edf30732a0947dc228b4bf8dd50b3d4313399c13d49e880e8f716f9a9955f7367bfc7338c71403a1100b86938fa7027767bff7257e79386efe6dcee8e2467e1686cf216f", 0x78}, {&(0x7f00000011c0)="cd1d45", 0x3}, {&(0x7f0000001200)="d4d40f7ffe00f7f98484501fb9c2a244600450ff7cce102650838d737fa25db18869d44f763c8291065fb6035255d4014828a01dbeee744e2b908c8ad2e811d55029559e8eb9a5bbf793165b135cfea0e09229b6f4c7f48dc1db2f334d86d5abeeb17db749", 0x65}, {&(0x7f0000001280)="a5d1be5604a94c725f5ceb3c12fe37eb3270ba1861042f56a2be6fc732023eedf5b2d42405cd0cf87352593aa3312e8fc099864d05e7a125249b6047f19f91086b362b0e73e97d40c2e5e1feaa9a2e4e308359f6aa77994c11c7f1cebccdcbdd1b46a28c8ace1c1dab9a7514d62babb8d1df4e6978cda2edc0969befd7d10db87aa56a9c7a3e755bd0baa110a2ce825a484a1a2a6d8dba934a34c5180ca1ca6f5cab49f684ebbe5b902a404f819430564e4bd94a279345117a4b1d536f2ccc4f42b436db1e585fb849c1e597dc80e5d813d5d82c37f23a0b44ffc46ae6b1f20a784ba4317df586d641ffc0a134af", 0xee}, {&(0x7f0000001380)="2795c6b012dde34a658ca10faa3bc16d3cb39e18c1fcfa24744af784afe7457421ec7e27dbacef6eeb82fa369e8aeca4b31fcdb22f0ccb9dc61db416564491eec4421ab93ab56b8f37bd34f3a75e433bcf68f09753940e281d9c273f55b0e11304685296fc57d3f9a6abf097cc4dceb674157855eea4e832acb81c511e28ac0250c8c6640360534838b5a80e8de66f35f2cc098787e5332f23bbb92b9af8feab4819d7540ca61b4d1a0692da1e4e431c4c26903d7a3cea72ac21b8203f425fec1ed3feb611c0c999d33d7aeb9568cfdf5dda", 0xd2}, {&(0x7f0000001480)="2c9a08b1c619c6a8f3e053e4c54162b1e806bac028a48e01ff5e1082d446fa1fd5808a5a86948c5555390e4669ea2c455b5aab517fbea12ca9fbc322464f8953573ee79a6409701fd18c45fbaf324075728563f8c4c0330740eea42a243ed4fcddf4170e0941e8aaecb57c313ef1b5c4045df5f365ac6ebc123c24041f5676b8da96fdb8eeb1fbe734201f6a02b5776dff82bfa6d5e6825c4456b3d25b6dfbe26eb730e4e3bdefcfb7803f718c777c854546a7a273ea1e900b1e5fd674ce9370fbd4", 0xc2}, {&(0x7f0000001580)="59d93d1da709bc40d2f029ac0acf8f6bac59bca36434d7578cc1d14c68002e18b12c086d7fc67643d008d7c74eb1637ade86eb1c5da58faa5ecdd22f6b640ee713a6964e3aae2ec652185cafec30a4a19eebd3606e86bd804080d80db9c05bd0cb73115c47a92bac41d3b4b31fb54f739336", 0x72}], 0x7, 0x0, 0x0, 0x4}], 0x4, 0x810) [ 513.487303][T16605] binder: 16604:16605 got transaction to invalid handle [ 513.524013][T16605] binder: 16604:16605 transaction failed 29201/-22, size 0-0 line 2994 10:32:37 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000500)=0xe2b4fe) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 513.566797][T16605] binder: 16604:16605 ioctl c0306201 20000200 returned -14 [ 513.585936][T16626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pig=16626 comm=syz-executor.2 [ 513.650457][T16795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pig=16795 comm=syz-executor.2 10:32:37 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631060", @ANYRES64=0x0, @ANYBLOB="0500002e00000000000000000000"], 0x0, 0x0, 0x0}) 10:32:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 513.752157][T12248] binder: undelivered TRANSACTION_ERROR: 29201 10:32:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @loopback}, 0x9}], 0x1c) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000000)=0xc, 0x4) ppoll(&(0x7f00000000c0)=[{r6, 0x1a0}], 0x2000000000000074, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) connect$inet(r10, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x62}, @generic={0x6, 0x80, 0x3, 0x2, 0x9}], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000900)=""/183, 0x41000}, 0x48) r12 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r10, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000100)={r10, r11}) recvmmsg(r12, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) 10:32:37 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000195c79bb5c335e3e3ea68951e30dc4578a406322f9e2a2f02e0949db8a0c63d666000000000000000000008537d5276bb6ab02099eb6699c29ed8918a4460fac1fb07d79d7a419b6f6a18c24f3dcee98bfacbffafa697fccfdae374ed9fd90df10ec5dcd39e3d20cb79f95d54c27f35ad3c7edabe9c1547994d0bbe9bc109f25ccd70893d278b5b1d0b856f3ff95b33abec2668b96bb21e8273010696d83501fb47c281dc3f806bd3a7f73a6e8", @ANYRES16=r3, @ANYBLOB="20022abd7000fddbdf25030000000800020040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x801) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 513.812441][T16931] binder: 16929:16931 unknown command 1611686665 [ 513.818802][T16931] binder: 16929:16931 ioctl c0306201 20000e00 returned -22 10:32:37 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000faf2ffffff0000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000500)=0xe2b4fe) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) [ 513.887475][T16940] binder: BINDER_SET_CONTEXT_MGR already set 10:32:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:38 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) [ 513.947814][T16940] binder: 16933:16940 ioctl 40046207 0 returned -16 10:32:38 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) 10:32:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x0, 0x0) timerfd_gettime(r4, &(0x7f0000002180)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) recvmmsg(r7, &(0x7f00000020c0)=[{{&(0x7f0000000880)=@rc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000a40)=""/224, 0xe0}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000b40)=""/225, 0xe1}, {&(0x7f0000000c40)=""/21, 0x15}], 0x8, &(0x7f0000000d00)=""/167, 0xa7}, 0x100}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/92, 0x5c}, {&(0x7f0000001ec0)=""/111, 0x6f}, {&(0x7f0000001f40)=""/43, 0x2b}], 0x3, &(0x7f0000001fc0)=""/243, 0xf3}, 0x967}], 0x2, 0x40000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:38 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) [ 514.093121][T17234] __nla_parse: 16 callbacks suppressed [ 514.093129][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:38 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 514.183071][T17269] binder: 17268:17269 BC_ACQUIRE_DONE node 91 has no pending acquire request [ 514.203709][T17270] binder: BINDER_SET_CONTEXT_MGR already set 10:32:38 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000500)=0xe2b4fe) [ 514.236331][T17270] binder: 17266:17270 ioctl 40046207 0 returned -16 10:32:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000340)=0xffff) close(r3) socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000300)={0x0, @aes256}) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x8}, 0x8) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/47) sendto$inet(r0, &(0x7f00000003c0)="0084e0fd9a1124ee0a88dd97a48178473e128c2c67444c3b602fff88211b83d997062f2545e1ef0ea65c0afaf91be957df78a22d1a3137dcc60849fd265b7518ed2388911c89ae34c8078c41046a75d991e9bea54013ac5d0cea412b1cc43af80f34874891c5659be7a278ae3058ef2d372f9ef1", 0x74, 0x4000001, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:38 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @null, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x74c, 0x9b08bdf0035fc16) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f00000000c0)={0x0, "fe75f67de9eaaae9703cfe5c4464dda6eb84c7e4a0068a44d4b9d63422015c31", 0x1, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x448000, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0x838f, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000380)={0xa20000, 0x2, 0x4, [], &(0x7f0000000340)={0x9d0902, 0x3, [], @p_u16=&(0x7f0000000300)=0xffffffff}}) 10:32:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) r9 = dup2(r2, r2) ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f0000000880)={0x0, "599d1a7080f6d9e70b507b46375e33d5b01412cc45d7c0acc03bd4f3dbdb03a1", 0x20, 0x101, 0x9, 0x1e, 0x3}) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 514.416944][T17580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:38 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) 10:32:38 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r3}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1533) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x5, {0x0, 0x4, 0x3, 0x8}}, 0x20) [ 514.503167][T17592] binder: 17591:17592 BC_ACQUIRE_DONE node 92 has no pending acquire request [ 514.517673][T17580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:38 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 514.562960][T17599] binder: BINDER_SET_CONTEXT_MGR already set [ 514.598491][T17599] binder: 17598:17599 ioctl 40046207 0 returned -16 10:32:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x10, r1, 0x20) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f00000003c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="0000000000000000076304400300000008631040", @ANYRES64=r4, @ANYBLOB="020000000000000001634040040000000000000002000000000000000000000001000000000000000000000038000000000000002000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000030000000000000002000000000000002c00000000000000852a68730a000000", @ANYRES64=r5, @ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00634040020000000000000002000000000000000000000011000000000000000000000040000000000000004000000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000003000000000000000800000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000000000006800000000000000000000000000000068000000000000001800000000000000180000000000000038000000000000002000000000000000"], @ANYBLOB="0f630c40010000000300000000000000"], 0x21, 0x0, &(0x7f0000000300)="8154b962f528e23a3481023029279b4e642ceaacbd38d2581733ebaed2153865ab"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) [ 514.678920][T17832] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xfffffffffffffff8, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:38 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) prctl$PR_MCE_KILL_GET(0x22) [ 514.783952][T17915] binder: BINDER_SET_CONTEXT_MGR already set [ 514.809005][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:38 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 514.845245][T17915] binder: 17914:17915 ioctl 40046207 0 returned -16 [ 514.890388][T17934] binder: BINDER_SET_CONTEXT_MGR already set [ 514.912831][T17934] binder: 17923:17934 ioctl 40046207 0 returned -16 [ 514.935084][T17934] binder: 17923:17934 got transaction to invalid handle [ 514.953449][T17934] binder: 17923:17934 transaction failed 29201/-22, size 0-0 line 2994 [ 514.968964][T17934] binder: 17923:17934 ioctl c0306201 20000200 returned -14 [ 514.970941][T18001] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flat={0x73622a85, 0x100, r2, 0x4}, @fda={0x66646185, 0x2, 0x3, 0x2a}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x18, 0x38]}, 0x2}}], 0xfffffffffffffe5a, 0x0, 0x0}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) [ 514.988947][T12248] binder: undelivered TRANSACTION_ERROR: 29201 10:32:39 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="f7371f546a480707"], 0x0, 0x0, 0x0}) 10:32:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0306641a3cdb74b43500d6ab1edf8b203d8f4468db89"], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 515.073095][T18135] binder: 18134:18135 got transaction to invalid handle [ 515.120295][T18135] binder: 18134:18135 transaction failed 29201/-22, size 0-0 line 2994 [ 515.142772][T18135] binder: 18134:18135 ioctl c0306201 20000200 returned -14 [ 515.147651][T18143] binder: BINDER_SET_CONTEXT_MGR already set [ 515.166094][T18143] binder: 18141:18143 ioctl 40046207 0 returned -16 [ 515.174773][T18143] binder: 18141:18143 BC_ACQUIRE_DONE u0000000000000000 no match [ 515.215107][T12248] binder: undelivered TRANSACTION_ERROR: 29201 10:32:39 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x20, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 10:32:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:39 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/39) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x322, 0x0, 0x3, 0x1000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b46cfee", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000001c0)='caif0\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) r9 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)="9af853c2e2bc3b2517d2d3e5490376301a036e23710d4316f72c2eefd4dc09a760990d3fae2cf9428364c5ec50d62df88b772143e95aff2e530979a8de3c2dfb492bdd607ee8156bf572b9dc2eac1ce63015ba5951eb34f4bf8d12e6505096fbeccd4357f6a79651d633531fe88b097b31d32f374fd9c87c9f6b6a90d5ef8dda40d40b2bc3b045a450c2c93abefe1755b7203ad9ad479a2dbf2831168f23ee9e6f676ef31a7546b2c43e23f6329db1efe5ab41e9628769c89d1873cef90b88bcdb4d841dbc6a991f5a588576d83bbdb233f409d2f3d4651e115eea9a9a25c9b2a1b9bd63520afa3a4f160ae98b557c7f9b2bd310", 0xf4, 0xfffffffffffffffa) keyctl$get_security(0x11, r9, &(0x7f0000000a40)=""/108, 0x6c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x7, 0x100000000, 0x4, 0x0, r8, 0x1}, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000040)={{0x10001, 0x800000000001f}, 0x1}, 0x10) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000180)=0x9) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000009c0)) socket(0xf, 0x3, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x102, @local}, 0x10) 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) [ 515.429502][T18454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.460570][T18456] binder: 18453:18456 unknown command -288406005 [ 515.468029][T18456] binder: 18453:18456 ioctl c0306201 20000e00 returned -22 10:32:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 515.627797][T18666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:39 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:39 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x99, 0x5, 0x8, 0xdce1, 0x5}) 10:32:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB="0300000000b502"], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="e31ece7eebea0709f27584a1287499bd9409e15a87453dee5f403fd3e7baf1b6afdd05763b1bd6fc1454044af1babdfe906e9dc2ed50aacacb83ba673dd43c360021f43a683c400139742855ed61827858cd5210e324bdc79799c2cd8bb530625390af", @ANYRES16=r7, @ANYBLOB="040627bd7000fbdbdf25020000003c000200080002004e230000080009000800000008000b000a0000000800060001370000080009000200000008000b00020000000800060023270000500003001400020076657468305f746f5f687372000015001400746f5f627269646765001400020073797a6b616c6c65723000000000000008000500ffffffff0800040045000000080004000500000008000400556300000400030002000000000000000800040001000100"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xb3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) getrusage(0x1, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) r8 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x101000) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000240)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:39 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x5) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xcdb4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000, r2}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:39 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x400000f) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 515.752067][T18679] binder: 18674:18679 unknown command 0 [ 515.764845][T18679] binder: 18674:18679 ioctl c0306201 20000e00 returned -22 [ 515.772828][T18681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0)=0x1) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x27, 0x8802) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000e00)={0x10, 0x0, &(0x7f0000000d40)=[@clear_death={0x400c630f, 0x2, 0x3}], 0x0, 0x0, 0x0}) 10:32:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:40 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) [ 515.950285][T18896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:40 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$netlink(0x10, 0x3, 0x1d) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x10c, "cc93b595c035f4ce41b4d46aabf7ae444338ec66972b14de431b89eefaa031a5", 0x2}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000900)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000880), &(0x7f00000001c0)=0x68) 10:32:40 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:40 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x19ab, 0x5, 0x1000, 0x2, 0x3, 0x6, 0x800, 0x34b, 0x40, 0x30e, 0x4, 0x1f, 0x38, 0x1, 0x7, 0x3, 0x6}, [{0x2, 0x6c1, 0x800, 0x8b, 0x0, 0x4d25, 0x1, 0x6}], "a74bab7c63a068f3939b2e1807f6de39d27800cff56dfb46c896a28677442492b3a5e55677f93d6fbc442029fb2707385bb3ec8f88c9d1b25265c1e532f7eb6eeb61fbfed5844d868d2091a33b09fab41bddc7eb2ab15643f242f6d0a6e015bffc35a91dcfb05bb4c5fa437fb26b917870bf6fa0e0d04fea9a0900e32ed38a1219d7d6f9eb17b41d6de0344dc2fb5124ba63724abde9cb0fcdfdf7609620b02a8069638020a5c9cb84f309bc32ed98c9ffb6ccc180d5c7a7b748ad35e0b5a5f2830602d8e1f86cf6be00ff6f80b2a812a0d04057bdbb16e4724540fe4e63140fbfa5aaf1beb8a6e8f84aaf", [[], [], [], [], []]}, 0x663) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:40 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x101000) getsockname(r1, &(0x7f0000000080)=@sco, &(0x7f0000000140)=0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x40, @mcast1, 0x9}}, 0x7ff, 0x7}, 0x90) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) [ 516.631772][T19016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43781 sclass=netlink_tcpdiag_socket pig=19016 comm=syz-executor.2 [ 516.643629][T19018] binder: 19017:19018 BC_ACQUIRE_DONE node 100 has no pending acquire request 10:32:40 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5a5040, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x400) 10:32:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:40 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x64000, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:40 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:40 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040)) 10:32:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000001c0)='\'^\x00', 0x3) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x7c, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x58080, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2013, r9, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 516.948250][T19249] binder: 19248:19249 BC_ACQUIRE_DONE node 102 has no pending acquire request [ 516.960463][ T26] audit: type=1400 audit(1553423560.963:72): avc: denied { setopt } for pid=19246 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:32:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:41 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r3, 0x7}, &(0x7f0000000140)=0xc) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:41 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:41 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x12) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x80000) sendto$rxrpc(r1, &(0x7f0000000140)="b1c15634e8e3d594d39578e338f3eff6bde919e658a0a0c29e2688a77dd6a1429e25464b3e9eda9356c78737460898b2bf244cc5316a2775a7278c4998f21590e9669fb52616a6b2e092a22e34f394513103062e207d3df55cba1b587dce818a6d4da9dcc1c868ee9ef43d45ef0cbcedea19993a870945be1e7955f13ce3724aa12fccd0fe331649c1c2d232936f5465e1d6a8e0e27a06576cb8511815b532746553d6725a63c596dd7ab7ad9aa3085b61ff5e15103c6c0eb32d19e5d561306e0df72a7d7cfc9a9de122981f1e71971718930262f00b27a32b39b42d6bd247f14a89816db0580051dce3972e3a751841b606de32ec28f1", 0xf7, 0x40, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) 10:32:41 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000300)=0x3ff, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000040)=0xfe) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000240)={0xfff, 0x62b, 0x6, 0x1, 0xffffffffffffff01, 0x6}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:41 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 517.534811][T19460] binder: 19453:19460 BC_ACQUIRE_DONE u0000000000000000 no match 10:32:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:41 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={r2, 0x2}) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:41 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x40}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x3d4, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x1, 0x2}], 0xfd31, 0x0, 0x0}) 10:32:41 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/12, 0xc, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:41 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:41 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 517.813129][T19686] binder: 19684:19686 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 517.891231][T19686] binder: 19684:19686 unknown command 0 [ 517.896904][T19686] binder: 19684:19686 ioctl c0306201 20000e00 returned -22 10:32:41 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r3) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:41 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000880)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:42 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa0100, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000002c0)="1458c4fc288f31135599a7f5963fbddbd040ac457171de3bc6fec8c46d3df6857968fa40d124e272dff9cadd5bdcac34ea1cb30dd7b1c8fe8e4db8bf6938363173c19ae86a2a7304c078d9289b64aa5f2255350a605db4e09d051fb35fb10e26d11e611628a3cfa2ca6cd8084be391f25a6f97b228c08fbe41bf24") 10:32:42 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x4d, 0x4, 0xe2, 0x0, 0xc3ef, 0xdb40, 0xfa, 0x4, 0x3}}, 0x43) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:42 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:42 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:42 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x9) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 518.335901][T19988] binder: 19927:19988 BC_ACQUIRE_DONE node 104 has no pending acquire request 10:32:42 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000540)="fa0e964650435915a680", 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 518.402391][T20031] binder: BINDER_SET_CONTEXT_MGR already set 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fchdir(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00\b'], 0x0, 0x0, 0x0}) [ 518.472956][T20031] binder: 20030:20031 ioctl 40046207 0 returned -16 [ 518.495747][T20126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pig=20126 comm=syz-executor.2 10:32:42 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:42 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000faf2ffffff0000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) close(r4) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x4) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000003c0)={0x0, 0x0, 0x103, 0x1, {0xee7a, 0x9, 0x1, 0x400}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x53, 0x9, 0x20, 0x3, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000300)={r5, 0xfff, 0x0, 0x8, 0x7}, &(0x7f0000000340)=0x18) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r4, 0x0, 0x10005, 0x1) [ 518.619948][T20254] binder: 20239:20254 BC_ACQUIRE_DONE u0000000000000000 node 105 cookie mismatch 0000000008000000 != 0000000000000000 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 518.713130][T20296] binder: BINDER_SET_CONTEXT_MGR already set [ 518.738979][T20296] binder: 20292:20296 ioctl 40046207 0 returned -16 10:32:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='syz_tun\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') sendto$isdn(r1, &(0x7f0000000880)={0x8, 0x400, "fecfb65e9df4184640fa56b2a44cef9db850bc873ae4965ef4ce795e6e0bd03a762541ff4c52f2723bb5097a4921128b197f4e805bc71456b23a1bcf1b34e4ba957bcd1a6a40057b11bb5f21e41141951519969d337bd854197ead17677e2b6758f513c1164c82dda5116ed5e033a0e955ce6693a1f43f83f974618130d941635af3eb745d6082ed39691adc2b8f7e6eabcc80dc720d3616c056abf4ce69e1c03db6f09c0a287632a4da14d32e68d569d7458b2ef436ef71a495983b63410cbe9b9df686"}, 0xcc, 0x8000, &(0x7f0000000040)={0x22, 0x400, 0x8, 0x3, 0x8}, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0x8, 0xffffffffffffffff, 0x7f) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4068aea3, &(0x7f0000000980)={0x7b, 0x0, [0x8001, 0x7, 0xfffffffffffffffe, 0x3]}) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:42 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='\x00', &(0x7f0000000100)='vboxnet0lo(%trusted\x00', &(0x7f0000000140)='(,wlan0\x00', &(0x7f0000000180)='-vmnet0\x00', &(0x7f00000001c0)='vmnet1cpuset]mime_type@\\security]selfmd5sum[\x00', &(0x7f0000000200)='{vboxnet0vmnet1(ppp1\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='eth1cpusetvmnet0\x00', &(0x7f00000002c0)='em0\\\'\x00', &(0x7f0000000300)='\xd1\x00', &(0x7f0000000340)='@wlan1\\\x00', &(0x7f0000000380)='^{!:\'*wlan0proc\x00']) 10:32:42 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0xf0, 0x8, 0x7f, 0x7, 0x5, 0xffffffff86ffdb59, 0x6, 0x3ff}, &(0x7f0000000080)) 10:32:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:42 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:43 executing program 2: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xb) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 518.987894][T20640] binder: 20589:20640 BC_ACQUIRE_DONE node 106 has no pending acquire request 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10880, 0x0) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 519.047069][T20688] binder: BINDER_SET_CONTEXT_MGR already set [ 519.080872][T20688] binder: 20667:20688 ioctl 40046207 0 returned -16 10:32:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 519.135800][ T26] audit: type=1400 audit(1553423563.143:73): avc: denied { write } for pid=20703 comm="syz-executor.2" path="socket:[87269]" dev="sockfs" ino=87269 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 10:32:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:43 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2000010) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) [ 519.263428][T20796] __nla_parse: 12 callbacks suppressed [ 519.263436][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 519.380490][T20922] binder: 20920:20922 BC_ACQUIRE_DONE node 107 has no pending acquire request 10:32:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci={0x1f, 0x0}, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="040627bd7000fbdbdf25020000003c000200080002004e230000080009000800000008000b000a0040000800060001370000080009000200000008000b00020000000800060023270000500003001400020076657468305f746f5f687372000000001400020076657468315f746f5f627269646765001400020073797a6b616c6c65723000000000000008000500ffffffff0800040005000000080004000500000008000400556300000400030008000400090000000800040001000100"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) r9 = socket(0xf, 0x5, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$packet(r9, &(0x7f0000000880)=""/153, 0x99, 0x10000, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0x401, 0x6, @dev={[], 0x22}}, 0x14) setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 519.504324][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:43 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/39) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x322, 0x0, 0x3, 0x1000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b46cfee", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:43 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="04000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) clock_gettime(0x4000000000, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$sndseq(r7, &(0x7f0000000880)=[{0x0, 0x1, 0x7ff, 0x1, @tick=0xfffffffffffffbff, {0x3, 0x2}, {0x81, 0x2cde}, @queue={0x1, {0x8, 0x4}}}, {0x40000000, 0x4, 0x9, 0x7, @time={0x77359400}, {0xf800000000000000, 0x1}, {0x3f, 0x8}, @connect={{0x8, 0x3ff}, {0x6, 0x1}}}, {0x10000, 0x3, 0x2, 0x10000, @time, {0xffffffffffffff80, 0x7fff}, {0xd7, 0x3}, @quote={{0x800000, 0x9}, 0x1}}, {0x5, 0x3, 0xffffffffffffffc4, 0x7, @tick=0x3f, {0x9, 0x8}, {0x5}, @queue={0x2, {0xff, 0x2}}}, {0x5, 0x9, 0x7, 0x3, @tick=0xfff, {0x1, 0xdd78}, {0xea0, 0x3}, @time=@time={r8, r9+30000000}}, {0x400, 0x7, 0x6, 0x885d, @time={r10, r11+10000000}, {0x0, 0x9}, {0x2, 0xfffffffffffffa3c}, @result={0x2}}, {0xfd70, 0x3, 0xfffffffffffffffd, 0xc00, @time={r12, r13+10000000}, {0x9, 0xffff}, {0x0, 0x3ff}, @result={0xe64, 0x3}}], 0x150) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000a40)) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r14, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r15, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r15, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:43 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 519.692502][T21118] binder: 21090:21118 unknown command 4 [ 519.714535][T21118] binder: 21090:21118 ioctl c0306201 20000e00 returned -22 [ 519.722067][T21119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.782070][T21119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 519.831801][T21152] binder: BINDER_SET_CONTEXT_MGR already set [ 519.856261][T21152] binder: 21125:21152 ioctl 40046207 0 returned -16 10:32:43 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='Ivmnet1&vboxnet1]}keyring\\.\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) 10:32:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 519.884004][T21259] binder: 21125:21259 unknown command -288406005 [ 519.911343][T21259] binder: 21125:21259 ioctl c0306201 20000e00 returned -22 [ 519.913005][T21278] binder: 21260:21278 BC_ACQUIRE_DONE node 110 has no pending acquire request 10:32:44 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/39) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x322, 0x0, 0x3, 0x1000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b46cfee", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 519.968366][T21326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:44 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20001) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000240)=0x2) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 520.049805][T21385] binder: BINDER_SET_CONTEXT_MGR already set 10:32:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 520.098400][T21385] binder: 21360:21385 ioctl 40046207 0 returned -16 [ 520.129087][T21435] binder: BINDER_SET_CONTEXT_MGR already set 10:32:44 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:44 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x9, 0x400000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0x9b0000, 0x8, 0x0, [], &(0x7f00000001c0)={0x990b2f, 0x9, [], @p_u8=&(0x7f0000000180)=0xeffc}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x10040, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x801) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=[@acquire_done], 0x0, 0x0, 0x0}) [ 520.167161][T21491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.188525][T21435] binder: 21406:21435 ioctl 40046207 0 returned -16 [ 520.206582][T21512] binder: 21406:21512 unknown command -288406005 10:32:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:44 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 520.254718][T21512] binder: 21406:21512 ioctl c0306201 20000e00 returned -22 [ 520.287124][T21629] binder: 21576:21629 BC_ACQUIRE_DONE node 111 has no pending acquire request 10:32:44 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:44 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/39) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x322, 0x0, 0x3, 0x1000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b46cfee", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:32:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="c40000008e44f5845260e698dc8179de8f2df35e8a3980b1168ae87a8fb5edef6d10b6b83b7782239038040000005c934be74d5504005a9dd81988c4bd67f24c6688fb786923a679cd68f33e6d99bb464f45258892ed8e5051472725d5593bbd2e8c996c858162bb3c5c40cd175ebd56c5bb15348c52480d8651e34e5fb2b204dec36fe07340fdc05eefebeeb6af17d14016bc772ecb9ced1d0000444e1d9b541953b923f4a7e800000000000000", @ANYRES16=r7, @ANYBLOB="040627bd7000fbdbdf25020000003c000200080002004e230000080009000800000008000b000a0000000800060001370000080009000200000008000b00020000000800060023270000500003001400020076657468305f746f5f687372000000001400020076657468315f746f5f627269646765001400020073797a6b616c6c65723000000000000008000500ffffffff0800040005000000080004000500000008000400556300000400030008000400090000000800040001000100"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r9, 0x8080aea1, &(0x7f0000000700)) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) [ 520.406929][T21758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.422912][T21786] binder: BINDER_SET_CONTEXT_MGR already set 10:32:44 executing program 5 (fault-call:5 fault-nth:0): r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 520.457029][T21786] binder: 21752:21786 ioctl 40046207 0 returned -16 10:32:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:44 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) close(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:44 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 520.589477][T21807] binder: 21803:21807 unknown command -288406005 [ 520.601786][T21917] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.611753][T21807] binder: 21803:21807 ioctl c0306201 20000e00 returned -22 10:32:44 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:44 executing program 2 (fault-call:2 fault-nth:0): r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:44 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 520.701079][T22008] binder: 22005:22008 ioctl c018620b 0 returned -14 10:32:44 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) 10:32:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci={0x1f, 0x0}, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0x35a, &(0x7f0000000800)={&(0x7f0000000700)={0x33, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xfffffffffffffd03}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x160, r9, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x8000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r10, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 520.789506][T22032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:44 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:44 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x400) [ 520.909672][T22126] binder: 22113:22126 ioctl c018620b 0 returned -14 10:32:44 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0xfffffea2, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0xd, r0, r2) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) close(r0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) signalfd(r3, &(0x7f0000000000)={0x2}, 0x8) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8002, 0x2, 0x0, 0x800, 0x1000000001, 0x100000001, 0x0}, &(0x7f00000004c0)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200400, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r8, 0xc0485630, &(0x7f0000000880)={0x41, "88fdab3165bb430b0e9037d76268328e91635c57fb4e994082fc1f41a5ac9ff2", 0x3, 0xffffffff9c109304, 0x5, 0x3200e0, 0x2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:45 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 520.990967][T22210] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 521.015979][T22237] binder: 22236:22237 ioctl c018620b 0 returned -14 10:32:45 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:45 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:45 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) socket$netlink(0x10, 0x3, 0xf) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:45 executing program 5: r0 = socket(0x0, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) ptrace$pokeuser(0x6, r1, 0x0, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000480)={0x86, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="1f66f0beb2a80a20d50412495ddaaedb8a35a36b021d6daf682e2b24e49b942155f1e27a3082c8c2b8cd0837efa639517f61618a810d417c14cb2e5548534802d93773f7a0a6be3b85bf05eecd72fec6ca16e2d3a1da71f39682bd0a277d2c01cf56e3779f9e326b4718c69c8eab411b4698517fcb0e2fe4deb353353c0f18e4fd725b55ea08f2b24978252e95092ecb4794ffa590eaab81fc58ab6b78d7a534aeac42ee4ba0ee5f549d170755", 0xad, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000300)=[{&(0x7f0000000140)="297f1964c993720be09cb54e13179fd5ad56c6ead1ba10284c5fa9ec8423efa8e93adb471b66bc9c2390d438950b04ec001a268967157695", 0x38}, {&(0x7f00000001c0)="679f63bda194cee0c734830d5fe58b1892f02482c917f7f4", 0x18}, {&(0x7f0000000200)="746217c809584e66e5f2fe5d11fe0202287c55982971655be0da571cd491cd1075e5d11781c7c4bfa23987ae597d2ce68e1d820251df8c2a4c8ca68d0302f923edde43b18f777d2de050726396c08ebbd33649d49a5714569c6732c48f154680407b92a1ae5029ce35c5e0ce72a1c688c8686c1c3b991cae81861ef76c8e9b3b50c9f38db52ef5b1c9a518e2a6c7b0493fe64767381b764b7baa58dbb69bceacf9ecf9282c0eac669f5031323a5b1759d000d712048a1428b6e0598aadd5f34c217189bd841d", 0xc6}], 0x3, r4) 10:32:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:45 executing program 1 (fault-call:3 fault-nth:0): syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:45 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:45 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:45 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r4) close(r3) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r3, 0x3, "1e6d89"}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000040)=""/8, &(0x7f00000001c0)=0x8) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:45 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x43, 0x4000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000040)=""/8) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@loopback}, &(0x7f0000000140)=0x14) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:45 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x2, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:45 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 10:32:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:45 executing program 5: r0 = socket(0x0, 0x8, 0x3f) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:45 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x4b47, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYBLOB="030000f9366d8948a284d4cc0b49e590bd7c356fd8535ee6b0c3df740bf5a4ac898340af6f91a153afed6ce00d140b0fd5bca258d641502f29c928393320ab937b5dc6355d6be45a46a0c58ffd1208632a2d3f4426d57f8a3bf0cb37d5c53dacee3881beed29d51bc1286e791ce68ec3ade38d657e4f75fffdc630bc2f9aa7fb21dafdb03beb1a5f812bcc8cccbb91b3fc46c121b40c19426001484827a9a4a2a714b657781cafd02f6e3bb0ab039b32bf40ea6bb7c8481f829c038d266e7a83fa1c3ae3c522bd42e0b0fdef509be2c9299467083b3d676d26fc81bad69785dc1de61b"], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:45 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 521.989984][T22940] binder: 22939:22940 ioctl 4b47 20000000 returned -22 10:32:46 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040)=0x1ff, 0x4) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:32:46 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x4b49, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:46 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/8, 0x8}], 0x2, &(0x7f0000000200)=""/22, 0x16}, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:32:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8804) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4c2a68652c181040000", @ANYRES16=r8, @ANYBLOB="040627bd7000fbdbdf25020000003c000200080002004e230000080009000800000008000b000a0000000800060001370000080009000200000008000b00020000000800060023270000500003001400020076657468305f746f5f687372000000001400020076657468315f746f5f627269646765001400020073797a6b616c6c65723000000000000008000500ffffffff0800040005000000080004000500000008000400556300000400030008000400090000000800040001000100"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 522.330265][T23269] binder: 23266:23269 ioctl 4b49 20000000 returned -22 10:32:46 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x5e7) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x200, 0x4, 0x7, 0xfff}) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:46 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x1, 0x1, 0x1, 0x4}}, 0x26) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:46 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x4000013f}}, 0x20) fcntl$lock(r1, 0x25, &(0x7f0000000200)={0x1, 0x5, 0x5, 0xfffffffffffffffb, r0}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r2, 0xa4, "03fe4a", "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"}}, 0x110) accept$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x5, 0xfffffffffffffffd, 0x1}) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 522.612541][T23532] binder: 23530:23532 ioctl 541b 20000000 returned -22 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x4, 0x3, 0x2, 0x1}}, 0x2e) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB="03c68900000000"], 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="040627bd7000fbdbdf25020000003c000200080002004e230000080009000800000008000b000a0000000800060001370000080009000200000008000b00020000000800060023270000500003001400020076657468305f746f5f687372000000001400020076657468315f746f5f62726c65723000000000000008000500ffffffff0800040005000000080004000500000008fca84cde8663000400556300000400030008000400090000000800040001000100000000000000000000000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f00000001c0)=0x3) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:46 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:46 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5421, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:46 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:46 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:qemu_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1}, 0x66) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:47 executing program 5: r0 = socket(0x14, 0x80006, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x1000000000000237, 0x0) close(r4) process_vm_writev(r1, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0) r6 = getpgid(r1) ptrace(0x4219, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000480)={0x6e9, 0x6, 0x1f, 0x0, 0x0, [], [], [], 0x7fff, 0x7fdf}) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0xfffffffffffffffb}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r7, 0x11b42234}, &(0x7f0000000400)=0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x822200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400c001) 10:32:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000540)=@hci={0x1f, 0x0}, &(0x7f0000000280)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4}, 0xe7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x05\x00\x00\x11\x00\x00\x13') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x4, 0x10001, 0x8004, 0x2, 0x0, 0x800, 0x1, 0x100000001, 0x0}, &(0x7f00000004c0)=0xffffffe0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)={r4, 0x3, "1e6d89"}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000003c0)=""/87, 0x57}], 0x2, &(0x7f0000000e40)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x2040, &(0x7f0000000640)={r5, r6+10000000}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3701}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2723}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6355}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000001e40)=@newpolicy={0x13e4, 0x13, 0x5, 0x70bd29, 0x25dfdbff, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x7f, r2, r9}, {0x6, 0x7, 0x1, 0xffffffffffffff01, 0x7, 0xbefb, 0x9, 0x7}, {0xfff, 0x793, 0x6, 0x8}, 0xfff, 0x6e6bb2, 0x1, 0x0, 0x1, 0x1}, [@coaddr={0x14, 0xe, @in=@rand_addr=0x2}, @migrate={0xb4, 0x11, [{@in6=@loopback, @in6=@loopback, 0x0, 0x2, 0x0, 0x3507, 0xa, 0xa}, {@in=@rand_addr=0x3ff, @in6=@rand_addr="5fb3a45967ba62a71b0485e331544f74", 0x7f, 0x2, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x32, 0x2, 0x0, 0x0, 0x2, 0x2}, {@in6=@empty, @in6=@rand_addr="83fc6c70d1db65343b8c5e342eb290ce", 0x2b, 0x0, 0x0, 0x3505, 0x2, 0xa}]}, @algo_crypt={0x1048, 0x2, {{'cbc-blowfish-asm\x00'}, 0x8000, "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"}}, @policy_type={0xc}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e22, @in=@loopback}}, @algo_auth_trunc={0xd0, 0x14, {{'crct10dif-arm64-ce\x00'}, 0x418, 0x0, "9d2b27a441e52fc470be37627a78866ef8ceb4d090aeda1a5dc704b6d1a8ab158da78510fa895c738085968f43f62ad8028e40a3c88c37f29420d4de0da810b5848c5cc3be4261d1b643a06769a617131f77976584d7b9b2d0e729453887945104df3a637aab7b17799bab7b627f0b827b7684de0e1210322742c6e731665509b88698"}}, @replay_thresh={0x8, 0xb, 0x80000001}, @algo_auth={0x114, 0x1, {{'sha512-ce\x00'}, 0x658, "f4244602e6bc4b5689208f9863914a02d071cf5cbe70da2647deb72a685a4df5cf0c2a5f087757da5ed735c501436c05a30b240eb10b09f310ff977092f8fe38555dbc754c36531e9a976e78547c889f20a4976921b05d3e00c455da7ecbd645033994d4dde0353eb05d312faa42a064dfd1dc9402e11a3f5874cf4902353ffb5c5a2ec84277c81e79659c9564f8986a613b4337224a545652041873e2a7d78ec55bd5072bf9d93aa503c2627dc0fd54e9df8a971b4bee6c8f9e4b9ec8d94ca08efef64071c4a1c3a99753"}}, @ipv4_hthresh={0x8, 0x3, {0x13, 0x17}}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x80}, 0x40080) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x1, 0xfb, 0x7fffffff}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4000000000}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x10001, 0x3f}, 0x9}, 0x10) recvfrom$packet(r1, &(0x7f0000000140), 0x0, 0x40000060, 0x0, 0x0) socket(0xf, 0x3, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r11, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 10:32:47 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5450, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:47 executing program 2: r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x5, 0x501800) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000180)={[], 0xffffffff7fffffff, 0x5, 0x3, 0x0, 0x7, 0x6002, 0x5000, [], 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x240000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x100, 0x204, 0x7, 0x7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x7, 0x20}, &(0x7f0000000100)=0xc) 10:32:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:47 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5451, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:47 executing program 4: r0 = socket(0x0, 0x8, 0x3f) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x9, r2, r0) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x141000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x88, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x6}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x30, 0x0, @loopback, 0x9}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r3, 0x5}, 0x8) ioctl$NBD_DO_IT(r2, 0xab03) 10:32:47 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:47 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 4 (fault-call:5 fault-nth:0): pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:47 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5452, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:47 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:47 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x103000, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f00000000c0)={0x40, 0x0, 0x501f, 0x1, 0x1000, {0x8, 0x100000000}}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 523.824211][T24694] FAULT_INJECTION: forcing a failure. [ 523.824211][T24694] name failslab, interval 1, probability 0, space 0, times 0 [ 523.882088][T24694] CPU: 0 PID: 24694 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #35 [ 523.890103][T24694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.900175][T24694] Call Trace: [ 523.903485][T24694] dump_stack+0x172/0x1f0 [ 523.907827][T24694] should_fail.cold+0xa/0x15 [ 523.912418][T24694] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 523.918266][T24694] ? ___might_sleep+0x163/0x280 [ 523.923121][T24694] __should_failslab+0x121/0x190 [ 523.928078][T24694] should_failslab+0x9/0x14 [ 523.932586][T24694] kmem_cache_alloc_node+0x264/0x710 [ 523.937872][T24694] __alloc_skb+0xd5/0x5e0 [ 523.937903][T24694] ? skb_trim+0x190/0x190 [ 523.946584][T24694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.946599][T24694] ? netlink_autobind.isra.0+0x228/0x310 [ 523.946616][T24694] netlink_sendmsg+0x97b/0xd70 [ 523.946634][T24694] ? netlink_unicast+0x720/0x720 [ 523.946657][T24694] ? tomoyo_socket_sendmsg+0x26/0x30 [ 523.973440][T24694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.979673][T24694] ? security_socket_sendmsg+0x93/0xc0 [ 523.985123][T24694] ? netlink_unicast+0x720/0x720 [ 523.990121][T24694] sock_sendmsg+0xdd/0x130 [ 523.994559][T24694] kernel_sendmsg+0x44/0x50 [ 523.999059][T24694] sock_no_sendpage+0x116/0x150 [ 524.003903][T24694] ? sock_kfree_s+0x70/0x70 [ 524.008420][T24694] ? mark_held_locks+0xf0/0xf0 [ 524.013213][T24694] ? lock_acquire+0x16f/0x3f0 [ 524.017908][T24694] ? pipe_lock+0x6e/0x80 [ 524.022163][T24694] kernel_sendpage+0x95/0xf0 [ 524.026777][T24694] ? sock_kfree_s+0x70/0x70 [ 524.031287][T24694] sock_sendpage+0x8b/0xc0 [ 524.035711][T24694] ? pipe_lock+0x6e/0x80 [ 524.039947][T24694] pipe_to_sendpage+0x299/0x370 [ 524.044790][T24694] ? kernel_sendpage+0xf0/0xf0 [ 524.049589][T24694] ? direct_splice_actor+0x1a0/0x1a0 [ 524.054865][T24694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.061091][T24694] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 524.067166][T24694] __splice_from_pipe+0x395/0x7d0 [ 524.072198][T24694] ? direct_splice_actor+0x1a0/0x1a0 [ 524.077507][T24694] ? direct_splice_actor+0x1a0/0x1a0 [ 524.082784][T24694] splice_from_pipe+0x108/0x170 [ 524.087638][T24694] ? splice_shrink_spd+0xd0/0xd0 [ 524.092579][T24694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.098829][T24694] ? security_file_permission+0x94/0x380 [ 524.104458][T24694] generic_splice_sendpage+0x3c/0x50 [ 524.109744][T24694] ? splice_from_pipe+0x170/0x170 [ 524.114771][T24694] do_splice+0x70a/0x13c0 [ 524.119103][T24694] ? opipe_prep.part.0+0x2d0/0x2d0 [ 524.124258][T24694] ? __fget_light+0x1a9/0x230 [ 524.128930][T24694] __x64_sys_splice+0x2c6/0x330 [ 524.133780][T24694] do_syscall_64+0x103/0x610 [ 524.138376][T24694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.144279][T24694] RIP: 0033:0x458209 [ 524.148206][T24694] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.167794][T24694] RSP: 002b:00007fb1662c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 10:32:48 executing program 4 (fault-call:5 fault-nth:1): pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:48 executing program 5: r0 = socket(0x0, 0x80002, 0x0) write(r0, &(0x7f0000000000)="0de05da9ffdda46bb83a6331adbbeb07c2cf6201efc1788221c70220bbabadb932ba3d4c153291f999932d2b0652d918f6eeef132c5a95618ce657bd7272dd25851031acdaa181d3ba362a5475535695", 0x50) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:48 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5460, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:48 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:32:48 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r0}) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = msgget$private(0x0, 0x40) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/214) [ 524.167807][T24694] RAX: ffffffffffffffda RBX: 00007fb1662c7c90 RCX: 0000000000458209 [ 524.167814][T24694] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.167821][T24694] RBP: 000000000073bf00 R08: 0000000000010005 R09: 0000000000000000 [ 524.167834][T24694] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1662c86d4 [ 524.192166][T24694] R13: 00000000004c6fdc R14: 00000000004dbc20 R15: 0000000000000006 10:32:48 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x10080) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0xd5) [ 524.298460][T24972] FAULT_INJECTION: forcing a failure. [ 524.298460][T24972] name failslab, interval 1, probability 0, space 0, times 0 [ 524.331659][T24972] CPU: 1 PID: 24972 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #35 [ 524.339636][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.349681][T24972] Call Trace: [ 524.352994][T24972] dump_stack+0x172/0x1f0 [ 524.357338][T24972] should_fail.cold+0xa/0x15 [ 524.361949][T24972] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 524.367759][T24972] ? ___might_sleep+0x163/0x280 [ 524.372634][T24972] __should_failslab+0x121/0x190 [ 524.377595][T24972] should_failslab+0x9/0x14 [ 524.382096][T24972] kmem_cache_alloc_node_trace+0x270/0x720 [ 524.387921][T24972] __kmalloc_node_track_caller+0x3d/0x70 [ 524.393566][T24972] __kmalloc_reserve.isra.0+0x40/0xf0 [ 524.398937][T24972] __alloc_skb+0x10b/0x5e0 [ 524.403352][T24972] ? skb_trim+0x190/0x190 [ 524.407706][T24972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.413965][T24972] ? netlink_autobind.isra.0+0x228/0x310 [ 524.419595][T24972] netlink_sendmsg+0x97b/0xd70 [ 524.424363][T24972] ? netlink_unicast+0x720/0x720 [ 524.429298][T24972] ? tomoyo_socket_sendmsg+0x26/0x30 [ 524.434579][T24972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.440808][T24972] ? security_socket_sendmsg+0x93/0xc0 [ 524.446255][T24972] ? netlink_unicast+0x720/0x720 [ 524.451185][T24972] sock_sendmsg+0xdd/0x130 [ 524.455604][T24972] kernel_sendmsg+0x44/0x50 [ 524.460114][T24972] sock_no_sendpage+0x116/0x150 [ 524.460128][T24972] ? sock_kfree_s+0x70/0x70 [ 524.460152][T24972] ? mark_held_locks+0xf0/0xf0 [ 524.460175][T24972] ? lock_acquire+0x16f/0x3f0 [ 524.469527][T24972] ? pipe_lock+0x6e/0x80 [ 524.469546][T24972] kernel_sendpage+0x95/0xf0 [ 524.469556][T24972] ? sock_kfree_s+0x70/0x70 [ 524.469576][T24972] sock_sendpage+0x8b/0xc0 10:32:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0xc) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) 10:32:48 executing program 2: r0 = gettid() r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xcd0b6fc58c5a5e37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, r1, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) [ 524.496672][T24972] ? pipe_lock+0x6e/0x80 [ 524.500927][T24972] pipe_to_sendpage+0x299/0x370 [ 524.505773][T24972] ? kernel_sendpage+0xf0/0xf0 [ 524.510534][T24972] ? direct_splice_actor+0x1a0/0x1a0 [ 524.515810][T24972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.522041][T24972] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 524.528100][T24972] __splice_from_pipe+0x395/0x7d0 [ 524.533125][T24972] ? direct_splice_actor+0x1a0/0x1a0 [ 524.538438][T24972] ? direct_splice_actor+0x1a0/0x1a0 [ 524.543714][T24972] splice_from_pipe+0x108/0x170 [ 524.548607][T24972] ? splice_shrink_spd+0xd0/0xd0 [ 524.553555][T24972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.559793][T24972] ? security_file_permission+0x94/0x380 [ 524.565426][T24972] generic_splice_sendpage+0x3c/0x50 [ 524.570707][T24972] ? splice_from_pipe+0x170/0x170 [ 524.575723][T24972] do_splice+0x70a/0x13c0 [ 524.580083][T24972] ? opipe_prep.part.0+0x2d0/0x2d0 [ 524.585223][T24972] ? __fget_light+0x1a9/0x230 [ 524.589931][T24972] __x64_sys_splice+0x2c6/0x330 [ 524.594789][T24972] do_syscall_64+0x103/0x610 10:32:48 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, r1, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 524.599372][T24972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.605246][T24972] RIP: 0033:0x458209 [ 524.609131][T24972] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.628729][T24972] RSP: 002b:00007fb1662c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 524.637128][T24972] RAX: ffffffffffffffda RBX: 00007fb1662c7c90 RCX: 0000000000458209 10:32:48 executing program 2: r0 = gettid() r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x260000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='teql0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x7, 0x100ffb) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}, 0x3a) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001980)={{0x7e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'nq\x00', 0x2, 0xffffffff80000000, 0x64}, {@local, 0x4e23, 0x2, 0x3f, 0x57, 0x7c1}}, 0x44) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x3}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="57d20aa41bf1604de32470700e93d00961a48772d77e9119b500833e64d9de693d278e90fe21cb937c1af4488ec50ac88cc65a9e0e2c42ccd48da1a0232f895f25a2e2286e92dc43b41791cf8308a4cb412bdbedba482e8f382cb50469b4c8bbeb9cc8ec1c639c83c5752382b0f36ad2df1336d4f4", 0x75, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000001a00)) r7 = add_key$user(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x1}, &(0x7f00000018c0)="77f892c1c50e276170879de0f21c56bf294e702c3bcc94699b6d047d4eb6a2050bccaf7dd49c8fc1b6eb7985059cabfa0d3599879ed2a5aedb8693393c9fb16a210ce4cc546dbf3d6c2516b347f56dba290eac691ae5b037cb563df0a58101f7b7b47ce0229c6637dc101af7ccf273d1279d05be8cbf529e762e2189373c285985481a960280363541e51e8e3873b054fe1f75d56a73", 0x96, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r6, &(0x7f00000017c0)=[{&(0x7f0000000300)="80376a457ada90f9d984c64d848828d1282e46c13160749077da6199bfe66a1eb86a9dbcca8a0e7dea486aba9b3dd3c724aa417fae4fa8a9f3b0af011a049989738de48faa7f848884cf741db7a0b6f6c62e906fb3c1238dfb077739919b52f3117102cec7de2b37ae2d1b3906f6511eaef638bddf2d0bd52b16ee031d05a0bbff1cb64be3c2e3d72c5140f081a2d2806ee6f896e194cad8be5fe8fa598d919e6a6f138cff72eba90b728fff6fe278ba7292c1c46ce06436cc4ffcb257bbd992bc397b2dcd3c700c6d61a8dcba3cfaf1b305d9d5234fa5892db0118434caf641ae", 0xe1}, {&(0x7f0000000400)="252e86e5ede9ebed3cd63fcf03f912c412153b82ae6a1a161bf87c43767f9a1455dabeaf2b20929c6e9a42156ab09e48764ff79f3f", 0x35}, {&(0x7f0000000440)="1d37364349cfb7fc9c1d706dfd95c8dbc724", 0x12}, {&(0x7f0000000480)="be3a9f321454998386809fa746860c12fcdebd7254cbf251776c64d8ef372238a805ab7f93b0036b6f2666c403140503b13dab198fccca6b93facce061a58ed8f5a52938eac4ff914238936bd29004c1371f7558fe0bf5aaa247a578626f426e88ae7894c770a98176a6a55a18ba4cb0621677d9f79971adaf89e7e094430e52ee7d6d8254bd02a88b93bec1c975f636", 0x90}, {&(0x7f0000000540)="757bdafae3d6691fe5118cc194f7df75a39dac1f36e9d600aec4e016e31353bdf993bfb41cfdba7328bc3dcec03f494635a86cebbfcb532915cb673ef0ce8c8edf065dca47b832a6dd75978a70b84c6fa1f77ae1dfb580b83e51c2b0a747f4535f081f7ba7e420e03df925f08b775ef0285122da21c551b37790103b662d4200155596048ced585fb3dd1b7b71fa20", 0x8f}, {&(0x7f0000000600)="0fa91c23f0712984d0b859a3ee80860f8d8a8832bcabefecd43c3349726f0b8e2043a4cc2db9b34b7f5ef875b170b44667af47fcfdd4d03f99b5ae03b6cdc400a8fea659a461aa11ece2d0531759f8184ff579f5945e46110f817a41d1c938fd85947924e81b823388547f54bc444bad8c6b2fc3c499b513e724ec6f223cbd81510511d1d9862485cc8bde4a43c3378675d87176d958a380454ffddba93451c46c7e1304f81301ba5ba73dd3cc48b92151785d4ecbc20b8d85dad0b293f96e433d2a19446a8962b70753c4ece519ab1203e84288913af4394376b6811c17a205914c2cb96854ab343bd3201c", 0xec}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="8f4360bf322ecf060153a66a8dbdb39b8d6dd98f320a4cc05c12c067a0e7a5fa45c80264e47ec9dd06fd62e1b26a20c64d17104994027dc45f9821453fd9919efc7a29fe4d5127358762b33a7964ddafe9881b79a4b08072f2498813ad78fd27a652e0c5356d87ba7e8efde8af087245b6f355c46096f8bb07b946b31a573e805cf1914d9babbf30bd47915e0c2d322c38fc459be2ac6d569b6d04bbf6b4648f2fca9b1ce289ea0c", 0xa8}], 0x8, r7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xd0080, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:48 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40046205, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 524.645113][T24972] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.653084][T24972] RBP: 000000000073bf00 R08: 0000000000010005 R09: 0000000000000000 [ 524.661041][T24972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1662c86d4 [ 524.669029][T24972] R13: 00000000004c6fdc R14: 00000000004dbc20 R15: 0000000000000006 10:32:48 executing program 4 (fault-call:5 fault-nth:2): pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:48 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x222902) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:48 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 524.790998][T25187] __nla_parse: 18 callbacks suppressed [ 524.791017][T25187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:48 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 524.838466][T25201] FAULT_INJECTION: forcing a failure. [ 524.838466][T25201] name failslab, interval 1, probability 0, space 0, times 0 [ 524.892455][T25201] CPU: 1 PID: 25201 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #35 [ 524.900436][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.910487][T25201] Call Trace: [ 524.913783][T25201] dump_stack+0x172/0x1f0 [ 524.918113][T25201] should_fail.cold+0xa/0x15 [ 524.922704][T25201] ? __netlink_lookup+0x3c8/0x7a0 [ 524.927739][T25201] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 524.933539][T25201] __should_failslab+0x121/0x190 [ 524.938474][T25201] should_failslab+0x9/0x14 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 524.942985][T25201] kmem_cache_alloc+0x47/0x6f0 [ 524.947774][T25201] ? lock_acquire+0x16f/0x3f0 [ 524.952448][T25201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.958687][T25201] skb_clone+0x150/0x3b0 [ 524.963791][T25201] netlink_deliver_tap+0x95c/0xc00 [ 524.968908][T25201] netlink_unicast+0x5a7/0x720 [ 524.973666][T25201] ? netlink_attachskb+0x770/0x770 [ 524.978771][T25201] ? _copy_from_iter_full+0x25d/0x900 [ 524.984149][T25201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.990396][T25201] netlink_sendmsg+0x8ae/0xd70 [ 524.995183][T25201] ? netlink_unicast+0x720/0x720 [ 524.995215][T25201] ? tomoyo_socket_sendmsg+0x26/0x30 [ 524.995230][T25201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.995245][T25201] ? security_socket_sendmsg+0x93/0xc0 [ 524.995259][T25201] ? netlink_unicast+0x720/0x720 [ 524.995276][T25201] sock_sendmsg+0xdd/0x130 [ 524.995292][T25201] kernel_sendmsg+0x44/0x50 [ 524.995315][T25201] sock_no_sendpage+0x116/0x150 [ 525.035838][T25201] ? sock_kfree_s+0x70/0x70 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 525.040339][T25201] ? mark_held_locks+0xf0/0xf0 [ 525.045158][T25201] ? lock_acquire+0x16f/0x3f0 [ 525.049848][T25201] ? pipe_lock+0x6e/0x80 [ 525.054092][T25201] kernel_sendpage+0x95/0xf0 [ 525.058678][T25201] ? sock_kfree_s+0x70/0x70 [ 525.063183][T25201] sock_sendpage+0x8b/0xc0 [ 525.067593][T25201] ? pipe_lock+0x6e/0x80 [ 525.071830][T25201] pipe_to_sendpage+0x299/0x370 [ 525.076672][T25201] ? kernel_sendpage+0xf0/0xf0 [ 525.081429][T25201] ? direct_splice_actor+0x1a0/0x1a0 [ 525.086719][T25201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.092959][T25201] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 525.093607][T25383] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.099026][T25201] __splice_from_pipe+0x395/0x7d0 [ 525.099042][T25201] ? direct_splice_actor+0x1a0/0x1a0 [ 525.099067][T25201] ? direct_splice_actor+0x1a0/0x1a0 [ 525.123859][T25201] splice_from_pipe+0x108/0x170 [ 525.128732][T25201] ? splice_shrink_spd+0xd0/0xd0 [ 525.133676][T25201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 525.139943][T25201] ? security_file_permission+0x94/0x380 [ 525.145606][T25201] generic_splice_sendpage+0x3c/0x50 [ 525.150946][T25201] ? splice_from_pipe+0x170/0x170 [ 525.156004][T25201] do_splice+0x70a/0x13c0 [ 525.160349][T25201] ? opipe_prep.part.0+0x2d0/0x2d0 [ 525.165474][T25201] ? __fget_light+0x1a9/0x230 [ 525.170181][T25201] __x64_sys_splice+0x2c6/0x330 [ 525.175043][T25201] do_syscall_64+0x103/0x610 [ 525.179640][T25201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.185530][T25201] RIP: 0033:0x458209 [ 525.189426][T25201] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.209023][T25201] RSP: 002b:00007fb1662c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 525.209036][T25201] RAX: ffffffffffffffda RBX: 00007fb1662c7c90 RCX: 0000000000458209 [ 525.209043][T25201] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 525.209050][T25201] RBP: 000000000073bf00 R08: 0000000000010005 R09: 0000000000000000 10:32:49 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 10:32:49 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40046207, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 525.209057][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1662c86d4 [ 525.209064][T25201] R13: 00000000004c6fdc R14: 00000000004dbc20 R15: 0000000000000006 [ 525.256673][T25390] binder: BINDER_SET_CONTEXT_MGR already set [ 525.289577][T25394] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.290072][T25390] binder: 25387:25390 ioctl 40046207 20000000 returned -16 10:32:49 executing program 4 (fault-call:5 fault-nth:3): pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 2: r0 = gettid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000340)=""/235) poll(&(0x7f0000000200)=[{r1, 0x200}, {r1, 0x80}, {r1, 0x9002}], 0x3, 0xf1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x9, 0x2, 'client1\x00', 0x4, "dc37c662fe5ef582", "95a3320b9391d81b9c3882dfd7a7f19e12a589fba1dc21e1dfcaa8684fe19564", 0x9, 0x5}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:49 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x31, 0x0, 0x5}, 0x1fffc0}}, 0x18) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x4, 0x1, 0x2, 0xffffffff80000000, 0x0, 0x7, 0x800, 0x1, 0x5, 0x4, 0x6, 0x7, 0x6, 0x8583, 0x5, 0x0, 0x10000, 0x10000, 0x0, 0xffffffff, 0xfffffffffffffffb, 0x9, 0x5, 0x100, 0xf6, 0x8, 0x3ff, 0x200, 0x51f924ad, 0xffffffffffffffff, 0x8fe9, 0x100, 0x0, 0x108c, 0x9, 0x7, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x3}, 0x1030, 0x62, 0x8, 0x2, 0xc4d, 0x10001, 0x934}, r1, 0xffffffffffffffff, 0xffffffffffffff9c, 0xb) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48844}, 0x80) sysfs$3(0x3) r6 = accept4$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, &(0x7f0000000380)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001780)={0x0, 0xffff, 0x7fffffff}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000002c00)={0x0, @in6={{0xa, 0x4e21, 0x3, @remote, 0x9}}, [0x673, 0x5, 0x20, 0x2b2b, 0x8, 0x1, 0x0, 0x0, 0x7, 0x5, 0x5, 0x6, 0xffffffff, 0x7ff, 0x9]}, &(0x7f0000002d00)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002d40)={0x0, 0x1000, "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"}, &(0x7f0000003d80)=0x1008) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003dc0)=@sack_info={0x0, 0x7f, 0x1}, &(0x7f0000003e00)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000003e40)={0x0}, &(0x7f0000003e80)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000003ec0)={0x0, 0x3, "78a136"}, &(0x7f0000003f00)=0xb) sendmmsg$inet_sctp(r6, &(0x7f0000004080)=[{&(0x7f00000003c0)=@in6={0xa, 0x4e22, 0x6, @mcast2, 0xffffffffa7518357}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000400)="65222ca2b10c1d1cfc1559c5bd9077ce5f0ba3a4a0afe81879d8da2825013059f5a021991cbdfa7da51b258f1afa5f07d152700bdd91ca6939a2b557b7e17ea0937f49e6078a959bd1ba8344c6e5a06a", 0x50}, {&(0x7f0000000480)="8bc42e2915d91f2a360e62dff825240bb6d62909e02569faa0db788ffa81a796259f08243fd5fa9c5d60206863ba3e462e9d1a21932b11ef49e790da9424f0d7b596966c76b4d17364f741f64e8132d845833a68b491577f34d39983ec60c25cfa14b80ab532a73652c5dd83a53ac2e47ef6b4c1784facaef7a9c438498e33ac74452787806b9f2e7ef98e50446a964f4a582c39ec986f731293ea7bfd30a09274f245cba093f3b61b47940732d5183da7e0db86ced5486a2bc18002e50ab6982ff5ccaf75dcb3d33aabc404c11a1b35565ff1d24190767ed74f843096f9463e882e1e135db3115b67ba7c00bae4d211d47eba945992fb364b5ad58c638020fec40a8af27cc990263aa39e56bcfa9d41861350c2a9338fd24e42e2474f6de49f46dc9a98fab13e309e69a199d4cf5355b2a30ae09d41c688f8d6ed74ab52bff614ff4259fd6d6a9d4c4f4bbdc9926e3a36fd90346a3042a3c269c4ab596bf3b600bc13cded41e256511f649a801a21fa6f44d5b7e3904bd7de6de48e7d1a436cd962c8731141b7dc54fd9b9aea5e2694e76f17419660e853f3c97641cdd50e48618653568b1bc1b6d9e4227d61cfb1f7623c958e3abeeab3f6029cf90de5c6c02e468922cedd5c0955e61c580b54b890c60a33a04cece68644b208441944c66e4ec1a531aed27af29e71c6f03f594298ba942fd8a22419295594eba0d578c3c290b173b95febdb79758d1825f186acc2b0d027a6ee922255e3ca1b6cb5c89d41e236fb693b820db7f850723c3cf08e7dbc04d6183e15d6ce4b99c8a86a27405e32436d73193ff71d40da558e082b9ca6fd9e94dd2bb8f0af6332f0b6e1c5fffafe6526a60d8a5a78b12449bdd07e76a98c2ac5f3f2573b8232caaf5e1c27b146997768158cdd2ca837ffd54849bb607209f3835b9f233101c3e4d730bedb36db2b7ddc8ef668d44d4b34bfc4c2ffad54cb9bef08e8e29bf58a73680fde242cac0c1a474bc1e1f53d79d3864234cfca45b7e30701727b8c54b3191e65e63e012dd5ee92b30bec1b657fd2034caeaf9411c67bfa91c91e458c8688edc321e0ebb68aff60cf6b95db3571ea9b1d76eeb66ba36c37418ea856063bf690fd2fa81edcb77d809d82a1665c01a8cedd87d0fdf4a0d3093cfab100e5067c810835832e17acda1734cb4f703d88c799838d3d3815dcedd8c706157642781566b80f282a60b1889011a6bbde2b530189adb07f07850d4f27d0d99c5ca9ba946b982bb51dbd8627c2c0a43188daecd363842e6f7d63eaa45805565266257f2573819b09b174714b4d80c809c07e510fa1a0c22c156dd8bbb246be380c96b610df1930b6b6ae10de68dd49ca39ed15ee0ee82aff1e9bf0e2d22adb0cb8d4aa5d61035c783ba3a77f5619432957e1514eb309c40cd3e89ded2f2914f43f0f2ef613d021bdf8f6981ad186ac8bd51f70a8064e93d3d74ef3208e9a8e5549d1380ee4a8033caee4b22d8e061febb2abed574e9b52e839e4e7eb1dcd8a6928aa0f09ece8224d3f4cb54504b70e74a49e56cc6dc162781be9acdbb2ba59e479c6d274686ffb51ffc9c650a638b3e18fecd0903a583fbbebdb30d92e7ea3c911c2f56f6e3f754ec0eabc09b96253e75455fa2dd1a888b932d9c25c3f00d67bffd373b57cceab6fcdafa6581871454e70a6ffd4b37bad37afaf1306297838b9b923b041c68366c22713d2ff62bfd018b1beba00cdb097a76043d9d5d25b34854d6cb7c54d2a10db46b81359f75e0808b5efd380a5aabfbdea45972adaf53c742b1ac6287f71e4fbe8fe66797c2591e9418a43eebad6d0cf11c3918722ba6848815f93d9b7e472bf80e4693a6b4f7b8493c3a4be501977ce8166c7ba2f0182ac3f65c50bbd35da54160fd3799f28b9a6cea87c13569b98b75f06c7b0d7ced654002b27448f8fa14d2ea5e90caa1e50341aeab16d92de5db2bca335fe9235e009e8cae2608e6a005d97a358b176b1200a26136ac44cf510734261bdc545b31453cc5ad17b36072bb7d1dfb4d9910a4f47b8889b0d380a0be384aa9d7f1f1e87bb91e9bc668dc2a3d8976137a317d03416e40c243aee76026e483463f9d03b5c2dc26b532699f965b565e66a9b96778cbd5f3a3f1a497b998d3e305c6b5e4eb16e2e3415460241b471325c91e4aba3fffdf27c2a67c9419ef968c0ba18c03a5d9e7ff89a2207eb8c867e21a1fa646c85a235974ea1c1e1e3915b71c73b64475c33583e2106c2ac91b37128e51ed3722bd98d90b478148241ad3db3fc02a2b41df9b5fd9e90e3785890adf72199368459ab7471d32d922362799c22c577a638749a0552f99616961b0c966fd0c405b12093b5d52131fbe15239427f8e757e001b49b4351d56ac6f434fbff7a7c27d5427b9f223263f3d987f47a07dba6793eaeec90e8afd047c345b0bac4bfa43b7d30016a76179f6becc7e8eb3c83a6622bb9946d9d97b927964c4c358043d1c5b2423b082bc9924ce22b2988f2743a99c6cf28c91d3efbce8f4ea673de58875dda39d21142d09c8c2af7863204562ba5ce45db820a3bef0eb2f03c50d3ac01dd890530f5c3af968d39e93edc957f7735599f2d20eec5c9bcbd1bd29496fcabe9a6c5011232bbec7b181697cf90853c01310e656f453b933eaf97d29aca32d7828349d5f84f8eb5966b4476a543f7f43539fccdb0b074a8b1105e2e25e065d31c722bc075daa114aaf8e649c725e29ffc5875e5ff87ae1df66d536694815f82e9e38a6eaf1304973f24526a25587a77e9153a927e41967b6cedee6aeed898a6585e41e09b3bff890e2d9e618aee2498c7898dde9e08ac20860bf2a16310c7ab01843c5bf59439dc88889d8072416c983cf7077f00a5438cf2cfad984774300d4b3ecb3ab142ce127c6f4d86f11da64a794655f2f0ad093978b65870fc458e8798a91fb41c445ddac67ee9e4cfa7033915934be157aaf6092613854f8d433f38eeae256520d4e06a517645ffb5aa6da280d4bdb7e463872c10865f39bd88aedff63120dd9d31ebb827589f2e5ea67bbedb386d21c571e1bf344f33ac68cf539e3b0d841027259a80b6df5963e542541c178235615457eb0d4f64142d6c5577cfd72f060ecf0adf2f661a883731d45189be2bc325be790c12dec4bd6d4997620de03ebfe1e98b846fad9315882d1b301319ef97e245cad560f26fee67d877fa64e3e982b92be02bcbde9b3f96d95c082f8b1338c79f5769a4a38cbd998ffcbd846d8f72a6a1331937668ab427a0232ab94bfa2b5c13611305d5c22ff84ba0c1d1c7b947b069084c752640af43bd8ffbf0a3523d7d41b40d857112cb1f650378d8fb67ce540d214d32fb414d0e31f17dc8ffadd6ee725fc0aef9901cb9ce1e21bb8ccab6cf0ab5001347080c913e03a4549e3c0cb2e7c910fa7b2794e0020ab85937e06952e565187ee92d7e0041d84698f7da2ab4feecef473dd2a1fe0ad1ee4db2ec8357a400445625660bd3bdf1917900d5946543fa9e0ddefdfd230164abe41cf801bb654d3e927e133b52a1318ba737dcfc60a25e2445800bc14b6882ee4c8535a01dccf6df7059d8b9b58dbb17f6bd69df8240ca0e12293201d42838eef2131581e7eaa3eea8c905f6d2e1fa74a699a821f0f847be762554e5a2f048c973078ddab69812ea11337423bad66039896b4587d5c90538c28128e20264752b0d74dfae33017b90960e0e933d60c19bb5d002e6cf0940be400298e9848261fec907cae8883140624d1e37171dc76468ab01d2bda77c03fe78d9af8908e6cc9b4cfdade0290735a3d769550c54970533ddec83c1c10deb7e3e927e6d0b43710125372d4f5b89df5730bd73c2679868847f2260a467bb2b3c64dc749fc95c6cc197ba31b321973fb2c5666e1c4bc98d23772c7a29c73d570c62e1a1bfa42204dfc6b4cbed13863cdeeb14d97fa68dbcaf05cecaa70475a8042ee47df6260af58aef15b3789e8d1ff9643cb17933a889b29d1dd63b4060e6b6bd6d7673307a53f854d5599a0b7c7ca76c193add12be206bd352af7020816d73dc8111dbfc22d0d52d72fdfea3c5f4c1076dc0bfbb6e7c94b610bda74d8a7b204412bb98132a2e56094542a98802128814cac6b099a7ad1b4ac32316fbe95456480f4e2f62be99462054499326bfb88924b978f33688d2bd4e9f3b2b21ed04cb14ea247471681fee3f35bad7dee24b2e698fef8c9efcc14a00d31e1bb1bb5a8e50d0da3d9085ba240149d93faf2ccb4e737ce905dddd00b16fc3c6e49afab83a2dfd0b5e1e5681d65b6785dd1f3c45c5e5805fb1f17c689dd7a0ef70ec0065741ccdc6d77a786c0a61e242124b04ca0e2984f041b417ac7e8bb4aa28cc892b2dc85229d47a98446ddf951f81908d9f7934c0a8d91472060b3021d1ba3c59a0b23767da7635a5ac6ce11902cd3d1750edddb54ac759b73ac7829742703f7dd416fa496f94d7e44d6eb7cba2a581f16913e95a099e8a0d9ec4ffa1673391cfc098ad69b069b0e2711022c89de9bf1ed37589cc32f905d2f822a175dc2f6c3be87b0a4dab8b57bba3d0322e4d7e2cad7daac9238d61e542f3c5be321c89e11fa09b210279740f00fb9a51cbbb964d022d97ac87e7e804f4ee6525e40770aba32b341812f5e1ec9a784dbf1db3efebd09e9fa383095fe5239a5fb2ef2956dafaba846863ed5b05728d9dd4f4e03b0acb57a63190903e7fe2fcdb2cd286b9dd66312eea9e14b99e10e93428bd77cbcffc4be084367e75ae07bbcb8a49bee6cee78a025ae6804cfb1941dccffc1ef54069389bd710d770f3f254a23bbbb00732d51b8fc24bbb70d25f4229dd460fd10d5f673843bbb2934d61a6ea8c8e06e30668a826816fcd4a18ee05f39a493b62b01e772ca1d836d327d14e5472d238ce6b1c92b006ab983f2bd6a82595af747ff5510cffe8db0d66e9d45059f0efc58af897cdc1bd84bb909c03990d0af0eb948bf397b565e7c3131bac2c365d74e2b78f915865a6eab75a969e3b1eb97f872e20543c4ffd91063c6acf57b6ecfa38e5dcf09ba379d8077ab7f501c9956dc6f8492619240447e08c57d6cc9e60e300a1e65559a8770bce20b42a070e14f61225d698b4b49bc3a3e296aec25907efa202b6783679dd8f848ccc2fde17331026de2304bd7f82baa871c963a7197daf7d0af5b5ed55599de851f96ffcc6948dcdfb1bfce34504b29d6f888ecdddde777ecc6a287d3f8a7d803d3b91cf767f9c1f977095e1ece72a48e1bc1ef936257bf367cc50c0ae947c5e7c88c44e3f6d759f75e5cc0a60654172f1f6669e3abce82fb3fdc9680739587fd55b373308159385578c61abb71bc72345ae3ac888ae72347d645c9c451f165184059ccc4f0efb6e91c65316e221e9e3cd2d9eb0ec84859ee36a18df469d991c6df81e9f89d52a6865835a9b64c70739fcbdbbcab00ba1e7a817e9c14a268dbbef8d43711e5a1c795da403ecf6306ee3c315928f3ce21c66bdd8f1dcdcc781b5908d0eec8166bbdf8de35507da0cd6ef69b0668f80f65c7701c8dd8915d37015adf456f18c1e6dea77c65d5c1ee5e9cc5834f64b29992b37ab615d1bcde3197c3b8071c2f68b46433ec8b618f165f8f33e44f76d59c03e82de8f0a984cc3677733fb0dfbb932346133d104fca7bf6bfd427edd6689eb1d7cc25b014bccbc20b2554138807b80ccc92d0354f1bbb2fbebbd370211bf962c769bc034883d26e9013c33a42e62c1e9d4e49bdb893e1d55f9795543e13f2147c9c9ae69031d9dca190fa3d5b45", 0x1000}], 0x2}, {&(0x7f00000014c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001500)}, {&(0x7f0000001540)="5b0e74673abbf9f2721f9a0d79bb979ce933cd3f8ef0c7993e0e7b98a5150a148ac794a97121541ca6dddce205fd4c5c97bafa1ac8e7f0881a21451a76ec22014febd54b037e1f19d5db40c6d84b0e5626f2f0fc0cd1ff5d31aa41a80823bf4501fab511e441601a791870c12da52cacad62d5909b6ff2ff680fa85cf5e130e9079f71ca5e34c8a2af76be930a", 0x8d}, {&(0x7f0000001600)="968af3f56e9be5a4645a7bde6b27b93fb07b91898cf3e46408f49904ad41f066ee2ff89235570948c394339274f0678915ba5c3f721a2117f576fcacd5b2cea43dec551a1456c8a1dba6bd2724da3834ea4b0bdaf95b8c9785f00bc0f764210713ebbacf35dac6e421081705b3d75508e240ef231c2a", 0x76}, {&(0x7f0000001680)="01cd835f0c8df7747e564bac037f4be3d737da66457f878c9f1de9a5bf5ee9b7dc4b4e729123d35ce4b5ca4bff15bdf638a4bb63eff5e9af3e40524f719d3df88dc011f6329822bc6e6557c99f93c281b09a389b0f5cf4f7ee87cb3d4ba0636320e7720131168e67c86692a1010f2d93957278911b6d43186b5bb3c5ebed93ccd7", 0x81}], 0x4, &(0x7f0000001800)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0xb647, 0x65c, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x422f}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7ff}}, @init={0x18, 0x84, 0x0, {0x2, 0x0, 0x80000001, 0x40}}], 0x68, 0x200008c0}, {&(0x7f0000001880)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000002b80)=[{&(0x7f00000018c0)="f3ba1511cd9f0964976121436fcd2fa458729c083cb7cf36f137c6596d458ccdd68c93ed3df911bb8b96d7a63807dfe978fc845b944f2861362cd5220a1f1662bff33031d6a012c39105e21bbe13f333ac4528c42d16bb04e5df71dfb98d870c45a155fc72d7b4f51eb50b6f777875dd7805fd1285239bb57407b412f17c3084602a2b241a120c78509b011a78aae8e8d0b9d64d713e415aa18e7e44a92823ed15da", 0xa2}, {&(0x7f0000001980)="db89ff782adb0761e5f739761ebcf0e3fd541195502f51aebdf912d3cea3ffc84679f7bf4e650c00f5b67e2a04ecbc7a6f2e1008849e1479e70cce3bf353774ba4246f72204df396c3a1c4e55a080c72b3e20eceb917487238dbdd5f0809c6e91cc6487da3daedbee9428c4631a76b2ce1f5d10672", 0x75}, {&(0x7f0000001a00)="93a767d943bda7e236135ccd7628d11964aaadd5e9774dbd72d4d8a0ac9eeeacecde34f15a3c747fb17abae4b82da2a66a2ca3593372867d83a3920e75dd19f6245873bb38e545aed3d51aee9cbcbd2e2b1eabe0a2850bc7bdd6c9b314edaf2ada676bc728433e65d595", 0x6a}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="27f78ab101070d5c244b091e524378525746b7863d9262bf950d95", 0x1b}, {&(0x7f0000002ac0)="7a1bfe70ff6e454b9c93218fbf05ab79682b828dafae9cfe44e255ea805bc3c9dd77046e5207128975e53ce28c590a7a785a82b3e536aa114bfdb0396aede8e49dfb8a370c0f1bf389d432fdfcf2cb4a30aa7d19d96961c7b4cfb89fa079b921611000d4f3f5abe1e76b846a7a9adcf39bfe97e5a3e783f7df104dbb8badc7fc0bf155f78a871bf0b1ca8d8aa8e0847c49a9ccd9c471e4ded53553343ead", 0x9e}], 0x6, &(0x7f0000003f40)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x27cfeeea, 0x2, 0xffffffff, 0x5, 0x7, 0x100000001, 0x3, r8}}, @init={0x18, 0x84, 0x0, {0x800, 0x6, 0x90000000000000, 0xe70}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x7, 0x1, r9}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffffffffffc1, 0x9, 0xffffffffffffffff, 0x7f, r10}}, @sndinfo={0x20, 0x84, 0x2, {0x80000001, 0x8, 0x5, 0x5, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xd3, 0x8002, 0x4, 0x4, 0x3, 0x4, 0xffff, r12}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x108, 0x40000}], 0x3, 0x20000080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 525.454692][T25489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.469302][T25492] QAT: Invalid ioctl 10:32:49 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40046208, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 525.502864][T25489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.531875][T25598] QAT: Invalid ioctl [ 525.536102][T25598] QAT: Invalid ioctl 10:32:49 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) ustat(0x2, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="0200fbffed000400080004b032c6b85e3551443ae5e60000002aff7f0100b0297c2e5dee029cd4b1bd7a96a7dce150284e059c81893c92af7af9009252d321f8e2230524c6d37a99ada234323c2516938511d6c56723171f0c4c80e2d75e752c42a764a3264bc7a277fac27b6aa7958aecce6ce5fbb011bc956ab969c29e31a7b72dd3a0ae464cd60800006662cbd8713003c0b296b876822e9b498d0bad95c3d7bbbc86807176f106210d0e598d4941ca1fe28e34597dd786b6248590e37e6a69608dcfffa512171a1c82df2badb94daeec2d3a98de4797357ce4a7899eb4fafbdd6099b6ff"], 0x16) close(0xffffffffffffffff) r5 = dup3(r3, r0, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000000)={0x5, 0x0, [], {0x0, @reserved}}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000240)={0x3ff, 0x200, 0x1, 0x101, 0x4, 0x8000}) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) sysfs$3(0x3) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:49 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40049409, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:49 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x1c, 0x0) [ 525.724299][T25492] QAT: Invalid ioctl [ 525.728991][T25766] QAT: Invalid ioctl [ 525.741071][T25598] QAT: Invalid ioctl [ 525.741734][T25729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:49 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180)="7c1f842ef11f9da055cf9b6f111b70a455a6259694e356a8f8730c36023194cd818a3da74d00df5011d8e57f3406cf6dd828fb7488a0b5d19679acfd6bc1225e97319ed8cc5850ad", 0x48, 0x8000, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x1f}, 0x10) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x1) 10:32:49 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:49 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0xfffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:49 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:50 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40086602, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:50 executing program 2: r0 = gettid() clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4) accept$packet(r1, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:50 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:50 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2) [ 526.026351][T26086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 526.145005][T26164] binder: 26162:26164 ioctl 40086602 20000000 returned -22 10:32:50 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:50 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x10003, 0x0, &(0x7f0000fff000/0x1000)=nil}) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000000)=0x1, 0x4) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000000c0)) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x4, 0x1d2c, 0x80000001, 0x40, 0x0, 0x1, 0x100, 0x8, 0x9, 0x8001, 0x0, 0x7fcd1e62, 0x1, 0x3ff, 0x4, 0x8000, 0x0, 0x7413d515, 0x1, 0x8, 0xffffffff, 0x4, 0x4, 0x0, 0x1000, 0x2, 0xffffffffffffffe0, 0x3, 0x1f, 0x5, 0x4, 0x3, 0x4, 0x8000, 0x2b800, 0x2, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000140)}, 0x14000, 0x2, 0x889a, 0x7, 0x5, 0x8000, 0x100000001}, r1, 0x6, r3, 0x0) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 526.194573][T26175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:50 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) 10:32:50 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40087602, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:50 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 526.425486][T26448] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.439816][T26488] binder: 26487:26488 ioctl 40087602 20000000 returned -22 10:32:50 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa) [ 526.542735][T26693] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:50 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$peek(0x3, r0, &(0x7f0000000000)) r1 = shmget(0x2, 0x2000, 0x54000109, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/239) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:50 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x80000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x6000, 0x0) write$9p(r3, &(0x7f00000001c0)="bf5e6eed1c079668f837760d0f21e5927e785e1aafc052c3c7620bea23fba3b9aa245b0726e26c789c4d956a5714bac4f0d0ef563abca61408fd337f75073c2b5012103793f264a389727653b99ee237900765cb65abc6a497747d87fdb1d94d73f7119a1ad847018313f750927f2d49f621e8cecfd9880ef115298bad7978d7504a1f68bdab620f58f3a540b9648878f6635bd94c61a7ff57622b9f1893a43cd9fa018a0be35f25b0604035fe90f9906f1ad0fe69b8cb7f85963f1717f9d6053f63760b6cf3", 0xc6) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x1, 0x8}]}, 0xc, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:50 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:50 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x4018620d, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:50 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 526.947059][T26809] binder: BINDER_SET_CONTEXT_MGR already set [ 526.980880][T26809] binder: 26805:26809 ioctl 4018620d 20000000 returned -16 10:32:51 executing program 2: r0 = gettid() r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x368, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x170, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4cdd6f11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac49}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff433a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr="e1a5b2129c5cfd4417bcc5c5037f05f5", 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @broadcast}, 0xce4b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9f0c}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf7b0, @dev={0xfe, 0x80, [], 0x28}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @remote, 0x7cf3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:51 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0xfffffec5, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:51 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:51 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x4020940d, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:51 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8400, 0xc0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xffff, 0x4) accept4$unix(r1, 0x0, &(0x7f0000000080), 0x80000) 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:51 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="2970b29990fdb3e416bdd5d43e7979e792750cd227207cacd88fde67aa892121458202283655fe12bc5de820c3d2e1f428c3215fc3ac32a6d83a138d7a994f123b8c03a24c81094e179aa8") 10:32:51 executing program 5: r0 = socket(0xb, 0x3, 0x1) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:51 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0) 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:51 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x80086601, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:51 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) getsockname$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 527.610132][T27480] binder: 27473:27480 ioctl 80086601 20000000 returned -22 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:51 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(r3, 0x29, 0x3c, &(0x7f0000000200), 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x81}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:51 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0) 10:32:51 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @remote}, &(0x7f0000000200)=0xc) sendto$packet(r3, &(0x7f0000000180)="601113d41fe07378e12e6646557b726c6b8c69ff", 0x14, 0x10, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x7fff, 0x6, @remote}, 0x14) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf25030000000c000200e337a877000000000c0003000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000280)) 10:32:51 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x80087601, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:51 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 527.947082][T27895] binder: 27890:27895 ioctl 80087601 20000000 returned -22 10:32:52 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x7f}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) fchmod(r1, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf2, 0x7, 0x400, 0xfffffffffffffff7, 0x0, 0x8, 0x8000, 0x3, 0xa49, 0xfffffffffffffffb, 0x1, 0xe0000, 0x4, 0x6, 0xf8a5, 0x10000, 0xd56a, 0xfffffffffffffffa, 0x3ff, 0x5, 0x1f, 0x3, 0x7, 0x81, 0xffff, 0x80, 0xf16, 0x9, 0x6, 0x2, 0x7, 0x0, 0x71, 0x4, 0x5, 0x3f, 0x0, 0x5, 0x2, @perf_config_ext={0x401, 0xb3}, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x6, 0xf50f, 0x10000}, r0, 0x4, r1, 0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x4) 10:32:52 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:52 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00) 10:32:52 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='/dev/vhost-vsock\x00', 0x8c2, 0x1, &(0x7f0000000040)={0x81, 0x7, 0x1, 0x8, 0xffffffffffff7fff, 0x0, 0x0, 0x101}) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:52 executing program 2: r0 = gettid() r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x20c000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7f) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000040)=""/233) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000180)={0x81, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:52 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc0045878, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:52 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00) 10:32:52 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:52 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc0045878, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:52 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:52 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00) 10:32:52 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0x38af5e7d0ad173c1, {0x4, 0x2, 0xffffffffffff6a07, 0x7}}) 10:32:52 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffc77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x406, r1) getsockname$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) init_module(&(0x7f0000000280)='proc}securitycgroup-\x00', 0xe0, &(0x7f00000002c0)='vboxnet1nodevproc:vmnet1lo&nodeveth1nodevminr=\xcfme_type**)\'trustedvmnet\xaaz3\x054\xdc>\xdc.\xc4\x8d\x8d\x9d O\x03\x1cp\x90\x87\x17\x88$\\\tZ\x97\xf6\xb9\xcf\xcb\xff^k\xec\x8f\xd2\x1a\xb2^\xd6G\x11g\xd9S\x00O0\xc3\xf2o\xe9\x9cE\xc7\xf8\x115T\'\x95\x9c\x8bg\xac]\xf7\xa0:\x99\xd8\xc7\xf2\x15W\xe0\x94\x8f\xe0\xdd\x8aEH~\xd4\xf3\xd1^\x12&\xdd\xa9\xe8)\x0fp\r\xe8\xda\x9c)\xac\xa6\xa2\x86\xd73\xea\xd2\x017\xf2\xd8j\xb0I\x05\xff?\x1c\xd4\xe08U3\x94?b\xa9\x1e^0?G\xf7^\x93\xdb@\x90\xde\v,') accept$packet(r2, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:52 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 528.854091][ T26] audit: type=1400 audit(1553423572.863:74): avc: denied { module_load } for pid=28851 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=system permissive=1 10:32:52 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5fa6) 10:32:52 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc0046209, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:53 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8080, 0x0) fcntl$getown(r1, 0x9) connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc) accept4$alg(r2, 0x0, 0x0, 0x80000) 10:32:53 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:53 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)={0x3, 0x18, [0x4, 0x101, 0x4, 0x3, 0x6, 0xffffffff]}) 10:32:53 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000080)=0x14) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:53 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000) 10:32:53 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:53 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:53 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x200000) ioctl$KVM_SMI(r0, 0xaeb7) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 529.289725][T29265] binder: 29256:29265 ioctl c018620c 20000000 returned -22 10:32:53 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(r0, 0x29, 0x20, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:53 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:53 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8801, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0x1000, 0xf001, 0x10f000], 0x167, 0x22, 0x5}) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:53 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa65f) 10:32:53 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018625b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:53 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:53 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 529.655956][T29667] binder: 29625:29667 ioctl c018625b 20000000 returned -22 10:32:53 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) accept$alg(r0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:53 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:53 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe000) 10:32:53 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200080, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80020000", @ANYRES16=r2, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x40}, 0x800) 10:32:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:53 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc0189436, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:54 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 529.937706][T29928] __nla_parse: 18 callbacks suppressed [ 529.937715][T29928] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:54 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x208080) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0x0, 0x5, 0x6, 0x0, 0x0, [{0x9, 0x6, 0x2, [], 0x3}, {0x8, 0x3, 0x10000, [], 0x3}, {0x40, 0x36b57a80, 0x8000, [], 0x236}, {0x6, 0x66, 0x6, [], 0x101}, {0x2, 0x10001, 0x2, [], 0x100}, {0xabab, 0x59, 0x572, [], 0x7}, {0x4, 0x2000, 0xfff}, {0x1000, 0x23c7, 0x4, [], 0x40000000000}, {0x3, 0x7, 0x100, [], 0x7fff}, {0x5, 0xd, 0x7, [], 0xfffffffffffffff9}, {0x3, 0x80, 0x3c67, [], 0xfffffffffffffffd}, {0x0, 0x0, 0x101, [], 0x81}, {0x7ff, 0x401, 0x8, [], 0x2}, {0x7fffffff, 0x7, 0x0, [], 0xa3}, {0x1ff, 0x5, 0xfffffffffffffc00, [], 0xff1}, {0xce, 0xe2, 0xffff, [], 0x6}, {0x2, 0x9, 0x4, [], 0x6}, {0x3, 0x4, 0x7}, {0x1, 0x5, 0x5, [], 0x8}, {0xffffffffffffffff, 0x80000001, 0x9, [], 0xfff}, {0x3, 0x9b, 0xfffffffffffffe01, [], 0x2}, {0x1, 0xffff, 0x5, [], 0x100000001}, {0x5, 0x9, 0x9, [], 0x7f}, {0x7ff, 0x7, 0x3, [], 0x11756be0}]}}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000140)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:54 executing program 2: gettid() mknod$loop(&(0x7f0000000500)='./file0\x00', 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x2, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000480)=0x401, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/215, 0xd7}], 0x4, &(0x7f0000000340)=""/130, 0x82}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x203ffffffc, 0x0) 10:32:54 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:54 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf000) [ 530.147772][T30129] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:54 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc020660b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:54 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:54 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lapb0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bcsf0\x00', r4}) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) 10:32:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:54 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x160000000000000, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x1c, 0x1c, 0x700, 0x70bd2a, 0x25dfdbfc, {0x1e, 0x0, 0x0, r1, 0x1, 0x9, 0xa}}, 0x1c}}, 0x4000001) [ 530.395462][T30443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:54 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0ffff) 10:32:54 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:54 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:54 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc0306201, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:54 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:32:54 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0xd5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:54 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xdf21, 0xffbb, 0x80000000}) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) kcmp(r1, r1, 0x6, r2, r3) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x206201, 0x0) accept$packet(r3, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 530.611061][T30667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:54 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000) 10:32:54 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x3f00}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:54 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 530.778650][T30903] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:54 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:55 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000a40)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000a80)={r3, 0x1, 0x6, @broadcast}, 0x10) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) [ 530.935163][T31040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:55 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000) [ 531.003477][T31040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:55 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x1000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:55 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:32:55 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) accept$inet6(r2, 0x0, &(0x7f0000002140)) kcmp(r0, r0, 0x6, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000002180)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000080)={0x0, 0x0, 0x2080}) 10:32:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:55 executing program 5: r0 = socket(0x0, 0x88801, 0x0) r1 = gettid() r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10000, 0x0) fcntl$getown(r2, 0x9) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x11, 0x0, @tid=r1}, &(0x7f0000000100)=0x0) timer_settime(r4, 0x1, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r3, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r5, &(0x7f00000002c0)=0x4) r6 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x44000) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000040)=0xffffffffffff8000) close(r0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:55 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000) 10:32:55 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x3f000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 531.521850][T31514] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:55 executing program 2: gettid() r0 = gettid() kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) accept$packet(r1, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:55 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa000000) 10:32:55 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0xfdfdffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 531.652611][T31809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:55 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:55 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f00000000c0)={0x46, &(0x7f0000000040)=""/70}) socket$pppoe(0x18, 0x1, 0x0) 10:32:56 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:32:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:56 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:56 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe000000) 10:32:56 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0xfffffdfd}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:56 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) sysfs$3(0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xc, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x800, 0x4, 0xfff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x508}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000000, 0x8]}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:56 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) pwrite64(r1, &(0x7f0000000000)="1835d338c9ceeb67d5e91e083142464f951befd829cd01a57e0d94a8250626ed", 0x20, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 532.410470][T32154] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:56 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x100000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:56 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f000000) 10:32:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="0f0000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:56 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7, 0x111040) pselect6(0x40, &(0x7f0000000040)={0x5, 0x3, 0x8, 0x1, 0x7892, 0x1ff, 0x86, 0x59c7}, &(0x7f0000000080)={0x3, 0x100, 0x6, 0x80000001, 0x2, 0x7fffffff, 0x9, 0x81}, &(0x7f00000000c0)={0xfffffffffffffa7c, 0x7, 0xbdb, 0x28, 0x2000000000000000, 0x0, 0x5, 0x4c8}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x8000}, 0x8}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid_for_children\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() kcmp(r2, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) 10:32:57 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:57 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r4 = dup2(r2, r0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x200, 0x8, 0x4, 0x81, 0x6}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="680000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:57 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60000000) 10:32:57 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000015c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001600)=0x6, &(0x7f0000001640)=0x2) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:57 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x3f00000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c00000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:57 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xcb1, 0x500) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xc8, "3ee5aa29e40700dcba66bd661bb3e7d2eae4dbce2693435429daf37d4f7085eb0198f31d1607fa4af1def559d8b3964cd9ede0522509c7d06f0babd02cec202a118948f4b9909ad4e7401c199cc716bfdd19af9aa99cc80a8e35e9080f7119a134b7ba6296c5416c3fb4c0658cdc1dcbf13b6a0639f71900a1d2e5ae2a3138a24dae76f62254976ce9ca787f43533f58d1ff9fe4d93a21b069aa672e82eb3744551df1490a54e35df8f4380a187d75bb443f1b8fa22f4e1475dcc48bba5c5feb66585309357f9a69"}, &(0x7f00000001c0)=0xd0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000200)={r1, 0x5}, 0x8) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000000000300ff00430e0900f005cc000669db628bef"], 0x18) kcmp(r2, r2, 0x6, 0xffffffffffffffff, r3) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000240)) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x24) 10:32:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c00e00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:57 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x9effffff) 10:32:57 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0xfdfdffff00000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:57 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x44) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r2, r2, 0x6, r3, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:58 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xc058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r0, r0, 0x39) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="e03f03000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x3f00}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:58 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa65f0000) 10:32:58 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x4, 0x1d37, 0x7fffffff, 0x8001, 0x1, 0x7}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 2: r0 = gettid() r1 = epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, r1) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6221}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20008001) 10:32:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000200d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:58 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0000000) 10:32:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:58 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x40) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x2b0, r2, 0x700, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x59c}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3f, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7333}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x93}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe21}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x44}, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="8320c74a0a70934237a565fe32c2f00b", 0x10) 10:32:58 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="00f0ff7f0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:58 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x3f000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:58 executing program 2: r0 = gettid() r1 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000140)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000000)="421962dc99853fa83a6eccc67d5c8477d96de6c74a04191c0c61bd5dc5b848bc58bfa4c0662cd132d9daa45e877893952ade8391ee104ab07f507f9698d486428d5dc6b136bf5475c061fdf5fce3abef949fbc780644171a67d1250e96d6bb0d864801139f9a05b2042044f0d23a0f879fe54b0375d0a3beb0d6ae89ab", &(0x7f0000000080)="e0cbe8c6ae326345119c44a2bdf5e3364b95fec3af112f7b5877f270501f50f897b305023b2c3b74bf9c61e832b6e37b9f98d16b8815842f70658c549f83ece6f32bda346a08bd18a64bdb39773f7ed6fd8c67440774acce15e6f4edf655a50888ad6a8c8524a0f60b5eddff58303333cd107f7887843d1e70de4fecfeeebc1c8725e68e02aa8d9eee9b56223d5624173ca8917659e2e0b310336f3981579a2fdd01be1b3e6213165f0e7609af98"}}, &(0x7f0000000180)) kcmp(r0, r0, 0x4, r2, r2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'hsr0\x00', 0xfffffffffffffff9}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x853, 0x401, 0x800, 0x100000001, 0x6, 0x1, 0x100, 0x7fffffff, 0x8, 0x8, 0x401, 0xffffffff}) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:58 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0ffffff) 10:32:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="effdffff0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:59 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x800, 0x0) accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0xffff, 0x40, 0x92, 0x3, 0x10000, 0x1}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000000c0)={0x0, r4}) 10:32:59 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfffff000) 10:32:59 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240200000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240300000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:59 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 10:32:59 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240400000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:59 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffff9e) 10:32:59 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040), 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:32:59 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0xfffffdfd}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:32:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240500000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:32:59 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80000, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0xc0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:32:59 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:00 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240600000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:00 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfffffff0) 10:33:00 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x370df0a11f754315, 0x0) accept$packet(r1, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r2}, 0xc) 10:33:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240700000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:00 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x3f00000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:00 executing program 5: r0 = socket(0x0, 0x80002, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x7fffffff, 0x4) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:00 executing program 2: r0 = gettid() r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x30001) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7fff, 0x28002) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x1001, {0x0, 0x1, 0x4}, 0x54, r4, r5, 0x7d185e92, 0x6, 0xe59, 0x400, 0x0, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6, 0x1, 0x9f, 0x794, 0x100000000}}, 0xa0) write$P9_RLERROR(r3, &(0x7f00000000c0)={0x22, 0x7, 0x2, {0x19, 'mime_type*eth0proctrusted'}}, 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240a00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:00 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0ffffffffffff) 10:33:00 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040), 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:00 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$NBD_DISCONNECT(r4, 0xab08) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:00 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0xfdfdffff00000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240e00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:00 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:00 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f00}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:00 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240f00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:00 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) 10:33:01 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="244800000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:01 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x100) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="c9dc4bed7dfb17c52541cf4c16df873e6f4e520b70a2a5cdccd9c6461700eac63878fcc0cc960025e21601b3288d8ba547bf05bc6290d75af2bdab46f6bdf6359f04843f16030097806a78c393fa", 0x4e}, {&(0x7f00000000c0)="e8e760eb931c6f5227436b93b33bae5e3d51b32bb59ab26f5126d67444f3dd7dd769344e2ab55b425e3e7222bf02a86c6dad25b3c7466ddaf9bd85c717e55905fb09a4ed5079dfe48fd853db2575570be76e1b1db93d904954a24195b6b7a3089929ac0db3d6", 0x66}], 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x6, 0x0, [], {0x0, @bt={0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x3, 0x4a, 0x3e7, 0x7, 0x9, 0x4, 0x2, 0x5, 0x2, 0x6, 0x10, 0x20}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @multicast2}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@getqdisc={0x44, 0x26, 0x0, 0x70bd25, 0x25dfdbff, {0x0, r3, {0xffe0, 0x7}, {0xd}, {0xffff, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x60) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r2, &(0x7f0000000500)="c68e4d4ce9803d10ce1bf37e18884e93c979305fbeb348d53e63ca6a4b44fcd38f868a45d9c3f93170bd90b22ff6164f9afe1cdd1c8af089c555c5b5fdd8de19d873ba1a6865c6e59da4613312303ab6a900653a2642f7b70b926ae985e081118f0896302b63b955038a41992fe9b84bc90bb14c7ab8f50d2da40cfee2e0882b5f74bb84106e33300fcd32c44497a3ce9b290b42f111734d200e277216abeb4001093254aa5cbefd29366ffc58b72448a98f3ab15edc3cc43295aa620ce1247bdaba827fdc89decf399abbef9fdaf34154e5d1731abb8857cb2bbfc4c54763a2a5e661d84371afff5a42adef2dbc9fd73d66bcd8ac2b9265c20d", &(0x7f0000000600)="be5bb1861351d57a9cabcb6cbd7bea58fcc1f7d4bf4bd31300669615c925976c69012d785851843be328a0e025d1e68804828c1ce428ccda"}, 0x20) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000680)) 10:33:01 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="244c00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:01 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:01 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040), 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:01 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="246000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:01 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) 10:33:01 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:01 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, r0, 0x7) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0xfff, 0x4) 10:33:01 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:01 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="246800000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:01 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x40000000000000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockname(r2, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x49) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x4, @loopback, 0xffffffffffffaa47}}, 0xffffffffffffffc1, 0x7ff}, 0x90) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r5 = dup3(r2, r2, 0x80000) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000100), 0x4) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) kcmp(r0, r0, 0x4, r1, r6) sched_getattr(r0, &(0x7f0000000000), 0x30, 0x0) 10:33:01 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="246c00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:01 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@mcast1, 0x11, r1}) 10:33:01 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1a0, r3, 0xc, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @rand_addr="7f0c8f55bac95238714fa637e572ff80", 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe404}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:01 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000000) 10:33:02 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:02 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfdfdffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="247400000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:02 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x101, 0x8}, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x8, 0x400400) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000340)=0x6, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1d) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:02 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00000000000000) 10:33:02 executing program 5: r0 = socket(0x0, 0x40000000080002, 0x10000) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2, 0x3, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x80, 0x201a}) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpeername(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) 10:33:02 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0xdd2, 0x4) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = getgid() recvfrom$netrom(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x10000, &(0x7f0000001100)={{0x3, @null, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(r3, r4, r5) 10:33:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="247a00000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24f000000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:02 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00000000000000) 10:33:02 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/arp\x00') accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) getsockname$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2, r3}) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:02 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffdfd}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:03 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:03 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:03 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240003000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:03 executing program 2: r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x200000) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) 10:33:03 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) 10:33:03 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:03 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x20000) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r7 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) r11 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000800)=[0xee00, 0xee01, 0xee01]) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="78050000000000000700000000000000010000000000000000000000000000008800000000000000feffffffffffffff0000000008000000000000000000000005000000000000002000000000000000060000000000000002000000000000000002000000000000ffff000000040000030000000900000007000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100ffff00020000000000000600000000000000080000000000000012000000d50000002f6465762f736e642f70636d43234423630000000000000001000000000000000100000000000000d2ca000000000000080000000000000001000080020000000100000000000000010400000000000032d1000000000000ff7f000000000000000100000000000042060000000000000300000007000000000000000700000005000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ffffffff030000000000000001000000000000003bd13a2b000000001200000048d800002f6465762f736e642f70636d432344236300000000000000060000000000000002000000000000000004000000000000ff0f0000000000000500000003000000040000000000000001000000000000000000000000000000040000000000000001040000000000000700000000000000ffffffff0100000081000000b60000004a000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02000000ffff0000000000000100000000000000010000000000000012000000ffffff7f2f6465762f736e642f70636d4323442363000000000000000600000000000000030000000000000003000000000000000100000000000000ff01000005210000030000000000000005000000000000000100000000000000d316000000000000a8020000000000000004000000000000f7ffffff070000000100000000000000faffffff", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000400002e0e0000000000000100000000000000050000000000000012000000000000002f6465762f736e642f70636d4323442363000000000000000600000000000000030000000000000000000000000000000200000000000000d0ca0000000001000300000000000000030000000000000004000000000000000300000000000000010100000000000001000000000000000500000009000000ffff00008000000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="06000000f50f000000000000010000000000000001040000000000001200000026bc00002f6465762f736e642f70636d43234423630000000000000004000000000000000000000000000000e0050000000000007cb60000000000000010000005000000040000000000000008000000000000000100000001000000d4b1000000000000f322000000000000000001000000000008000000965c2e6e07000000ff03000000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0300000000100000000000000300000000000000000000000000000012000000090000002f6465762f736e642f70636d4323442363000000000000000500000000000000030000000000000081000000000000000600000000000000ff030000040000000300000000000000faffffffffffffff7f000000000000000000000000000000490100000000000001000000000000000700000003000000030000000000000001800000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000006000000000000000000000000000000060000000000000012000000010000002f6465762f736e642f70636d432344236300000000000000"], 0x578) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:03 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240005000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:03 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) 10:33:03 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f00000000000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:03 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x34, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:03 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_getparam(r0, &(0x7f0000000000)) 10:33:04 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:04 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240006000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:04 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x9effffff00000000) 10:33:04 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:04 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfdfdffff00000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:04 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 10:33:04 executing program 2: r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x452280, 0x8) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x7ffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffeffffffff, 0x100, 0x0, 0x2, 0x22}, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x164, r4, 0x904, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x73b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffbff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x57}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26c8b1fd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x90) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x5}, &(0x7f0000000100)=0x8) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 10:33:04 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240007000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:04 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa65f000000000000) 10:33:04 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000ff0100000000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a0082b3000700000028bd70170080000005001a0000000000eaffac1414aa0000000040000000113c04a23743f00849952bb500000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:04 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000180)=0x1) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/127) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept$ax25(r1, &(0x7f00000001c0)={{0x3, @rose}, [@null, @null, @bcast, @rose, @netrom, @remote, @remote, @netrom]}, &(0x7f0000000240)=0x48) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000000c0)={0x40000000}) 10:33:04 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24d207000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:05 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:05 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="3d5d8c92724e00f9e79d3a23b39ff330"}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:05 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000a000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:05 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, r1, r1) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname(r2, &(0x7f0000000000), &(0x7f0000000080)=0x80) 10:33:05 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe000000000000000) 10:33:05 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:05 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000e000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:05 executing program 2: pipe(&(0x7f0000000000)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:05 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0ffffff00000000) 10:33:05 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) fchmod(r0, 0x41) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:05 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1656) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x1ff, 0x9, [], &(0x7f00000000c0)={0x9a090e, 0x4255, [], @p_u8=&(0x7f0000000080)=0x800}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(r1, 0x5418, 0x0) 10:33:05 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000f000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:06 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:06 executing program 2: r0 = gettid() r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, r3, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:06 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffff00000000) 10:33:06 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240020000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:06 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:06 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x114, 0x100) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:06 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x7f, 0x77}, 'port1\x00', 0xc3, 0x1000, 0xf585, 0x4, 0xeb1b, 0x5, 0x401, 0x0, 0x2, 0x3}) r1 = gettid() r2 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:06 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24003f000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='veth1_to_team\x00'}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x8, 0x9be, &(0x7f0000000040)="5ff309cc043b95720f2c25b311531781c79f54514445c58864880629736bcc36c03de0391dd4a62456fa6d4288d430b452db1671b354251a0ebcc90b002868c1104e8f54c1f246dc57bdd9ec9e4c4aae09942cb8f6438e090ca457ce7aacd755f780fb8d6f9d1506f36d0d1f9bf2d85e4037ee30334df6c6724b6cbc190d195d8742f59053", &(0x7f0000000140)="6bda8f837254ae56d84e7fa50e69313c520d677573666fa40ba8658a9fc41d5325d2879c04523df81484536e622bd3ab4e338275f411605cd4bcca110cc498906ee69a0a7f469cc755197b4b6df9c731e05b14c28fda427d8a20279009fa90c7c63db21dd9acf25a54cd1a2a0e3d5e2d83fb0a053b77a51b3a", 0x85, 0x79}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 10:33:06 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfffffffffffff000) 10:33:06 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:06 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 542.350656][ T6957] binder: 6954:6957 ioctl 4038ae7a 200001c0 returned -22 10:33:07 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240040000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:07 executing program 2: r0 = gettid() r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x91e9, 0x10080) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="390000003701000109000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="1b0073656c6938949773bc367345e9d86e757821657468306367726f75705b656d307070703059"], 0x39) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x1000}, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100), 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:07 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:07 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0xfdcf, 0x40) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x3, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x81, 0x400) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) r2 = gettid() r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) splice(r3, &(0x7f0000000240), r3, &(0x7f00000001c0), 0x5, 0x4) kcmp(r2, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$isdn(r4, &(0x7f0000000200)={0x22, 0x80, 0x3, 0x401, 0xf5}, 0xfffffffffffffe69) 10:33:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240048000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:07 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24004c000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:07 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = socket(0x0, 0x80002, 0x0) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) r6 = geteuid() mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1080000, &(0x7f0000000380)={'trans=unix,', {[{@aname={'aname', 0x3d, '/selinux/commit_pending_bools\x00'}}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@mmap='mmap'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, '/selinux/commit_pending_bools\x00'}}, {@access_any='access=any'}, {@cachetag={'cachetag', 0x3d, '/selinux/commit_pending_bools\x00'}}, {@access_uid={'access', 0x3d, r5}}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffff85}}, {@fowner_lt={'fowner<', r6}}]}}) epoll_pwait(r4, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6, &(0x7f00000000c0)={0x8}, 0x8) kcmp(r2, r2, 0x6, r3, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r1, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) prctl$PR_SVE_SET_VL(0x32, 0x2d644) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f", 0xe}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240060000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:07 executing program 2: r0 = gettid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f0000000040)=""/212, &(0x7f0000000140)=""/7, &(0x7f0000000180)=""/90, 0x6000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x101000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 10:33:07 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000000)=""/140, 0x8c, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:07 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0xfffffffeffffffff}, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x3ff}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240068000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:08 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 543.960840][ T7825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7825 comm=syz-executor.4 10:33:08 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24006c000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:08 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:08 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x12) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:08 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x224000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r4, 0xfffffffffffffff9, 0xffff00000000}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'sha224-generic\x00'}}, &(0x7f00000001c0)="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", &(0x7f00000002c0)="0c1798e3d9cdc11e2b5f5eff8feac0642df339acf99af6f6") kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240074000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 544.238103][ T26] audit: type=1400 audit(1553423588.243:75): avc: denied { create } for pid=8218 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 10:33:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2003) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x440000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r4 = geteuid() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000b40)=0x9) getgroups(0x5, &(0x7f00000004c0)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000600)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)="06eb0abb0f7f0a31f274b893ad10dfcefe2c8a658455ef50ca127bd1190c1c0cfbba1429f5d6145611dd5653f5d380baa7d98f229a4c5b9a0eb15eef677245e6d596380dc78fade38c07acbcc53fa30fcc6b97fa6812357e74fda8d84d4b7c1a132815f58add35ab2f68849ba255ad76adb6400813e210962d466a946119ced0a6b1a88268658e2be373b40e357c02e62cdc6310265bcd7aac014c74e326399f3edf52e469097d905898282d984d2be7d2d1a6f35eec508866db9c7cf867acceed6f99160595b07721489a685dd5ae", 0xcf}, {&(0x7f00000000c0)="42b0d8f02461dfc61b56263ca73c8b9ba8f84ea97849bcd7d116d3a32dd0fa4878bd25461deb3d8749dfa662c0d9af490986dad04b928b39c8623187f696", 0x3e}, {&(0x7f00000002c0)="ff4b62a3e2aa5d4e48171f648e25d77a090b92bf218c1c1fe3478d738cb007627ab3949a32aa36afdeeff926beb3", 0x2e}, {&(0x7f0000000300)="91fc782f465ce5e0645b83a643a953031fd4544674faee47c7448540d622841345d60cfcaf5558bd9bdc25be989d483d8694d8c673f5a537b87c029fd102835a32221f6fc3b042759a9c9173ece0565ba2a5023ed8deac4898c67a86b0c50fda68a9e652cc41439cd305730ef75d73f23e34100430e120eff7c42cdf42ee343a5d21924d28b83da7db3c09b79b3f5bdcf6fbf3ec10e5c29408817c2b58d3989842be2b16812ef7303caef9c0ee1bb26e311979ace9e446abd5ee3f3e390c6d47390688a28c4d3d28b7449add98afdeeae32cd785702a8b9ee8b19224894d115e326665", 0xe3}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000002800000000009cdf0100000001000000338a8fee7e28ca358f6412884c31c5e47f93a4f8ce0a92e87397995e62cb04ea4e56c844da5b7dbd294b4588904bebbcd6b71002621e61f6ec90102c0dfc30c47f18740ab6585b63d86dcaf97999d240cc2dc04c79749e03dabf785817c14db0c5260cb0a40974a6bbbc35395be76a939b2856b2f32f0e6eff3e439929dc277ad2aecd941f53a8389431f8ea66d743b61a1fbd028b060304056b85c6105d280df24096fd", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}, 0x0) r16 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCMSET(r16, 0x5418, 0x0) [ 544.280165][ T26] audit: type=1400 audit(1553423588.273:76): avc: denied { write } for pid=8218 comm="syz-executor.4" path="socket:[93251]" dev="sockfs" ino=93251 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 10:33:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24007a000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 544.379184][ T26] audit: type=1400 audit(1553423588.383:77): avc: denied { getattr } for pid=8445 comm="syz-executor.1" path="socket:[92984]" dev="sockfs" ino=92984 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:33:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0xfffffffffffffefb}], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x6010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xe8, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x30, 0x40, &(0x7f0000000180)=[@flat={0x73622a85, 0xa, r2, 0x4}, @flat={0x77682a85, 0x1, r3, 0x3}], &(0x7f00000001c0)=[0x0, 0x58, 0x20, 0x38, 0x68, 0x0, 0x78, 0x48]}}}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x1, r4, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1, 0x3, 0x3c}], &(0x7f00000002c0)=[0x40]}, 0x9}}, @acquire, @dead_binder_done, @acquire={0x40046305, 0x2}, @decrefs, @request_death={0x400c630e, 0x2, 0x1}, @enter_looper, @acquire, @request_death={0x400c630e, 0x2, 0x4}], 0x50, 0x0, &(0x7f0000000400)="7e4985f2896c50410649e078d288b0a5d298caae16b95851e252861615ace230b85bab75a56031cb7e20a80bf786c238ba3fdf2a394677f45af6392a21281077bafb97946e3c0449119c813b09ed861f"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=[@exit_looper, @request_death={0x400c630e, 0x2, 0x2}], 0xc, 0x0, &(0x7f0000000080)="db18de2a6a3cdc7b70d608e6"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:08 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x80, 0x4) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 544.540575][ T8641] binder: 8640:8641 got transaction to invalid handle [ 544.566686][ T8641] binder: 8640:8641 transaction failed 29201/-22, size 48-64 line 2994 [ 544.576447][ T8641] binder: 8640:8641 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 10:33:11 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x8}}, 0xfffffffeffffffff, 0x2}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2407d2000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x5) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "78293d7b59c21d4f777a8e99d115f15ce2c017e602fb525a8baf02dd5c28f8dc03611b6bdaeb1e781d478945020246f7ea69f6319724229934a0d460d73e4d9fa5c8c38e3e2e48413b9b66d459df39810b7edf3ff4f9a053922494cd8886e3ea2fa40ba4aea6260e661639642ffd7fd7b140952eda93e31404a7ca17fbf3b8789de9d99918aeb36b36160e1f198b99cc0de0ed535ced22e94159d9296ed44637f864406b66ad8298371b51092d"}, 0xbd) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:11 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setns(r1, 0x54000000) 10:33:11 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000040)=r3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400f0000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000010061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x80000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:11 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x12) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:11 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x3, &(0x7f0000000140)='&{\x00', r2}, 0x30) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0xe, &(0x7f0000000000)='\xec:eth0selinux\x00', r3}, 0x30) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000012061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x25f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000068061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000100)={0x2, @output={0x1000, 0x1, {0x9, 0x7}, 0xc0, 0x2}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) close(r2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000200)={0x800000000000000, 0x0, 0xcb, 0x9, 0xb}) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000240)={0x0, 0x35}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 10:33:11 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:11 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x28200, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:11 executing program 2: r0 = gettid() r1 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r2, r4) r5 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x0) write$FUSE_LK(r5, &(0x7f0000000140)={0x28, 0xffffffffffffffda, 0x3, {{0x20, 0x5, 0x0, r0}}}, 0x28) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) r7 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') read$eventfd(r7, &(0x7f00000000c0), 0x2c3) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240002000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:11 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x8000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) 10:33:11 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240003000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:12 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:12 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @initdev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x37, "4385557afa9d1df6d9f117400d5a540a4cbcdc9f001d86c4d49b64740f399cac588b955876f5782b5e852084caeb1999013320fd86fc7c"}, &(0x7f00000002c0)=0x5b) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000004c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400a000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x434, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x278, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffc}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xf040, 0x1, 0x81, 0x72}, {0xffffffffffff47bf, 0xffffffffffff0755, 0x7, 0x7}, {0x4, 0x7fff, 0x8, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x44}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3c}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xffffffffffffcc24, 0x0, 0xcd, 0x3}, {0xfff, 0x3ff, 0x6, 0x52}]}}}]}}, {{0x8, 0x1, r7}, {0x198, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240004000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x20010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x44, 0x5, {"e618d240254496343dcc129df5fac79aaa9368c23fa22a1c77cac67b11daa45776e23ffd4031e4bde8"}}, {0x0, "e2e5321064426e29e586dc335a39c464c8be8c95f092d209988a08a6589df77a0087b57fe8140d56"}}, &(0x7f00000002c0)=""/166, 0x6e, 0xa6, 0x1}, 0x20) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={r2}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:12 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) 10:33:12 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="58000000140019", 0x7}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240005000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:12 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040)) 10:33:12 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:12 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x20000005) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x10001, 0x0, 0x2, 0xd8, &(0x7f0000000100)=""/216, 0x2, &(0x7f0000000200)=""/2, 0x3, &(0x7f0000000240)=""/3}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:12 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101200, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x17ee, 0x8, 0x5, 0x2, 0x3, 0x8}) 10:33:12 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x200440) accept4$rose(r2, &(0x7f0000000100)=@short={0xb, @remote, @rose, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x80800) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r3}, 0x14) 10:33:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240006000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:12 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:12 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000, 0x400) 10:33:12 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x100) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240007000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:13 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x0, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0x1b, 0x20043ffd) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fsync(r0) sysfs$3(0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000a000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:13 executing program 4: socketpair(0xf, 0x0, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x1, 0x4) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001c04}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x700, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040), 0x294) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:33:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={r2}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, @default, @bpq0='bpq0\x00', 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000e000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:13 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:13 executing program 2: r0 = gettid() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sched_setparam(r0, &(0x7f0000000080)=0x6) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x80000000, 0x10000}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x3, 0x3, 0xfffffffffffffffe, 0x3, 0x2}, 0x5, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000f000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:13 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r2, r3, r4}, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:13 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="040000ffed0000000a000000cec90000ffffffff"]) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240048000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:13 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24004c000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:14 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) 10:33:14 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240060000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc2000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0010005200aed32db8700003000070aee300ad9e", @ANYRES32=r3, @ANYRES64=r1], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:14 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1a0, r3, 0x320, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @mcast1, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x816}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:14 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240068000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:14 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_getattr(r0, &(0x7f0000000000), 0x30, 0x0) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000040)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000400)=0x18) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x9d) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000280)={0x0, r2, 0x641}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r3, 0x80000, r1}) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x10000) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000007c0)=""/224, 0xe0}], 0x6) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/230, 0xe6, 0x21, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) 10:33:14 executing program 1: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) accept4(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000040)=0x80, 0x800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000000c0)=""/9) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:14 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24006c000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup(r2) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000000)) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xe1b}}, 0x18) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:14 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x1, 0x7, 0x101}, 0x98) close(r2) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x7ff}, {0x9, 0x6}]}, 0x14, 0x2) socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0xfffffffffffffff7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto$packet(r0, &(0x7f0000000380)="7b207e7444d5a1481217438c82e4e73759a3b2aa096528585334b8c648591fcd3b7456eaaa7d198a6c9ac4d2ca90", 0x2e, 0x40080, 0x0, 0x0) 10:33:14 executing program 2: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x45da8d3384ea8ef4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$vsock_dgram(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710}, 0x10) 10:33:14 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240074000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0xb0df691, 0xff, 0x8, 0x100, 0x7}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:33:14 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:14 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24007a000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd87}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd4}]}]}, @TIPC_NLA_LINK={0x118, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe836}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe14a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf936}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xb48f1d2bc1e3e052}, 0x40881) 10:33:15 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:15 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)='/dev/dmmidi#\x00', 0xd) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40114080}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="901000003400000427bd7000ffdbdf250e000000bb4b7dd10cf1f756d345c00d1d43b6dd1b043de92e0a6a451e0ba3a19c4e8e8c48e83a730f1caa04c3de54656ee892a28916517c4ef03b4f41aa2bc6ab30334898010096892eb15ab9138e524e925d5fc32bcbc3c7848f3688279c0f1997613af4972cfbdbf8c41fcd6668741222acce8a29a796420225b604109500976af03dab1664a39dd3145fdf19c41b0d058333748d4f17f3968ad6874163a1863ada5c950a55fdd1173f248a0699826699c2eb217b11c28eb077f6262a75bb2835f17bcbbdb91492c366c059a20415534550955d7df69f8cc6669fa44641d399f390c719c32eabacdf8d4cc6edd380567711d319ec57c98718f727a4fc632fda58715d02168678007ab792760a4f91c75868e68928a5893431e7abc87c5d5b1b936c3720a246cc274b6298874c56d3c75e6faedd86b95712ba17d1480235ac7355d79cdebec40d746e1720b59b165d1cd3e5d8e284d040b54819328d7b8936fb64bbf1bc1870ef533dd276a87d664b42795adee619d92cb913bcb8b8288cb57b0119a8b459432668385d526b6b36e2e183f63f3b7dbd583e463f730b6a33d8e15344c61fb996aed13ba4e1e5b9195463b7d12e05632eb8515ba64e87b5fe93a8f8543618c46bf598e9725e6b72c441ce6cd3cdae72ec17168577e9f2089a7244243c04e0af9236389386e6153e3fa331309ee9560e64e6b491aee7b1f47dfa48911f3fb1b77a1ea3127e6ed646fe3bbc384d0ed02691d534bb63848703f57f101ea48c10740cb5f136f95dd7dc2876042e9dd317de3299cc111ac510ced042d5fea7dfa96b0e6c4bb6c2b638e394b9f178ddaff28dcf07a7ec29629d86a7085472a72b99f0a213f692641e7076a993a14082c6945eb5bf7ddf85bbb01b8c82f6463d39324c87c2be5b9cd20934777df0cb42c4d37b05745ab1d15f5202f464933c3c09cd8dcc4fb59d0a6a3fce31b86818dc6b632ed22e100b303c0de0941218828537967a7650641fe6d0f61ef800b85fab192416731c221022651703555bacbfaa7ee412158aea2be45602b724a878c758b09130c785ccc2690d2878dfc6dd0c8c33f4ac0c35fef4b538ee4a77e3930b7c41bbc27909ce1a09a4994b012770aeb419cc893b23989a7cbd268b1849c460b401090714987b57d69ea318b0c16a95f6b6964589de79595ee1b3e44f26bae6d1c1cc0035968542de66b29c126f1262d6dfc57906d0825e7f9f6dec186e60bd5831533e79d644dd3e2c9aced1c5270d78a369db2add0adf780c0706ef54e165f41abfeca39a7dd62ce4d53fe1ead2c8672082988979e271d186fa695f103779141f8e9dce8198cfd097e6c8052c1c23099884d31d256be282d8b9742cd78b73616b5170a62f6421d89ef983d37302d2075f72683cdb5580628ed04de636dea2ffe5fca16a53d0299fefc1368f05fbbd8d776a28de99c171a44fc742cd427eaf3a929623645d91a4433deeedde1fdce742950626b812f3417975175d8cd094447c628bb9a052a910836fc6c0fe5d6d006594b19c3d4c2b013eecdce3bce1f2087e4cc5fb2b3e7028410fd531de98b8d9268378471fd8a903b1b4adb1d7cfa76070a606574e3a8ce6e206a3626c288d044a69a65ff36b0d3e3b1509c245d6f4c4e08f819b75f6ef24a588dbd849c45389459e85cd59ee513f8c65c86af9d263b0775aae52a030650bd46f0da271b482dfa4ae0f30b1c514fded410e905ca66d9fea9ef739929b05f19d32f446f6221ec8ac94b7d832658a01f3e1d37000c43e4496dbdb77dc968c26e0b490c4b17a721baccc72c8f120f1da94debef2eff81ed828f0a63c56efa5f1adb2305c55e5c503e7d00d0c73c87d7775395be6ee977e880066ab7943db2215a791786cb938903ec36174a1438a7d8d678626ea687724c6b1f6c47922090f950f6664bbaa99ee7f3c73f8d1302a322561305a4c1572a3351be146f251edf3b2a84bffafd8487e5b793d2f417be7d509a30992bcab308941065470baf76fc3e3dddf2eb984af6bea7b77d40a7aee504d05596c2afe04aa244a129ebb64de312fa63f01dbd90b3539903dd3b422228ee5aa415c2510d272db10f7ec8907f6a25229880fe05684b3e642537a21169c7b7dfea439e39bd88813e36b805b72af3bb7e6c921b45bd38da665197364f1be075eacda1defd4e9f3873b3b6a414989efc2717ba6c31e0c1b2771acc4c462c2d127ca67265c34e058266f3841b33cd8e955156ebc2e5af06985e773cfe754985b84a378df5ea298db8f23bf02def513b41c7d28bdb6f06434b23e1b1fa312e47bb4e4d7a932fe28492811d2965d2fc2cf7562501d386cf25ae5ca2107fe05442f6d27bfa98c7f6d8cfabe05f6cf9324f8597869ca90191931eed6b7f1ad07237101cfb9c3ea9b76b7ea3740720048eb17925ddb8b4bc2b7ded1a8c35abd930de2e3e353f0d9ab816ca6df979522efaf0871eb4ea4c94e9ed7bc44b657e0f51535de67334a54b74a489475c3efef1806c12006d97d83a8ee61ceb16939d94ac4efc71dae331a87be830500136b139456cadcceb97c8fa457c897354a6c1c065d86dd03800b036a8cab06c668e6565f67b36f5abfae1d7f52a905ba27107419c6d9dd37e8debdf398340061c2ebab7ee1be3b39343c90d915b3885c9688f4ffe6ee49fa3c1aadae0e3c5da3e4577692b8d628671433fe18c32b30f91edf0a25ac3944afbd370bcfea7a5b4c759a4ad9285ad6fe9f2c62c510ab4f5b32a63a5a11b25fe09f5432083de0e2e49a3113b717b8806834746d8489f5f35e3012a32a7b1078c2b728a0be66ecf9b2eeb6abab86bf8a2ee302c92129dde5e30fd81009c5b8ab7a7d0a50fad7e0dd11b5714e50b8f812be95edce032335c30c4ace6ade6953c77a73047b875313ace050249db77cf395061f8a0d26bcf81443d4c88e35233b751d2bdf8d611632d98f22d47312a8afb065126061871e72ee5a4089fdf3dae5b21493a349f507668d703b828323547ebfa6589d3990803e9919d426dc6a853f6b165623117acc9defc4c7d7d17eeea860c4a10039b9ca36ad0967a8ba3864e0a08f8d7167df70ea9a683ad21be20f014eb26cec91fc397061ce1b5ceee335adfe4eddfecffaa09fcf0f5e119c4e0f2e2f889e5644973cf01efe043e44f832cc9d5711677396cdb207c6f48d4165f9f173c8dfef9592184bb61abaecbbf0dbf3e64ad76f8236ad249bebdadf6c35021e3115440e23692bc5b69502627972c1b9c8cb817f8845bb0e6d047f4a1655f5fbb1a305bec6326524bb703a0eb7ab9a5fd6e8f7f8368f9262d8abd8f6b73d3e9427c3c1f42d2c38d3778fe603c988488717e4b06717acd0b2e8b24a2fa203b5fbeb8b91174b3857d617f6aa14cd47131c9b6eda7225f813853fad85e8bb3335620e2593e5c8694364d23930e3dd2f05ccace0cfa56ac665d1fc16f0be0822ecd33a603eabf0ba8976a4c179aeebe2bbec38379129e0293039d124b9c7dad0a271e6328b6ed7e4ae29fb65975210833c58296ca24b0453d4999303567ad0fcce5b33b28b107f36c2fdac26a6feb3ee9f3da031ffebbe7f0c73972bb405c6e34bb1f286773a3492e2fc7fcd9214397ee761ffd06a7716614a0eaa51c6161a912b4222fd40ef03123aaf6c9e17237492666dbe68cca57c2d1f5ed6aa26e6b93e6a248db9ebc1195f6c7846e784e9007cf6e90fa5cd11ee040c16e52c01355381815a45acd17f6b3ae194be3280b50e0c577c755e8f0d9e9e4c04b6681b48cc493ba823baf9e898e2f127c81375131ede6faa7f39042047df9b1cf3f50ea3f686dfb532be40312d8838532c3da0edb1e2079ee8ce0387a1f82016e6df44fdd240617b9390d4cab96068ca53a64b9631600f0d873d569de8a4829dedc33d69d0ff2b9c1dca6cdc04cf8982a3faab10b335dc6febc124f3eff0205c66e7f9c2e0c2efedf00d1e90e7f8ef6e42b288a3e8fb904900cf854634d532b10bdddf2e6248ac17e99d26ae0f5351680cae8f0a0e4c5dc89a3465b386d1c54276602b58886e83da369e5861389578d5799196e2d69532516f65296df8c683076320c6f01e029b27ff54b3f17b1ac9c3ace78e7aa7153b4a26c72c5ac427484f983e7c970b030708207b2b564004c30774f176d3f366a811911ab32f772b44c9d2a10a2c505c73966d412e324c80b312acdaf8d82c3e0ef69ae22658ddfd3b2005766c42f166ddf22a79e54fc0f8ce380d91f41145e65dfde96e03f9c3cde6a777d88f06c967c21e331a231e062c0854d71da61b98d6cbd77dec70d6a26aa0869893b8b432a00917cf296c15ad7866c51ee096e5a59caf27248136feba1832c193fb7a63738a6c777c8b3d5d2be3fe2e17a330efb19fa1d5838ce92b02e3ece46b62286007dca7917b2544e4ea48cf72681d5edf4627ac230b358917e0450810012d965dc6224625d8e69f5d00dac303d5f535006e06649bf869ccca53c629731473fda90cd3575e4867b6306cffd6b4edaf61f1297171c571ec209a835f639ab29bd830115e8b36cb7cdccc8ee3a38bb1578a0aa94746833c3b521d365996983fad0f4b5aae9953a36b619192bf91fa53862b7b4e48e35350b98784ee0cfc85a028dac05b808e80b8e2569cdbb4f5afbaececaee538114257383b6afea248fc49e6c19da1788cfd96bd1e9d5fdbbdccc338816a963a3ff1e5d2b00d0dce8f4da563de6925061743b8f94cf05f22e38567de92abc48398f4b4d3292601ad81ecf1540c01efdd3cbea0ef69eefa8b6590df1773dc95e44b92539f1934d40ba4355962df3fa236159c312ac6710fd0b34bc38ad17f58566b47f45d2dd432328ccfe1b42498491b1d4e391e18db1da52e3622a47d0cf56a9bf192ad1b3d0232414d151908ea5fac4ba763ca4e592ffc35dc2b487dafc544affb9cf5ead49312eb07ac7847a90d456e46d7f02dce38001c437fcd28b76195f8c01ad0c526b8db0e2a38cf1d367e565103ce6e10c788b114717716fbcd260492209b6b11cec7207ec850c4193c0b59cf7f83866a88eab1b5f4d742beeedbaf6e26e0bc16fb9b9afcc343307b73d1742c696bcb227106dc069cde9974244f820301b2bcf20fbd45c95a5ef7e55b1287a1cb0ed7f12f520a015809986fa5d7bbb5b9ab10c60c589b12fd2498cca67c9efb1bbbbfb4c7ad3ad0c316f04784dc525e3a1d6728808a419247473dee4409c4cee8d332ba58b73161a37212a4d537ebf0a0da224a1abe0a8a9a994b0585e89dfb1717d7910585d1a4aa6a73f84f120bd057ddede12f9e380d370ac1a544d10c6988e23b52eaae5616c0fde179b6af71e166afa3ba8094627431b67d77348ab8f44127d10132258e90fbd999c046a8f01cc2f0ef089327ec4bc60d4f460d2cb23b5e9c7737a0b26bac2f1fdacfc38451dc0bbad6a3a1e28149f4a2e78e189c75031291424ea9ba2d954f496fabcabbb4c87d23f24f107d0362a6c5b85ad0a4dd03bbe40958cec4b2f484474ba5cb9424caf9044a42f0d29b074b3fcb35111d63b84c77caae25e81568d536a60262e0bc90e1ed6ccdc2953c877526f4596d8bf39516336a5888a36dc7f926d9e9b3c7a1b882bbfc59bc05381d52f87f1394b374aa9190431045a6249a69b20d279a6934304fb6300b66102a07fe0c49b39b8527a80182a35ff1ff5183d0c1db40fe9b3c535ee50f0f851d3a26f875217ac2d1ccbf1a85c87fd825c39896d634896c9e26aa86ee430e036467dca514e28320f3f498808d3e4837905dc9760f8bfe0c52dcadd753864bcab39d7258a76784dc09f298b4fce8a5dca2fec5c9c2ca9fefae95351ee356680684c957cd1f66a62a200db897eb33bad8c19174dabdc08681d437fd9e27f6d71fef427a45496187b02464a34d7f6ed32ca18790de8efdb911c18c8999088dc54ac0e4d8ac06b119d4d70d26fbac10ded49f9cd9"], 0x1090}, 0x1, 0x0, 0x0, 0x8001}, 0x20000810) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x20000) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 10:33:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400f0000d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:15 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x8202) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x1, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="7e8bc5e54709517abd77f0f2e75b010365fad4a918ad1dbfdfb73c6d8d20952db32150510575070b7ee9ccf8b656962929f327b8c9c268ec43d84b41da9abf545b72118eaa3f776d8a21d056e08d9143c928ac57e98cd0c5453dd8adfcf1393d6b77be6a3db951790e7be6ec739fb620269988d540ecf25d8162fcc114ba40df34b48220126ac428ebbe6932e0ed5d84322a1f9dcb2bff81a468cd5431ae366d9b5814271c4bbce2bf9093de0f", 0xad}, {&(0x7f00000001c0)="629cece9c357ec50a63408d866c924c4fb5581844f2baff6457d29e951a258ddd19016e03e88655ade7172da136482604dc70efb6c135d219027c543224c99cda569", 0x42}], 0x2, &(0x7f0000000280)=[{0x48, 0x10d, 0x80, "4a85817dcf8831a1a91a482476898dbdb8ef4b995fb6dcfd519c38a1f9933e0398617859f0e644b100abac5d56cfe0ba5df8a6e0a9dce25b"}, {0xb8, 0x119, 0x5, "d71c46dee04f27549343f364176b6619931ccc3ab01e8211d1fe2138cae82667fb0aa4cf84c77da61787219d86b0af1a660917f6e27e052af1e5507fa55a0e61bd54d6db758f30695a21f3cf9bf02720258eb8cbf85eb19fbd523871eabaf4aead23bfd925c975ac998c7ca77b451887eab2df13913889bc0a17e23549708e17b108e8863c23035aae67b790497c5a5ce6eedb3abbf838b527fe3aec969e34131bd50bcc1ed8"}, {0x20, 0x115, 0x1, "bad15ff203bb6fac21df618b"}, {0xf8, 0x0, 0x40, "e15abfe40762b9fcfa6d875d431be3e3053b7b04682a3aaa32b7ff16e1b66c739d1e82e8e15d826743a658a33f44fcf54a57ed052531a2736c0148da7e54474b703248c0e2e23a3a8c6971f62a95de24623063b196b4a2c5e9f2df7864d68c2adcfa02c3e57c39cd4d203ca52352ec43a734e384144133b364d06ab80f8dfdedfceff7e99ba715cf840188751d994362d308b59bfb8e8fef4b9a32b438f84366e8d2701433c5022e831c5a050d4ba9eb0eb28447886de1b9b18f4654ef99650a4704a2f78a82eb6997279f8748d4799aa46556707c72d029b00fdf070046fee4e3f6"}, {0xb8, 0x10f, 0x9, "37cb9f7c8295d298e545bfe164cff97c3ec09d2f3cb5be70d4e68c6da4add574075157891563984bd1877ef84fee0cad6fcada29826465550b83177bc3cde0556a1cc7520e905dfc46e0e3b50bb5531052a11e86711c302771ca7019d669b86c2160ffeabf325f2b0297738411ebefc6b3c77fcd7c79872820415f7dd93d79d71ab3897c7832a4bc78bb3c66ae99969509969e4452e041dbe422ed115d764b62ec"}, {0x88, 0x102, 0xb6, "5c1ece54fde86bb6664ba8ff13f9f609dfb6feefe917c678bad0914cfdae29967e27fed591132691263aa6e40f1e90d318995d4bd1176b3538e9f37630dcfacb547c7662be64a904fe874a401762f849d69d98d3f9a4b083a04957cbcae23ec97e82f192c700404b160f117a142b5d46cb17af0d0d77"}, {0xc0, 0x111, 0x8000, "2a54b2387d1b28944de2dbdf3eca476967028f50819f51ecaab72a9799d9ac7342368fd075c76b4e8bec9d876ba756cbc24e4065d2a895717cd2310586191d7304415aaaa33ac2e5fe92e00c6f2f0aaa97ccba4881e1b262cb74177def1e30438e51a8ff6113023fe0fee3be52d8da92fee0f5315706727d588fef5938f59faa37e08b18f1922c4d1daf36e852496432224b9c1a18e25ca1d9e3e8e8571ad57b13f3c07a7db60e86cbfc49d2244a50c2"}, {0xd8, 0x108, 0x0, "83603ed0a9ea48bf135a2c22859a8bff61fb53ca990fa62037b2b99a83d9cf07ae927b8ad59017608c82f4b47c1ccef8665b2383903d3cb20ff3d05d987f5bcddced8d2006487218be4dfd30de19de24dc9c43a6f569d44bcfba08a8f98df9bdfdf1bae63f10464d4bf9aeaa60c89c087a165d513a117812bfb924a30eadb10d6d516d80e7e61669f28af523437c7bfeea77dedafa206eca8e57bd42ee0b4a63f7e1cf181c9fd584c04f1fadd7ed367a4737e55d44884c0be060385c5d5ae222950a"}, {0x50, 0x139, 0x2, "ee71655811a417ffa9229fbd781c95c4c0a1c122d719fc2bb1efc815a140039e0156bc25612f348905906cf31e3a2ec9c231aae369ba53e760190c3b"}], 0x540}, 0x880) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r2, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 10:33:15 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) r3 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x39, 0x7, @tid=r3}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:15 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={r1}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:15 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000030d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:15 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x5}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x11}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:15 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x134, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185, 0x3, 0x2, 0x35}], &(0x7f0000000080)=[0x38]}, 0x9}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x4, 0x3}, @flat={0x0, 0x100, r2, 0x2}], &(0x7f0000000180)=[0x70, 0x70, 0x18, 0x48]}, 0x3}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=[0x78, 0x40]}}, @enter_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000240), &(0x7f0000000280)=[0x38, 0x18, 0x0, 0x40, 0x38, 0x70]}, 0x8001}}], 0xbb, 0x0, &(0x7f0000000400)="fa2d7a666bfcf104454517af28f3d6da082f838f479ca99fc92e2cafddc64aadac664b1fa4cafa13d089cde9ef7811c247ff04b1906af812a3cf6616af8672dce1d5f9210344e44b0d9b9a8c2f4e2f513b3ab9cdc45cebf3877e4c881aa1d7b8323552d6ef23e0d35191d43b9f17ec8be6da9a638a4cc1b37f87875f16b637eabce2dbdccd994fcdc30a68b26f73bdde04ae8099fb58c63c9aaba81c598162345af4748db31c3627cd1751c161a0c0b8d4cf291e7af1d955670684"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000050d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:15 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x800) write$P9_RREMOVE(r3, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(r3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x202, 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:15 executing program 2: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d10a008c17fdc1f0a209247336ab4a00", @ANYRES16=r2, @ANYBLOB="100129bd7000fcdbdf25060000003400020008000600020000000800060008000000080002004e22000008000b000a00000008000700060000000800030003000000"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x1) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 551.848119][T12742] binder: 12730:12742 Release 1 refcount change on invalid ref 3 ret -22 10:33:15 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 551.903176][T12742] binder: 12730:12742 got reply transaction with no transaction stack [ 551.921579][T12742] binder: 12730:12742 transaction failed 29201/-71, size 32-8 line 2899 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000060d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3f, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:16 executing program 5: r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x6, r1, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000), 0x0) r2 = dup(r1) sendmsg$alg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="b5cfd018bb648f12a671fa21ca5e6f3a201d334eeb594858b668393e16307b4639ff29a8a2d65df0e4888e9514c43167e0ad4f1a3cd0a886", 0x38}, {&(0x7f00000001c0)="c50c58822904ceb3330f969a165e97898b9b729a2019250c0200705e242310b5aeea7b32c61c155686c49e1adc563680775634221bb17bd588a08a49eefc205bd701439f1e696cbd86f34bda502bf43ec8c3f10f7196d7c920056271129b9dff47ce53d0f32079414e08b4a520507c387e498e586505e19361ca463d59dc2d8ef42857141248c0598383fa9430c133c756fa8cbfa3f763e8ec7bebe023ea5c6c00d5d2d6181daeaa265853fdde4e1489627d19113f097622a73ae9f4f368e659bedb081e8fcca8b7bdd5c4ce19cd5f6d38f36e56af79b36a0c6c1a499e222c8f3547", 0xe2}, {&(0x7f00000002c0)="b4e3ef000d05de10d78f8efdd7ad07afd0a69e505228c4a0ffe7edf671bad814eb01a043b2bc5de7cf2b573f8e83670d2810208fe0e6ea2161294a27fdf41901a4f52ffe9ab46c46c900b2b473b43efd650bc3ebbce38171445dbb4ace245488c2dc9ce24137767da8d5e1ed4cdb005fa5ea40f5849272d0284be48143083a71f946fb2ec453e2e0e5c83f86d7ade1ce", 0x90}, {&(0x7f0000000140)="cdd8a1bd32e69a3d1d57f595097ed9b9a187c5f34d37b0cc2ace8e66b02bf0b0e878cbcdbaaad701341e217dcbd8f49e515943458d5096237492", 0x3a}, {&(0x7f0000000380)="3c09fe1254aef5542eb7f542843c1b90f2aeb087f727f85feb21873babf9f7715e5b959b1f9b2e7a3db692ffd1be7c06d0c376d33293abea06e9e30e13e0", 0x3e}, {&(0x7f00000003c0)="6691b26da743aef315723e5c098ee36843b0398e148645e993bcf707b7d3e546812d6490282bcb55b59cf5d362bb1cdcf829dcf36ff990935c4a14856c2e3a1ed7441a58e20d23af033ec8e4effa77fc8fb365c119d366fad3f2d00e008b343611f6d8b2e9bd6a448a9aee45ce05052e581d508b1ea8d067b2d680f3dd2853960548fc9e227706f0", 0x88}, {&(0x7f0000000480)="020973fde303b7ff6cf37d136966119351791146855361592cd0b3f06e9387ce6d6dadd01ce977a33352", 0x2a}, {&(0x7f00000004c0)="e99fc4262e9313a2a214a4b3cb55e12b4fddf2c763f0ddb87e5706c7f9ce45d166363ed1dca12072860f7ace3480d58d7916af92c00c3f32b7de1996b3ccefad050d8d8b9162746ab8b0f2bf12b7954673e9b8e1eaf9ea9d328dea066b8691c27d77ef576d4898598beaeb238207ef2b4351980025479f8dfd3f02295f41f82bc3ee8f63291235d0460595f63d0e1bbd239192d759fde21e0ed7512036f3e4b23e011576ec9ecb1d9bdf068e86b9d2", 0xaf}, {&(0x7f0000000580)="638ae7147735d655a99510d18c969cca2872addb2e164ee7fe37764009fab2d9d4740ddecd49c504e3b10a694106a34eebde4006d909a7ee73e2ee64c27125b1e0b7a502d3222136a390a24d5cc55081d4aa6ecd53ba5cdefb36a5234544936ae3cd619f8c5a9dd0d8f796ab3baa6ad6b49fa8319d0ef24c2fa8842cb4e00e838e3466e620f92b279640c182b7855aa3e43ef8703730e2a057e4646e76c6af3a2cae095c3a6809090a3504a0072b6ae77bb59e2836f39b44e198fbbfb448b7bffc2c72fd3b460a12e2", 0xc9}, {&(0x7f0000000680)="f210b27efd92f897a5fa23995e9e57d97fafbec3c04ddf30e2f9461a3729a1271404a031a472a3488649b0c045f963e4e6fa247c5d1f05cf070eced46e1a15cba3660be0d11b5dcc5af8633be5d1c0dc264232919d8b2ecab8273f2bdb6e3007d36544c75e41a248fda58ddf5cc6be2e1945456c33dbd8b80368bd0daf8db5545f9663f5bfe143da38e519fae98d4e0d92e75f3ec7a2b074fbabd8ad6a1ade768af71b135ec0f5b53592a39a6ffb6e9c9cd52294d8be13a515a0c6f2b8222598961bf2a2d50746ad6b735b855467f4b1f04b0d281152ebc98c20a786d4aa015d1d60", 0xe2}], 0xa, &(0x7f0000000840)=[@op={0x18}, @iv={0xc8, 0x117, 0x2, 0xad, "bdd58be6cb57095caedfa57be0b44ba10cda6641901a7ff691d8ce9370c25684e01793f16f6c266210bd9e37c95dd93c30126a468685bc4b4f51af539b9aa939d94ae0376e87ee59128f6b8ee5b8d69ac6b07ff4a7637114d3cb679d2992f9b9f7f02205f6e6b7a3e0f762fc5a583766644412b907e930c2f4c79d639afe2cd521197c4bc4f6f7d69eb83e85660b7ddf0093b9a2e057465ae22079a4d59e48c39c354788a34760c77fa6f5ba0f"}, @op={0x18}], 0xf8, 0x4080}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:16 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r4 = getpgid(0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000740)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000070d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x1fff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x4, 0x1271}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400d2070d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000001000000000000000200"]) 10:33:16 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x7}, 0xfffffffffffffe36) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) 10:33:16 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0x0, 0x10) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000a0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:16 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='configfs\x00E\xfb\xe1\xfa\x0f\xe5\xa4\xf5\xb0\xf1\xc6\xd0V\x8cU\xb8var>\xc2$\x1f\xf8\xa9\'\xf0\xa3*0\x1e', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) 10:33:16 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) close(r2) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/70) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:16 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000e0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/binder#\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000f0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) 10:33:17 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:17 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'caif0\x00', 0x5, 0x10001}) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x48}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:17 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2}, &(0x7f0000000200)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r3, 0x5}, 0x8) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000200d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:17 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 10:33:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400003f0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:17 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:17 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockname$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03fc3e671a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1, 0x0) 10:33:17 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={r4, 0x2}) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000100)) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000400d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000240)=@known='system.posix_acl_default\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x0) 10:33:17 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) 10:33:17 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendto$x25(r2, &(0x7f0000000000)="9c688cdbf34c0aa77ef5e8ab58e94bd1c8556cc93ec78afbe77f6cb08cb49d5443ffea86928b64044738d67f938483f51beb5c9669bd9af0583dbdc4290a36762e601a361d5113ef1d9cb3ca057c0ffd25e350c5b99d6f289d361442731571a52a62e9203e54b9538a9684f2215d8cd2baf61032d2db22f29d4174a91f433b75abc839526088fac4b63f6c351d49b42c9856cd2309929904014fbd55b5460fda39663ab885f25f0542813c0c7572d3105765d1", 0xb3, 0x4004000, &(0x7f00000000c0)={0x9, @remote={[], 0x3}}, 0x12) 10:33:17 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) 10:33:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000480d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:18 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400004c0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:18 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r3, 0x0, r0, 0x0, 0x10005, 0x0) 10:33:18 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x0, r2, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r3, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) write$input_event(r3, &(0x7f0000000080)={{}, 0x14, 0x3ff, 0xfffffffffffffffe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 10:33:18 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:18 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x80a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x500, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:18 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000600d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:18 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:18 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:18 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x2, 0xf5, "b3ef4ca969954e0dbeeae13c09ec47768ff6b40ac155ec6c2a317559f7b76c57476c999ab426a0edca81ad05fe67d451277d278caa7c0b9148ad7ea0a979036302dcb728500fdad60e0b54efabe437bdb889d19ac65d8888a9cdede25752677a5ee456e38d967e277c59ed3885694cb7882a7f7a14cda1355b87e1b74dd04c9b80dd6a823972a31c3faa890e309eba4e979c5aca53b0114ee0d5e4e9347f3174a8453effa54a8ca9e0bc7468e3a24bda550d1874f9014d5710160ca6fa0bd79e594167626f5c813739730f46396749dbee798f3347d016993ddd764946620105ebed8d3f35b87b081aaa88ef0a5218acb053245b0c"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:18 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:18 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000680d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 554.989209][T15157] binder: 15155:15157 ioctl 40047459 200000c0 returned -22 10:33:19 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:33:19 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400006c0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:19 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x10000) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000001c0)={0x80000000, 0x70, 0x7, 0x8, 0x10, 0x1000000000099c2}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000140)=0x8) 10:33:19 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:33:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:19 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) fadvise64(r3, 0x0, 0x0, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:19 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:19 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000740d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:19 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:33:19 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) accept$alg(r1, 0x0, 0x0) 10:33:19 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400007a0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:19 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:33:19 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200a00, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) 10:33:19 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)=0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:19 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x109000) close(r3) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:19 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240007d20d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:19 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:33:19 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000f00d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:19 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x1}}, 0x18) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:19 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20400, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:19 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x800, 0x3, 0x9b7, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000340)) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000020d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 3: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000030d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:20 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)="275098b518816bb1a14aa4d441477b557a6deed08a0b8ab4cfb126e3081b9e961ea959a5514f9ef981f64ea946fd0dcf6ccaa79f60395be575a3f5b04ebee8723fdeab1bec4f24511f6e9ae873773cefdf6d15a23b254c2764ef486ee071f33ac70cf4be96930d779672f048", {0x9, 0x5, 0x757b565f, 0xb, 0x6, 0x9, 0x8, 0xffffffffffffffff}}) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r2, r2, 0x6, r3, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:20 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:20 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x5a58}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @empty}}}, 0x84) dup(r3) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) 10:33:20 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ptrace(0xffffffffffffffff, 0x0) creat(0x0, 0x100) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x42) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102041ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001, r0, 0x0, 0x0, 0x5, 0x0, 0x2}]) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x7ffff000}], 0x12, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000040d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000050d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:20 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4cf, 0x80) ioctl$TIOCMSET(r1, 0x5418, 0x0) 10:33:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x8905, &(0x7f0000000140)) 10:33:20 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xf249, @dev={0xfe, 0x80, [], 0x6}, 0x1}, @in6={0xa, 0x4e23, 0x80000001, @local, 0x1}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) exit(0x7) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:20 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000060d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 3: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") creat(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000002c0)=""/216) 10:33:20 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x80000000, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000070d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:20 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:20 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x111000, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:20 executing program 3: r0 = creat(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) r2 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) fcntl$getownex(r2, 0x10, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @dev}, {0x7, @broadcast}, 0x7a, {0x2, 0x4e20, @loopback}, 'netdevsim0\x00'}) r5 = getpgid(0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) timer_create(0x1, &(0x7f0000000040), 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000740)={0x9, 0x5, 0x0, 'queue0\x00'}) 10:33:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000a0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x0, 0x8000, 0x0, 0x9}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) fcntl$getownex(r1, 0x10, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @dev}, {0x0, @broadcast}, 0x7a, {0x2, 0x4e20, @loopback}, 'netdevsim0\x00'}) r4 = getpgid(0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) 10:33:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:21 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340836703043f679a0189668bb3aceca0a22f3c6f6e8c75f2a30c0c192a118cc674fdb9af20bc608b6a86011189d7479af0bb77cf97d23c259a787dce6ca71e75b6fb93fcfd1976de339bdd633d18393dbea47f525fe0582f948be4120096f01c5c6fa09d7ba754b25d2107c5ec33e8dadfcc8240edb58040c13c74550c765df38bce5f841be6ef9f551e4befdfd6965f9f1ee014f9f8e6abb2247df0a9cae775f8346543f304b3f52e20a01116", 0xb5}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:21 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8001, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000e0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0xf88, 0x3, &(0x7f0000000340)=[{&(0x7f00000003c0)="d0d5ff3f872463ceaed6d3c578229c0dff032742f0a9b6f0e5db165e5141cb0a7fe22d12b3f946c13f768db94121e4e3faeac6755d54f0dabc3284cd42909ff1bcf678200e80a69664f0b41e71998454b5d47b0bfbf119e14d46562a985b384893c7e84568dc47bcd7a7f10d105a41d6449d7f551e4ebc8ece3765ff65748a44271261db246244ddd2ddb500040000000000009a4d958e6ace86b28e3a757b7ff38f370dfbe6efcb", 0xa8, 0xffff}, {&(0x7f00000001c0)="bd5c39f4aeafbf8a0f9127d60a912ff8bbbb617e8e8a7773a2f5f4e39b2f8dcc52d919154dd4dfc31cbb682bfc49dcf7c8803ccc46badf1d7600c6daf7947acaa4f6484c82e320162eff871ef808350c8ab461269de1a832467dc19d8a1f916a9026c2b07544b9e2098072ac996807f91006d3eb515d4935b8a6baaad18334ff5b58c9fd9eda2568727d99126b3126fe9f94affd790023bcfd8ec1470203d4de32cc796c0c53b58f42ddfa07241a057de8688a934363fa0525dfe7", 0xbb, 0x101}, {&(0x7f0000000280)="dd372ecdace380ebb498dc6495ac494e9c9e34bd3ff2586d1828fc7aa9c63d7abe89c831da7b7024cd83f31666807f201f4926c654c263d33e034d3b18cf3679390ba3e39eafe8a79840b605bbf344ee9e39bc5d22c49187a37dadfc8d1d6363a92658aef8c2c0e873846cac2d9e6de4855809d25409dde87cfbc8a6de36b96992cbfb24ff1a678a301a9b23c939336ecd094c5f2bcd41f6f68559ebef7461e2f9e926", 0xa3, 0x4}], 0x800000, &(0x7f0000000140)='$%bdev}\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}], 0xa1, 0x0) 10:33:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000f0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, [], 0x11e6}, {}, {}, {}, {}, {0x788aa0eb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffffffff226c}]}}) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:33:21 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:21 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x1f) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000480d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 5: r0 = socket(0x13, 0x80002, 0xfffffffffffffffd) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x0, 0x2, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400004c0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:21 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xd4b9c89) unlink(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x1ffc, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ftruncate(r0, 0x0) 10:33:21 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10000, 0x5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x0, 0x15}, &(0x7f0000000140)=0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000600d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) tkill(r1, 0xd) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000680d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:21 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$netlink(0x10, 0x3, 0x100009) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:21 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) 10:33:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400006c0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:22 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@mpls_delroute={0x4c, 0x19, 0x100, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x2, 0xfd, 0x6, 0xfd, 0x7, 0x2000}, [@RTA_DST={0x20, 0x1, [{0x3, 0x2, 0x311cb1ef, 0x6}, {0x1, 0x9, 0x4, 0x4}, {0xfffffffffffffffa, 0xc5b4, 0x517, 0x10001}, {0x3f, 0x7, 0x5, 0xffff}, {0x400, 0xffff, 0x0, 0xffffffffffffffff}, {0x1, 0x9, 0xffff, 0x6}, {0x0, 0x62b, 0x101, 0x80000000}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x6c}, @RTA_OIF={0x8, 0x4, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000740d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:22 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:22 executing program 3: add_key(0x0, 0x0, &(0x7f0000000240)="355ae313983db3cb508d051fd916c40f9dfbe39f8083df88c494704fced57f9b22c782620cd1d17f900337507ec1f29df2f38e7f114a928edf63c81c3e0e4efcfa4e6d9d5dd59afb859f9ab26ab747f1542f77086ba81a9f80c0772a7b2ab8ebfcba70dca63128755a2bab8b76c77ca165df15ef65ad8d74984e12a4f0041ec71db18305bff8b955e33d1536e4eb0124b88bbd04d5575e9fc0ced372590d40e615364c1651ab8c5fd9fa374d45682174f395a61921ae0f16ee8653cf1931fc8662d6d8709fbcf707d603e9cb114ec6eec2a4807e94b1eb850cdf848ebf7206c798967e66042829", 0xe7, 0xfffffffffffffff9) kexec_load(0x0, 0x2a2, 0x0, 0x3a0001) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000640)=0x6) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042abd7000fbdbdf25100000000800020004000400100004000c000700080001000b0000000c00090008000200d66500002c000900080002000400000008000100000000000800010000003604000000000000000008000100000000009000050008000100657468001c00020008000100140000000800030000ffff6114d46d000200000044000200080002000010000008000200ffffff7f0800010006000000080001001f00000008000200080000000800040007000000080001000700000008000400060000001c0002000800020004000000080001000e000000080004000200000008"], 0x1}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8f790b1c0216faa868beaf49648cacd4c3aaf17d7190078be92845e161bd826c14f96b596d10990b58db0b0bb1d24d9a06ce4388fbe9f8e1ed3b22ff2e08bf876bf4f89fe77065ba902b3df0676f42e9e55af594c6e4cadffff7c1dc23382319325276b73ec7cb5467313809", 0x6c, 0x0, 0x8}], 0x320001) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='TRUE') 10:33:22 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x801) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x40) 10:33:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400007a0d061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:22 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8400, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000040)) 10:33:22 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x400}, {r1, 0x8120}, {r3, 0x600}, {r2, 0x1002}, {r0, 0x1000}], 0x5, &(0x7f0000000040)={r4, r5+30000000}, &(0x7f0000000080)={0x3ff}, 0x8) setsockopt$packet_int(r1, 0x107, 0x19, &(0x7f00000001c0)=0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000140)=""/79) 10:33:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xcc, 0x0, &(0x7f0000000200)=[@dead_binder_done={0x40086310, 0x3}, @acquire_done={0x40106309, r2, 0x4}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=[0x38]}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=[0x38, 0x78, 0x48, 0x58, 0x20, 0x48, 0x30, 0x20]}}, @increfs_done={0x40106308, r2, 0x2}, @increfs, @acquire={0x40046305, 0x1}], 0xd5, 0x0, &(0x7f0000000300)="db6d4b358c97d65ca0f646f2b22c87f38bbe8c3cbe4cfa1a57c7376907a5afaf438e7898dadecc6383dac4603680c36503c3868a064047e6a25da58f9134bd7f8f208deb3e8aa3e8675dae621d2b50e6397124ee423b918aeb228e88cdc2960c5e7e54a6cd440f140bb0db2e4e4330150891380cc484de07675997391f78b2f6578fe9b2e9cc0a48c12f05bb31856e0f6f8bc4e8d8d2f19a72e4e0ed1da8eb99a2f963a6b4a99cfc5620617b1fdd7351b171909f15903e0f8516fe5d5e29f5d968c8a42a362dde18455d05228e67945ad24fae8046"}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x100}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x7, 0x8000, 0x80000000, 0x7, r3}, 0x10) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r4 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r4, &(0x7f00000000c0), 0x5dc4) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') 10:33:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000012061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:22 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/175, &(0x7f0000000000)=0xaf) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:22 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000068061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:22 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000f001f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:23 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0xfffffffffffffed1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000010001f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:23 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0xa00) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x8000) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000200)) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x8, 0x4) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r3}, 0x10) 10:33:23 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:23 executing program 5: r0 = socket(0x0, 0x5, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pwrite64(r2, &(0x7f0000000000)="625bba9dfb17c5d8c7c2c39ef04b76a2067c7c72d575412ef3d24dfa4c24914cc3f1cd1bd9eab61f83da47ca35210c320ab49c17c51f548b494c0e924cf2d089a94f2f339881199bd2b97b95dab937cf72e7ade40d537524b24fea0b4571d467cbc88c88ddf43173e3e8aea2bc9fd846d21bc778144cfd40c531498716", 0x7d, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 559.569624][T19760] __nla_parse: 1 callbacks suppressed [ 559.569632][T19760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000010061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:23 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x100, 0x7, 0x0, 0x7a7c, 0x8, 0x7, 0x3, 0x7, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x4, 0x2000000002}, &(0x7f00000000c0)=0x2fa) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x81, 0x2) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:23 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x402000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x9, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000240)={@ipv4={[], [], @remote}, r2}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x26, 0xc, 0x16, 0xf, 0x0, 0x5, 0x1, 0xaf, 0x1}}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000012061f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:24 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d091f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:24 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = dup(r0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000040)={0x6, 0x4}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) delete_module(&(0x7f0000000580)='dont_hash', 0xa00) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x9, &(0x7f00000004c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off='xino=off'}], [{@dont_hash='dont_hash'}, {@uid_gt={'uid>', r3}}, {@smackfsdef={'smackfsdef'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-selinuxem0'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}]}) close(r2) socket$netlink(0x10, 0x3, 0x1f) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r0, 0x0, 0x10005, 0x3) [ 560.492101][T20410] binder: 20407:20410 ioctl 541c 20000040 returned -22 10:33:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d0b1f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:24 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48200, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0xa77b17695deeb683}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d681f001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:24 executing program 5: r0 = socket(0x800000000000000a, 0x80802, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080)="5c8bf3ad893a12d9193f868d5fa1d96ce509e19df1d695aee6191c38e685172f70d420d1462939c28838d4ddd561dcd310902a00f016b56b218c8c8fb3265c9a7a0807cb3d63b85a89025f5935b4d9268cf10149a35e79b4a82a9db4c7e31fd108efff92b52201e0e9183f986a", &(0x7f0000000100)=""/57}, 0x18) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 10:33:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:24 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x1ffc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d0668001cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:24 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0x0, 0x3) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe5fa, 0x3, &(0x7f0000000380)=[{&(0x7f00000000c0)="190b334cf71fc410d98bda84d74e72eb310d991d87eca220ef0858f2f75c4916d8d36f89690d45126b5e8c3b0d1aae8c8272fe69caa5889034e351f6d6c68660f6dbff52865238080be9c63867de9b20986a85acc9e50c4cd76a4f90b68f4ceeb4c7bb52732766322d73eab5c762cac004d258695f5efaa6f62d0351ded6d94e5728691eaeea655d83fb89", 0x8b, 0x7f}, {&(0x7f00000001c0)="dfd73055c23f9aaf4a653f9655d47ee704c431d162d5b06e26063c851ece27aacccd73c48ed7d8873dc958fe643cd9300dfbc16407e23ad08727504e8711a995f52dda0eb0ac324e294a2fed2aa71e4f8062cdb485708097a501c74f166248be3723da49b6d6a28c68015f5c578bc027298e3ac9ee18562f9aae3902bd068312c6d43f09ae6c", 0x86, 0x800}, {&(0x7f0000000280)="bc2396691e471453e09b65465f8f1f02fb9a54e927ecebaee1b90eaf21c86bb972a5189cc88d78d2faef12202b68c23baa1061e5666d0d7b0a710e52dd7abf17e7bfa550ed27de4fdf1c68d299a073a7ffa37851c748b99c4f1fecacf13202db2f5a975ffc06e361a0558487e5f3d704f19e5fec70a65807ad988a654367f2ad4cf43c6324024b7aac8963a5c623b5755853e9cd136f54ac461c0d1f58be04533fda3da29495d501124ac6012ddc3a9eb5031e8bec65f8f9ef3ba8b3dcdd3b3805307035e1d9ee0feba8b24d8e47605cf8760c53cefd28cefa4b4d2b6403dd46678f3f12d9db6bf9a46d521a9ff5c268716178e170f82e0ca0b7ec77f4", 0xfd, 0xfffffffffffffffd}], 0x400, &(0x7f0000000540)={[{@fat=@nocase='nocase'}], [{@subj_user={'subj_user', 0x3d, '/dev/vhost-vsock\x00'}}, {@subj_role={'subj_role', 0x3d, 'wlan0'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffff000}}, {@fsname={'fsname', 0x3d, '\'\'gppp0em0system'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+*trusted'}}, {@appraise='appraise'}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r3}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio='permit_directio'}]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930x0, 0xac}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x26ab29d1}, 0x8) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 10:33:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f031cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) 10:33:25 executing program 3: syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) close(r2) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x2000) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x10ba) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 10:33:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f051cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:25 executing program 5: r0 = socket(0x19, 0x80002, 0x4) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x1, 0x2, 0xcca, 0x8}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x458, 0x230, 0x118, 0x118, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000300), {[{{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, 0x0, 0xffffffff, @mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x100000001, 0x10000, 0x7, 0xdfc, 0x7, 0x7, 'veth1\x00', 'veth1\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfd5}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @multicast2, @loopback, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0x4ab, 0x7) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x4a, "87074e40fc9e3aeb2a3cd505d577037ede1125bec5d55d1c82eeb018dd31f8990e6ef2cd35dfab62d18164b423aa286055d800260645c94afdd1ea7c233a7c65700908315a37f7ac8cd9"}, &(0x7f0000000240)=0x52) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5}, &(0x7f00000002c0)=0x8) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) syz_open_dev$video(&(0x7f0000000800)='/dev/video#\x00', 0x0, 0x10080) dup2(r4, r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:25 executing program 3: syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) 10:33:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f061cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:26 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x7, 0x4) close(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000000c0)={0xc155, 0xa0, 0x7}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000040)={0x42a, 0x2, 0x4, 0x5, 0x80000000}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ptrace$pokeuser(0x6, r1, 0x20, 0xfffffffffffff8bf) sysfs$3(0x3) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000001c0)) 10:33:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 562.208047][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x480) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x9}, 0x0, 0x3, 0x4, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="6150ba112641d85bbc50d0380f6b76f3ca7409a110f16ae0b395b6ceebcb1e89c146a5f39ebeb5f26194e973791d37e56a6774823b816aa75f81abcc76705cdad9e1aa48820910f5b6d8584b2d6940559fee7d5b5ba87a83c4a1674b57952587619d7d06c674d4b7c98d298eb0b700ee8aab7a9adfda169654b998166878587ff84918f598ea612f884405e441191d65744d67b795b6cbe5372ba3f3733d168d0fa70a22970ea2c3dec33c2cdbe6f8bbd479fca699fe35cf5a8d817303bc3242c93d29762181e92c495946b712f6807d1a4594", 0xd3}, {&(0x7f0000000240)="90c870e12543ee36f4de356eda8ad3dadb0446b27eba8a1952ffa05bd8", 0x1d}, {&(0x7f0000000280)="2ef3c820505cd08cfc74ef847e6bac193ba374a3717260e9c98b8b77d99e3781be63d9cb8709febcdc4ec878ec5a78030d9bc65659bed7661b315859e953979afb5cb4b6bd3660fca8b30ff82c8e23803dd5a043a38ff32dbfd176636bd59c9f18cb5405f69c1b8f364007b9c1c2d71e69f3500bb114146d3095b6af4021f5980cf2126804d512d809b3f214a0ad4dec523c2f07778f7a035f19c87ce6438cdac77793cb3333ab6ee7c8eaa37f1ef27f07895c1ed1fa6ed945567ce5af215f5281ebf9082e7578b56e34badf5b45c9aaa69dde472ebba11ad1e9745eae7d973cf85c374872463ebe7a31262a6197", 0xee}, {&(0x7f0000000380)="854f1e2eb644cb4a844d115703cb763de2e86b6d2fbeac461b4d97815d8bfc099d0e64e33778dcb10f02b8f41748daf61ae704da64ad7be0c1957a8e66685d15c0d20b8d107b31c5aae71fe5eeb99f07f73768812ead04acd432617c9e983ebaea4caeef6a90", 0x66}, {&(0x7f0000000400)="79122bd9d3e7af0a7f7fe8d9f5930020213074911774fad41c243d0508928301b4105ad1b442ff1d8906d99cdf33f6f2dc5ba3dedfab8b6d87fcdc7ef249bd731a6696db2fb794b1bedad3edffd7de38fa73c4694c9dd07d50eb16619cebc486b767fedac76c02cc2ac46929909461a6f4faeb7695340a4b782396df2c79a4f8e034793a1fe040fa56765d9633fa99c933", 0x91}], 0x5, &(0x7f0000000540)}, 0x80) ioctl$TIOCMSET(r2, 0x5418, 0x0) 10:33:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f071cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:33:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:26 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4c010, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, r1, 0x8052f95) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x94, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x3, 0x8000}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x58, 0x30, &(0x7f0000000100)=[@flat={0x77622a85, 0x0, r3, 0x1}, @flat={0x77622a85, 0xb, r4, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x2, 0xc}], &(0x7f0000000080)=[0x18, 0x70, 0x40, 0x28, 0x78, 0x28]}, 0x8}}, @acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x2, 0x2}], 0x87, 0x0, &(0x7f0000000240)="504f3af06297f3b0a4994f4dc4c05343623087190e0430ace73ee2e3963d033aff13f59f5ab51f97ef759f5a502c8653373ebf669cce5de8cd65d7cb46ea5dd8fc912b2df5097ded8297d9406a0de9f5e947aeeb2a6e2ad2be4e12ba24d61972c4da4bce0af68cbf02f706a5d4399db359d16d3d583d4bff36559974a286707f29abe3f7555dfa"}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 562.504249][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:33:26 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = gettid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r1, r1, 0x6, r2, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(r0, 0x0, 0xffffffffffffff7c, 0x0) accept$packet(r0, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f0a1cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 562.740110][T22450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f0e1cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:26 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:26 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x450000, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 10:33:27 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001540)='/dev/btrfs-control\x00', 0x20700, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001580)={0xaa, 0x8}) uname(&(0x7f0000001700)=""/83) r1 = socket(0x0, 0x80002, 0x0) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r2, r2, 0x6, r3, 0xffffffffffffffff) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r1, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) vmsplice(r3, &(0x7f0000001600)=[{&(0x7f0000000040)="baccdc36d658284200f899243572eb7e159ef68ff23efe39e7e50a9a98e83fee152e9055cff02329854a0d61aae1a364397cf057852fe51b1e59d5a36b", 0x3d}, {&(0x7f0000000080)="9e62951fa6295f982ec79a95d0a50ae9890806fcdd0870b9f6918bafc209a58d93f14a18666b6b04", 0x28}, {&(0x7f00000000c0)="0a236fd7cc3b65523c25f273d06911ed868606091eeb7c6e1bf8206a1bfaa4aa0a74b037326fe6cfa1962f", 0x2b}, {&(0x7f0000000100)="9776b3aa1b00875ab61e65da0247b08ace1d237e920a583525100a107ff2f986f7c636c4fc81c53bdac419dbbbdd93a5e4aa51dd592286811dcb208c1ecf229ad974ad577b00b1598207968b3a4729a084e57a6d39f69a9a74277ed2b884a3bbb580e68d8cdb719220be76dbe0c06f1a372627b3ea00bc2377a8be0537eda7efd46d869c3d81675a5f06a48c717a47db0a8b6f55ddfda2a20b38019dd32a29d102a5d81dd6ae49033ca1350b8d2897c47dbc4b6af195eadaf24f4f178eea9c827df602a32e8f38062031d6e3556b6cf391f4356ea4cc8abd7d15b7767f264706e8b6179e10ff7f06e4326732ff77ae", 0xef}, {&(0x7f0000000200)="0733f997b96141d71073430e3517558926d988356ac16845f9002a68ff1e403efe6a889614a07a837a61eb5282fcea90bb79e5184d0049e9aea5e0c3fda14432ce6ff86cdaf9da6d747bee842706b8abceb0ed601ab8f7cac1352a5a3744972f4f2816911caf979f132fce6d3e2929b8ecc97863cab7f18187903aeff5fe8f29a5d0b850026f6efe095f41cc29957680873bf68ad16608c74ba90f97871e8431ca8cc4f642b23ef1b1597bd12ce3ae4c503582b95a6b9649044910447eb9", 0xbe}, {&(0x7f00000002c0)="3e4599e52a308a06f9223e8ccafbc9f2", 0x10}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="1fb85c22d1c5f63ee0085ee120b18fb7b4eb9d3e514e3a41e0421f067dbd870b984702012ce1d8932107910da862ee8eb712510881ea53a7d1972a1b613f92b55dd262a6f93e1b91287a2afd7090b473c4d3a2cbfd2f43fa68fb217c7eed55a9981a2eed9f4ea32c48cfb153dbfbe944cfda55ebc53f246eef75103ac439badfaa89a0138f0af1f56cfa113fbb436ad5a056650ed4191294805c8be334dfc16fb8cee849da2d", 0xa6}, {&(0x7f00000013c0)="f27f1a51295be4a9f2b223a5437d036df9bed341bbcde613cd439b9f9628db4510c0f6d3690bde626be893caa9b12810697ccdb9c881c0ced9a20e41e3c29f2b00d156251f01559dd2dcb6bc6ec678867d35c4e15afdf0c7c60d53df28b18d79e068c706c5572a58cdfdc519122093ba719a81cd2d2f85f2d1677adce6758a1562e44fc3cbdfb26b5e56cc8691f387a01592a7f8ea5c38455b53d537ea2a1b8691b73dd2ba1822d9312441b700ab64e3233457b42d49c0bb3c949c6f8e02f6498889dbcc74b16fb77683ff11d2e413a76ed35e072c82d90f9fd980ab41620d63035844ca89a0ed62ad30882070", 0xed}, {&(0x7f00000014c0)="9cc3efeb97d2ded7418775aa62442f60d77bb927ce8a5f96c938dd5fb921881a51b42dcf93f6afeed16af38e6c10846a036692b279cc21e2b37b47d8ab7e0bd07b9f66769091bdcf0489635db5e69aeccaa82f464c3581b7242ae7bdc702b576794932ef", 0x64}], 0x100000000000016a, 0xa) sysfs$3(0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000f, &(0x7f00001c9fff)="03", 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e20, @local}}, [0x3, 0x1, 0x0, 0x2, 0x20, 0x5, 0x4, 0x7, 0x23, 0x1f, 0x9, 0x0, 0x9, 0x800, 0x7ff]}, &(0x7f00000015c0)=0x100) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)={&(0x7f00000016c0)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001880)={r6, 0x5, 0xe0, "66311435135d7c6f4967f677addc0f08bcee4f9f6d04150754f0a7f6939b5c4b4d2a142f6df88fdd858fecb9b8e4a206509121757adfb27cb15db78e46913d8e49c1dc800c3e0d65d55387e7f105f439f2c0e3f5359c1ad0305ebb6c86d3ea3a5ced06ddc5c5689bb7698dfd7bd42d9b348f9fbbe85284534464c3b07bb3ac50aaba05d8fb6d072741f9fe07c2d18238c9d8cf12d357cd6035e5451db852d27806eba80d86fe40d471071cade073671d2f01953f36de45941a6fc55ccbf1749b7f182fe4050b29739fe4815fe54e62c960c6d346167b13a7e4a735b55d1f6f58"}, 0xe8) 10:33:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 562.954778][T22692] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:27 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:33:27 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x80000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:27 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f0f1cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 10:33:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0xffff}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r3, 0x800, 0x0, 0x7f, 0xff, 0x7ff}, &(0x7f00000001c0)=0x14) ioctl$TIOCMSET(r2, 0x5418, 0x0) [ 563.302965][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:27 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r2, 0x0, r2, 0x0, 0x9, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x910000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='i\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000b2abd7000fddbdf250800000034000900080002000500000008000200ffff00000800010005000000080002002000000008000100e600000008000200050000002000050014000200080001001e00000008000300050000000800010075647000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 10:33:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0xd, 0x3f07d77d, {0x57, 0xacb3, 0x6, {0x0, 0x6}, {0xfff, 0x2641}, @const={0xfff, {0x6, 0xc0, 0x4, 0x3}}}, {0x57, 0x8001, 0x410, {0x7f, 0x81}, {0x7f, 0x1f}, @ramp={0xffff, 0x0, {0x8, 0x1f, 0xffff, 0x10000000000}}}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 563.596937][T23232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pig=23232 comm=syz-executor.4 10:33:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)=r4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006800), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 10:33:27 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f4c1cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:27 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f601cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:27 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x500) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080), 0x10000000000001af) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:28 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f6c1cfffd946fa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0xd6, 0x5, 0x4, 0xe000, {r4, r5/1000+10000}, {0x4, 0x9, 0x8, 0x10000, 0x100000000, 0x8, "b9fcc6f5"}, 0xfe5b, 0x7, @userptr=0x23f, 0x4}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x48901) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0xffffffff, 0x8, 0x4, 0x8, 0x1, 0x80000001, 0xaf8, 0x8000, 0x43, 0x31af, 0x0, 0x81, 0x5, 0xfffffffffffffffd, 0x9, 0xff5f], 0x16001, 0x202600}) 10:33:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:28 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x3b65, 0x0) 10:33:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040), 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0x9, 0x8, 0x1}, {0x2, 0x2, 0x100000000, 0x1000}, {0x8, 0x7, 0x4, 0x100}, {0x5, 0x401, 0x8000, 0x9}, {0x25000000000, 0xa302, 0x85, 0x7}, {0x2c9513e9, 0x3, 0x6, 0xf3a3}, {0x1, 0x7f, 0x3f, 0x7fffffff}, {0xfffffffffffffff8, 0x6, 0x0, 0x1}]}) 10:33:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:29 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) socketpair(0xf, 0x2, 0xfffffffffffffff8, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x801, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x1f, 0xe78f, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:29 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x3b65, 0x0) 10:33:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x33, &(0x7f0000000000)=""/51, 0x7, &(0x7f0000000080)=""/7, 0xd4, &(0x7f0000000100)=""/212}) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679e0189668bb3aceca0a22f3c6f", 0xffffffffffffff20}], 0x2fc) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:29 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0xfff, 0x0) 10:33:29 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x3b65, 0x0) [ 565.271318][T24343] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd940aa2830020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 565.446512][T24431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="57e205c6b139a54845e60780ce2be9ca2f0ada3a0897694a4a2ab1b9d92e3158ebe44d25791bb88d0a4c2275b335576c413a17074f213936755ef9a3243bfe4172eb1fe4c0e47863d094168d7d14af05dce322543f5c566e3dc3015ff77af05fff28991c7190631d55944e39a3ec9b6d28d5338057be1ef55465fc1bbdee0a30a36f7f6211b7a37f81fbbc26888113caa83ec01d7ec09b6a3bf42a5902fd34cb760dd3b34cc4629a4e08033c22526e0d06944b54dacfa758c09043687b8be15ad5488f38588af091351d8e47464b4279a62f36a2", 0xd4}, {&(0x7f0000000280)="cc60f367977e84cd8b0d9b367b95f28d3fbda3dc05df5119a17fe893f44ea0a2765c7f0b866c1aea0e9c26c323f303b10dc11946f9a69a434c3d587e467056454e0a701de619162be9168fb05fdc0b02e71e338d30fc80f36a2eb04a237037f204ae3910463088f11d8b73afb06ebfb6b8562056f2019b5ea647189c6f134f2ac95a1922544ad6d535717082446bca16ba06402a4cf2d3feaa6fc0c89ad7616b03e8ef4c455ddccdb54d8a8dead5f22a4240c7d1edf9da4456742e00cdf40722b408bc2ae0053086f2dc5fe7abec11d76c747c5f93b112b211e7fbec4e170b", 0xdf}], 0x2, &(0x7f0000000080), 0x0, 0x4004004}, 0x80) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:30 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "d4801dc29029f61a1a4a1f753371991de7a73775b4ee679791d5ec617a015b02", 0x3, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000400)=""/244, 0xf4}], 0x4, &(0x7f0000000540)=""/190, 0xbe}, 0x20) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 10:33:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[0x7fff, 0x5, 0xd3c9, 0x90, 0x8, 0x7104, 0x6, 0x3, 0x9]}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6000000000, 0x9}, {0x1f, 0x8}, {0x7fff, 0x2}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r0, 0x0, 0x400000010005, 0x100) 10:33:30 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x3b65, 0x0) 10:33:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "a225c0a91d"}, 0x6, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = dup3(r1, r0, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000002c0)=r3) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x101000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r5, 0xfffffffffffffffc}, &(0x7f0000000180)=0x8) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 566.412425][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830320200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:30 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x3b65, 0x0) [ 566.549454][T24822] binder: 24817:24822 ioctl 400454da 200002c0 returned -22 10:33:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:30 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x3b65, 0x0) 10:33:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830420200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:30 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000140)={0x8}, 0x8) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffffffffffde, 0x30000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x40, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:30 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000100)={"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"}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x5}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:31 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x3b65, 0x0) 10:33:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x6) [ 567.149222][T25278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 567.166564][T25279] binder: 25273:25279 ioctl 40305828 20000040 returned -22 10:33:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830620200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/35) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x2, 0x680, [0x20000100, 0x0, 0x0, 0x20000720, 0x20000750], 0x0, &(0x7f0000000080), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x1d, 0x34, 0x9000, 'dummy0\x00', 'tunl0\x00', 'sit0\x00', '\x00', @dev={[], 0x12}, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x12}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x2f0, 0x360, 0x3b0, [@limit={'limit\x00', 0x20, {{0x9, 0x8, 0xffffffffffffd213, 0x8, 0x0, 0x81}}}, @bpf0={'bpf\x00', 0x210, {{0x37, [{0x0, 0x5, 0x6, 0x6047}, {0xffffffffffffff96, 0xffff, 0x1000, 0x7}, {0x5, 0x8, 0x7f, 0x8}, {0x1, 0xc000, 0x9, 0x10001}, {0x1, 0x1, 0x0, 0x8}, {0x9, 0x0, 0x5, 0x982f}, {0x23, 0x3, 0x6, 0xef}, {0x80, 0x7, 0xfffffffffffffffa, 0x3}, {0x9, 0x7fffffff, 0x5, 0xf115}, {0x9, 0x200, 0xffffffff, 0xb7}, {0x20, 0x16, 0x6, 0x8}, {0x0, 0x1, 0x8, 0x1f}, {0x5, 0x6, 0x20, 0x400}, {0x800, 0x1, 0x4, 0x8}, {0xfffffffffffffe00, 0x1, 0x1, 0x7}, {0x775c, 0x7, 0xa3c, 0x655c68b1}, {0x6, 0x7, 0x3, 0x65}, {0x55ec, 0x6, 0x2}, {0x3, 0x9, 0x3ff, 0x3}, {0x8, 0xfff, 0x1f, 0x5}, {0x40, 0x9, 0x81, 0x1}, {0x14000, 0x100, 0x8000, 0x5}, {0x5, 0x0, 0x0, 0x7}, {0x14a00000000000, 0xfffffffffffffffd, 0x3, 0x5b43bf47}, {0x0, 0x2, 0x0, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x5, 0x2, 0x7, 0xa084}, {0x1, 0x3, 0x4, 0x20}, {0x100, 0x0, 0x10000, 0xffffffff}, {0x7, 0x8000, 0x1, 0x80000000}, {0x4, 0x100, 0x0, 0x6}, {0x3f, 0x36, 0x1, 0xfffffffffffffffc}, {0x1, 0x5, 0x2, 0x7f}, {0x1, 0x87, 0x9, 0x3ff}, {0x9, 0x6, 0x1000, 0x68}, {0x7fffffff, 0xfff, 0x8, 0x3}, {0x3, 0x5, 0x8df, 0x1518}, {0x3, 0x7, 0x400, 0x400}, {0x8, 0x3, 0x6, 0x1}, {0x3, 0x81, 0x1, 0xffffffffffffff00}, {0x8001, 0x31000000, 0xfc14, 0xa8}, {0x2, 0x1000, 0x4}, {0x200, 0x4, 0x100000000, 0x4}, {0x1, 0x401, 0x1, 0x6}, {0x7, 0x6, 0xcdec, 0xed0000000000000}, {0xffffffffffffff21, 0x8, 0x10000, 0x20}, {0x5, 0x3, 0x1, 0x6}, {0x0, 0x4, 0x3ff, 0x10000}, {0x9, 0x200, 0x6, 0x1b3}, {0xffffffffffffffff, 0x8, 0xffff, 0x6}, {0xb0d, 0x5, 0xa9, 0x2}, {0x3, 0x101, 0xfffffffffffffffc, 0x5}, {0x4, 0x5, 0x9, 0x9a1}, {0x100000001, 0xa853, 0x8}, {0x7fffffff, 0x4, 0xffffffffffffffe1}, {0x8, 0x4, 0x8, 0x3}, {0x6, 0x7f, 0x117d, 0xc90}, {0x1, 0x7, 0x2, 0x2}, {0x81, 0xfffffffffffffff9, 0x4, 0x7}, {0x20, 0x4, 0x2, 0x1000}, {0x200, 0x2, 0x9, 0x6}, {0x9, 0x6, 0xffffffff, 0xffff}, {0xffff, 0x1, 0x2, 0x9}, {0xfffffffffffffffa, 0x2, 0x401, 0x81}], 0x3}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x2, 0x8}}}}, {{{0x19, 0x68, 0x600f, 'batadv0\x00', 'veth1_to_bond\x00', 'veth0_to_team\x00', 'nr0\x00', @dev={[], 0x12}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x1d8, 0x210, 0x240, [@comment={'comment\x00', 0x100}, @connbytes={'connbytes\x00', 0x18, {{0x1, 0x6, 0x3, 0x3}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x6f8) 10:33:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:31 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830720200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:31 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x7fe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:31 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:33:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830a20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:32 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830e20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:32 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) getpeername$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendto$inet6(r1, &(0x7f0000000140)="37ade1d630a3153f0b79ea1230d0d0371cc1002b49c5f7bbcc573a7fe7e8b718d52729868f28999f228c5512ed81b0815d1be7d661b618862bf4ca2577b53f82a4d0ac53af1f0ebd722326745624654cd06eacf2065919af362b4109087d35f97d8d7bef40d7dc157dee10a34277931a296102e10b0be899cf506c8a61e6b35a32bec2dc9e58d7e70435475d3281e1f95a93d665f2c2565bad", 0x99, 0x40, &(0x7f0000000200)={0xa, 0x4e20, 0x100000001, @mcast1, 0x100}, 0x1c) 10:33:32 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0xffffffffffffffa4, 0x20, 0x101}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830f20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:32 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2834820200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:33 executing program 3: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2834c20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:33 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/246) close(r1) socket$netlink(0x10, 0x3, 0x1f) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x79f, @empty, 0x5}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e20, @remote}}, [0x0, 0xc7, 0x80000001, 0x101, 0x17, 0x1, 0x81, 0x200, 0x6, 0xfffffffffffffffb, 0x100000001, 0x8, 0x9, 0xf3, 0x4]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000c80)={r4, 0x1000, "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"}, &(0x7f00000002c0)=0x1008) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:33 executing program 3: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x4000, 0x0) sendto$inet(r2, &(0x7f0000000380)="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", 0x1000, 0x40000, &(0x7f0000001380)={0x2, 0x4e24, @rand_addr=0x1}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r3}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00]) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000240)={0xa0, 0x0, 0x3, {{0x3, 0x3, 0xfffffffffffffe01, 0x4bc, 0x3f, 0x2, {0x1, 0x703, 0x1b, 0x8, 0xffff, 0x862, 0x1f, 0x40c7, 0xa380, 0x5000000000000000, 0x5, r5, r6, 0x8, 0x1f}}, {0x0, 0x1}}}, 0xa0) 10:33:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2836020200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:33 executing program 3: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2836820200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) r3 = dup2(r0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000280)=0x80) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x400, 0x80) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000240)={0x56, 0x1, 0xfffffffffffff590, {0x8001, 0x100000000}, {0x0, 0x4}, @period={0x5d, 0x8, 0x800, 0x4, 0xb8c, {0xb21, 0x81, 0x3, 0x2}, 0x3, &(0x7f0000000200)=[0x17dbccd8, 0x7, 0x4]}}) 10:33:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:33 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x6) recvfrom$ax25(r0, &(0x7f0000000100)=""/135, 0x87, 0x2100, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x100}, 0x8) splice(r3, 0x0, r2, 0x0, 0x10009, 0x5) 10:33:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:34 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2836c20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x2000c0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:34 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:34 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x0) utimensat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000600)='/dev/binder#\x00', 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f00000006c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000700)={0x3, 0x8}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000400)="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") getsockname$inet6(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x1c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1014002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a4", @ANYRES16=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x555f9500325a357e}, 0x20000000) ioctl$TIOCCBRK(r0, 0x5428) syncfs(r2) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000500)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000540)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000580)={r5, r6, 0x2}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:34 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fdatasync(r0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:34 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 570.577496][T26937] __nla_parse: 9 callbacks suppressed [ 570.577504][T26937] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 570.613023][T26965] binder: 26930:26965 ioctl 41009432 20000400 returned -22 10:33:34 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2837420200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:34 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x5, 0x2, 0x4, 0x80000000, {0x77359400}, {0x2, 0xc, 0xcf, 0x4, 0x2, 0x100000001, "a22544e4"}, 0x3, 0x7, @planes=&(0x7f0000000200)={0x10000, 0x1, @mem_offset=0x8001, 0x4629}, 0x4}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="22012dbd7000fbdbdf2504800000140002000000000000000000000000000000000e0c0004006e33394d00eeff000800030007100000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) 10:33:34 executing program 3: syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 570.768029][T27050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:35 executing program 3: syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2837a20200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:35 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) 10:33:35 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0xa88, 0xa01, 0x4, 0x33, r1, 0x5}, 0x2c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 571.425086][T27268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830025200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:35 executing program 3: syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) 10:33:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:35 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000080)}, 0x10) close(r2) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) 10:33:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) [ 571.567241][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.602292][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:35 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x800) ioctl$TIOCSTI(r0, 0x5412, 0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) fstatfs(r0, &(0x7f00000001c0)=""/69) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002f200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) 10:33:36 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$isdn(0x22, 0x3, 0x27) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/40) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/172, 0xac}, {&(0x7f00000001c0)=""/157, 0x9d}], 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r3, 0x0, r0, 0x0, 0x10004, 0x0) 10:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r2 = dup2(r0, r1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1c000000000, 0x4, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xf915) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) [ 572.348559][T27711] binder: 27710:27711 ioctl c0145608 20000040 returned -22 [ 572.357241][T27705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830060200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 572.388883][T27711] binder: 27710:27711 ioctl 2403 f915 returned -22 10:33:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) 10:33:36 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="840000000b6535bd3e7433b2fd3315ef11405a229e051b37976662868eec1dc9da025a2c4c1b8b5c0b1da86441dc5028bd53ab7e39a335c09703c2dd5ffd1700a351052d7ea7781f6ade461b5a3e84d7d889bd375f285d2d87ffc13812b5d9e20bc7f0611d0fc0dcd83e8849cc0a832c22fb479e28765e34108643f194f274b9184e524727084016f8155084daa9fa10f4080f4363b881642ed167c84775f6b211a67b29e85071924e86770f1e2a995b0c143cb9d999e195b773df3400000000000000000000"], &(0x7f0000000000)=0x8c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @local}}, 0x0, 0xff, 0x9, 0x1f, 0x2}, 0x98) [ 572.508988][T27890] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9088, 0x8000, 0x8, 0xbb, 0x0}, &(0x7f0000000080)=0x10) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x1000}, 0x8) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) 10:33:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830068200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:36 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:36 executing program 1: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="b441f1cd12d095bacc60f47b4d18460ccdaac625a76b7d98bb1b0f4dfeee73644604e34a61408cfcc5110d5ba46b31082a89e939d51fe8fc890dcf51cb52408c921a07acae3c1f99701ca7fc3bf82d964ac7773347cc8f5d68449b89c30042cd1174b39a13a916659246d91154275e6113d2b869fa95836e4166c1b0516bbbd278d763e2d12f842e2242fd6eebe4f586992859951d837968da705573ef66216f1c", 0xa1, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r1, 0x8, 0x81}, 0x0, &(0x7f0000000200)="6949da8fe4240223f37ed6fa98f4997313808da7877125474a8f581746e4bbf3ff413caa3086864e53735acdb0075cd68c5f47d62910f9eca4f9cff871ef0eaa555e8fc13a66091b390298e200da45a676337894d21c9e2e6e0913b59432922357954336aefef876105d48b64ebc2120432c53b4f4eb19bc15c4a8091f8b634ab70976aedc0d28e9440ff3a52fe5c14c37f515b8877b044ce087d21ebc7939610100b34b50bd1fcc0a1f83e8e93e638828", &(0x7f00000002c0)=""/58) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) [ 572.853529][T28191] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:33:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:33:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283000a200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x30002) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 573.077842][T28371] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.094279][T28374] binder: 28373:28374 BC_DEAD_BINDER_DONE 0000000000000000 not found 10:33:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 573.143555][T28374] binder: 28373:28374 unknown command 0 [ 573.178345][T28374] binder: 28373:28374 ioctl c0306201 20000240 returned -22 10:33:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830025200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:37 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/118) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x6}], 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2201, &(0x7f0000000080)={0xd4, ""/212}) 10:33:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 573.305081][T28588] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="f64a6e36"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000480)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 10:33:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002f200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:37 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@random="ece3d7d5ba31"]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830060200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:37 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) pivot_root(0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 10:33:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:38 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:38 executing program 3: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xb000000}) 10:33:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830068200a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:38 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x2d, 0x9, 0x100000001}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa28300200a0a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:38 executing program 1: socket$alg(0x26, 0x5, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/83) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000440)=0x2, &(0x7f0000000480)=0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r2 = accept4$rose(0xffffffffffffff9c, &(0x7f0000000540)=@full={0xb, @remote, @netrom, 0x0, [@rose, @default, @remote, @bcast, @rose]}, &(0x7f0000000580)=0x40, 0x80800) r3 = accept4(r2, 0x0, &(0x7f0000000600)=0x378, 0x20080001) recvmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000080)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/123, 0x7b}], 0x4}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {}, {0x20, '/dev/binder#\x00'}], 0xa, 'J'}, 0x29) 10:33:38 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0x5, 0x0, 0xff, 0x8, 0xc835, 0x8000}, 0x20) 10:33:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020250a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa28300202f0a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:38 executing program 3: 10:33:38 executing program 1: syslog(0x2, &(0x7f0000000040)=""/21, 0x15) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x3) 10:33:38 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020600a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 3: 10:33:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020680a0009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x4, 0x4) r3 = semget(0x1, 0x4, 0x410) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0xffff, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x7, 0xffffffff, 0x101, 0x2, "d5b2378e"}, 0x55b, 0x5, @userptr, 0x4}) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000040)=""/188) 10:33:39 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x400, 0x81, 0x2, 0x4}, {0x0, 0x3e39eac5, 0x1f, 0x8}, {0x6, 0x4, 0x0, 0x1}, {0x5, 0x8, 0x8, 0x21}, {0xffffffff, 0x1c82, 0x5}]}) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x2}}, 0x18) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r3, 0x0, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 10:33:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002020050009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:39 executing program 3: 10:33:39 executing program 5: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:39 executing program 3: 10:33:39 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-'}, 0x28, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) 10:33:39 executing program 5: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002020100009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:39 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x27c}], 0x1000000000000040) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:39 executing program 3: 10:33:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002020250009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:39 executing program 5: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:39 executing program 3: 10:33:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000004c40)) sendmmsg$nfc_llcp(r0, &(0x7f00000048c0)=[{&(0x7f0000000140)={0x27, 0x1, 0x2, 0x6, 0x3, 0x2, "5ae345cb046d29be010c9fbd6d3dec9c09b1d6113a599985c837a87c1aeedd6abdfec26a3762b076e918a10f3a93fb515f042f1c13869852a2133333343da4", 0x17}, 0x60, &(0x7f00000015c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="7c469e09083f96aba470fa7c00dc66c717648114ab3fb2595faaf410eb730969c9edee7d0974e5be7f1d6d79b9f6626a03c1f9f3c86659c29737cb43011e9ae766b128d7b9b9adf9c94fda535c7333ec053b82bc938bdd681c84eed6d7d4b02030194931e1036adc83594f", 0x6b}, {&(0x7f0000001240)="f4e83cf5c2bbc28514014b9c7f60c5aac6e5a1a628a32b747d5686c3ba3332d5a58b6472660d99659207ac497739327971e878b635d3459e0783686e230f03d7e32c57d7e77bdc5c5f2dc09b4c134fa65550261fd76c5a02e2a64f965c20e1360348acdc2c82c9a339f1fd8467ce5b95d621449008c97b98bb7cd9913675084fb5cc7e311aff5f4b05c56a954ef3b0a4ea610c280fbb0e65ef70545be1af9bf3f5eead1cdd912dab6121efd8b0f6eedc081d314b3ddb0fa92b34dada7f648f0eb03e0f125ad7523226dc0040406d2d997405ea4be30cea69a431abc6fe3cf8534ffcd3d56dae5364", 0xe8}, {&(0x7f0000001340)="1b0a6929c44e0b81b3798ce1dbd33ca3adce7f9ed3881e3e65f2c0cfe2351481b5c98172447b57a761310231b22ff57909e0b435087db8e3861f17471a132e88fb5c38f6e0b8ec5bf43421d61f1b1d9bb1b5e4217ebafc19a58287afa7adb508d7d397dc6738227c2584b3ca92348ccfce0614296b159439a55a32646ce2ec9173216841777158e1447cc43ac918869bce155eaa5e44fcff5b7ed6da6e446cbe7ee69b60dcb8a9ffff8a8bb4f815962d60c22a974dd8631bb09881de31f4", 0xbe}, {&(0x7f0000001400)="6c4085a4ca4b62c20e3f1eba39d513aebe403834eb449fb10827a2d77dc29fc15d907f6f2754fd1b61a7a0cfae0879f56e68c73bee2922d7bba27cc16a95d9c09dcd9c8bbecb4371de76eee9100201b9980a468f8c657003c725cb933533e697bdb9f3a83d510b2ce2fb34b5a0b431ef2e8377d5af7e19a154f9688b75c72c454de2d3d0f0e4690b5dd8d1f414dd7e624eb9ac29cdbd28ddb1c7acb38737a289878cb8d29fea1663d7648b1984310e57a4037fd05075183ee14738df937f294f2eccbf", 0xc3}, {&(0x7f0000001500)="3b624885a7e2c368b04ca6543de703d6ca4852152acdd0c5d0130748d81b46bdb2342fc374e1f1addae18eea7243091081e77b67e81326d6317a7412d0ed9efe83f31cf284c1d743e4e5e44d7788ed76278f45d8e357ac375a7b7d19d60f5630d4a77b83c05e545653d63765df343ba685181bc0f3a594199ec8e81e0db29cfa513292c9086c32bef0bb6f39c191796be821030c21500bffdab2b086e64eadbdb1addfd6cff7c8100e65fc4dc8a3e64c646504342e5b91", 0xb7}], 0x6, &(0x7f0000001640)={0xc8, 0x1ff, 0x6, "3d2f86d2f888cc777dfa354e71a16992a380f02be57009266041f0dd4f0823a746c12e06e6d8d81748fa28f8d64a4113f968d40d89090364d53ca7333d5b7a8fa0bb104b630c849d35f5d35ecaff69293545eb6b7785f729c79218606335bcde6b2197fa85ad786a51ab668635059a45f91ca0f6a4388f9d7de682d8a3de26815f66ae69b7064e25c5e8e0cfbba35480a1fbde480570d927771b0b568c527e55f104ca13d53971974298de3ba510a3cfb9"}, 0xc8, 0x80}, {&(0x7f0000001740)={0x27, 0x0, 0x0, 0x4, 0x0, 0x7, "1eae98f2e8bbd1934c6fbad582ae4cb968d26bf67bbdf0f8e468c50da403dd640b9663db25970a14fd7085a02a01cda296e12bf81dd1f4ee1035974da89b4d", 0xa}, 0x60, &(0x7f00000000c0)=[{&(0x7f00000017c0)="3526d9b4d6c2a22afcce9e93fc0a3104585ce6755ff5145b4fecf779429a2b44aa9e6f2f0152d6ecd634c520113f9b344b84b4988faeb2c530c702b3fc3c7bc615ddbd7d8df5fe12affc667d2ec43a9947f8ef52a55129b1f83ba2207fc5174cd2248d9cc945d3044e8cce9dbe3bec63cd6322cf5eb55d5b8c0cc8beaa170eb97f4d71c1ae5b0cb8b242bdd8be8bbb16f237e3b1a5f46424e4db4ba85f2221788ce3dfe06c3ced73c26e0be499acc8dc3832d140a0a166aa727ccb02046c74cf437a73927f992b", 0xc7}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f00000018c0)={0x27, 0x1, 0x0, 0x6, 0x3, 0x1, "e8d73405662f034ea896338c92515065b9af4a60d63139a46ff8a64d0c393c177961b5c71153310f972deee9c23cbff0f3a0b5eaf7620f6633b3ee876bd253", 0x14}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000001940)="2cd41c21f90288d9e9fa4c717b0a8790177b2a432bfc50249ea60d6a96cde862feff2472f0ed44cc37e7e1df0826f5397d2940f9f3649af6c9072a463bf99a26d34938da8a3402da19b57c0488746e336a3afa9081e02789aa8037efc539dd3933523580445a1d3bf3479a8114cede37536dcf758f42d2de65bc6671a984d584a4cb8af1a8f0e38877d2493c9fe03bf7a6f08c6f5b5d9abea8c0f4703f58bb98f0735328e403688eba72402f9aaa157947b0a1136d8e343c8fa0533f0a85", 0xbe}], 0x1, &(0x7f0000001a40)={0x60, 0x0, 0x0, "e47449a451f00fef4c4442458c278fcd915b6bca1ec4fba52c25d24bf50137cb29b3bde3e656bb2e323bade3999a52bd70b4691018fa1ecfad7807824fc402c9e0726c745af172ea24f2ed15e712be71"}, 0x60, 0x8884}, {&(0x7f0000001ac0)={0x27, 0x1, 0x2, 0x1, 0x6, 0xffffffffffffffe0, "f16da634210db1c8b66bfaedfdbf1f6d9fab4642754d0000b820031de6306ac19235dc6404709615ac43c6d237450132e7c189e2768d8f927167742f600466", 0x13}, 0x60, &(0x7f0000002c40)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="f8cc04c709b75f25b4cb3eafa25e47f5d3fb23686345cc784af4b07fc382a56ec18451117f9fbfe330dc9f5338cdfc3ee3e9f218824b84bd1b0ea629d98da0db7201e6c7f1ad0149feec916bb070b60d46f64110d64e871727f959bd62115355e9f4d5a03bb589acc6473753b8afd81d7f9b2f9b9bdbf01c7d0ac993c16e4304ff4144904ef7f8099e06b675f86023d4880ecdad851f725667483c36e71e34cd5e000a49f4de5c9f80eee1f5511d858ccf3e19661702fc56e82b1a5c5cc4d92285ae684bbb50cb5b782f771891e645b660a1831dc5b9742dadbbe3de3e1f3e571e2324aa91a1bf", 0xe7}], 0x2, &(0x7f0000002c80)={0x60, 0x3b, 0x8, "016c1fbfada7d82935d8e83b22c5dbecabafa8c6c8a5cb554055e2994ee34e469001a613cd382cd683b1de642c01c79b398cbc2c28e6bbdbad9320cf85d79dedbf1a8eafb509a8fdac9aea7f83ce"}, 0x60, 0x40000}, {&(0x7f0000002d00)={0x27, 0x0, 0x2, 0x7, 0xd5ed, 0x401, "14fcaa4681240cc09f19b5fe85e6a1383a30ccc7ff85935ac34e870479ba3aac88145ee3477dbe2453d94f2367bc8e6c8231dc866ec52521b700846ece70ad", 0x33}, 0x60, &(0x7f0000003080)=[{&(0x7f0000002d80)="2e9e1ed99517146c53d02ea839570831bf0916a58e859a2a84704f0175ea0b92501ca03e4a6a685cc0a023451828ab320e5504fbda20c818d5778c09bd3c9565ddc9390c8ba62e49796892cc2a9845b0f3e8cd31e201ed6bbec3259728801057e0008d16cb5bcd19f77d31f1e1b9d32ad09f5137dfde43d90f01d1715dd806bbad2ba882b3bc2647", 0x88}, {&(0x7f0000002e40)="a6f9650b3849ce8cb28412aeb608d9c905fe9657991c0eee8481869c170f6bf9f36d8c67b2efe1d2feabd8c265cf699af23d7a71419e851f222f67c4b96b6ccbd2368b5f5efde6da2439d905376fb0b0f19e15a6480ba3131fe3143929efd0e42d44b0d254234d10f8273edc393e227cafd5fc703e18ab68282e10bd56fb1e3cbe5421dbeb34f4e6562c4dc7ed8ad26b5e43d532f84e3c13df3950f3dd2f83b29491c3e2039cee2256b342cb8c3049aef0f29d48", 0xb4}, {&(0x7f0000002f00)="9d4031c23ffce634779653b21bf2055db71b02dcc4b4d549a6ac32419a4106dc14e88d3ec6c68e43718ee2e3d0dbb35830052e5d4113d0581eb50fa77348587e5a34151dfd81312d25f51cee79c5e05104f8e1245503aebc9577f5fad22af8f67664dbbaea96f22b9ea5f1a946ff5fe5b4bad9c1dc", 0x75}, {&(0x7f0000002f80)="4f473afe8d0dc6bd1afed42e89a0cafb6a628d76062d6ec66bdbfeddfae588f04368c0f6a5ed0db2ef8322e674f0b6f27e858c3775bde3d7db0df7533cac55df7667dd977aff5be249465b451872d80df793dc4b21ab698a5b0b6a430c", 0x5d}, {&(0x7f0000003000)="42487ef33a90eab9db878e677e93b48958ffb80724bafdc7f74e8cc26451c1760171b9e49d312703abb1c33674a7129f0ed312aa9ecc8c57e64bec35697444cfe85dbcb53a499023374c321648188404f2e0033b735a4a1c81a36d28694b37dd45e679ed7621f754977a6f97ba02b4f39d36debad9829d5d793555dd36", 0x7d}], 0x5, &(0x7f0000003100)={0xa0, 0xff, 0x401, "9f106ece6b4189c0103babc613c6275966c826a95a18c3c62502012600edfb8016a7dbd3fce34f31010d295dac17f4f9dd180898a19b6cc73a9431b35917481f9825249c5b3d973ccecb2eefbc9a647396d19d7cc980f87d1ce4d092ccd25c5c94936b4c184ed2e3f3444a6ae12ee0f51f1eabe7dc7300340e4e8dbf3089ad8b722efc78d4685079d4de523876c5de15"}, 0xa0, 0x4}, {&(0x7f00000031c0)={0x27, 0x1, 0x1, 0x7, 0x0, 0x1000, "c98f4ee4cf82e8b678f480155baa8b6592808d3d7f98a06e3e7679649afa04d2eaf06236b63533c1965efcbbf3600699cfea71d6aa5cf1120f19ab4abd3a23", 0xf}, 0x60, &(0x7f0000004380)=[{&(0x7f0000003240)="9dabf894da1c07705389944da459b446365f6c63c4431812edbc01ab7cb2a227aeb5982d8fb4edcca7a5aaf5ddb57e30f22ade57bbab2c1a985e", 0x3a}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="7725e6290c6de81795728bc481a86e944fd8de5831a39b5e21fa24b00322df4d33a638ffc396d6073a9ea5eb349792ce5f9a2df9720fa67a2737321632e176deb2dc4dd1c0b3d335c967e137730994faa1e2c9146378b299d6ef5f645e038959f1525822c8543e76fb42a4591991a225809bea00f4667bb891ca", 0x7a}, {&(0x7f0000004300)="a34129805fe1d27283b89c5de624909be6d36012d5a3a358c2c98e911041bddb87aa01f5d5aedb5b8ed57a5969269d2b34f343cd57ea540a131f6edd65323dbb8d1cef07899493978bc032b8ce8f5a99a256c96d7e87c1c395db6a09dc138e2aca", 0x61}], 0x4, &(0x7f00000043c0)={0xd0, 0x13f, 0x3, "9c29579b645f1e1f9de1738056e3c7b02fb001a07135421fd6b676b16f1e2287b5afd6b2c5933d914efcc2fd5c63d3efbb0bf668dd5d1e18d5d77a24ad328f70de7463155f526358a563c6264d0815a9f6bd369bd629295963a89e33d6de4952f486156d778976fa74339a4fe9f1a3820c56351d788f72b0561082b354c6cc3d9844e93fdbe07075d18af4af8bceff0731cb3a88633121644730cc500d1f48d742e98dd5ffde6267fbdc10fdb26cd04f2cb1f04cb2f3fbf01496516109"}, 0xd0, 0x8000}, {&(0x7f00000044c0)={0x27, 0x1, 0x2, 0x7, 0x3, 0xf868, "a0404d7d2e56a27d18f892273283c0086f22baacf2a28979307b85b229e61d812bdf353fb83141b9d6cf886c0e76ac9f3311227e01431b0428198bec2856d8", 0x34}, 0x60, &(0x7f0000004840)=[{&(0x7f0000004540)="67bd23075275c370be71b6374133618aae6654ee9e2c225d18c1e3901078fa92775e060dd57065efa6ea7325685203", 0x2f}, {&(0x7f0000004580)="18499c7aacffaecc4f7aaf1ec3ca196d3e7ae4718e8fe6bf5ed1915f37d2e5358e4e1b2bd1d2513532b677a51a713f7de80272b678af6f2fdfe42360ce67cbf933fa72d79c8b7e63e283ee96268a1e375e95b2b1983062bd4771bb01caf00e7b05af2aa694c703f5b5bf0d378572d8f41db3dd23215a10ff501761b16ebbdd124d51b7cd923f66e88ebc5c8cc1e3b14e5a5b0d58ddab6452e73d63eb59a5fdd52718ca38b14cbd345f6501db7d7a88d8c2780f005a8fa9decf6dee", 0xbb}, {&(0x7f0000004640)="c3f9cab7b2538000e33381d79145089275bdea6f8eef34c8d3a402f039fd7f11aeef7fe69d2de0cd4cd1ffe102940ff8ee80bb7b48d89e716380f3ce47ce1423e912c2652cf40d4662274056ec1981b3f7f22c4e8c", 0x55}, {&(0x7f00000046c0)="755f3b6d9c36d473a0cc32d2b775c08a52e31bc1a5811b43c94d12eb6c3300a84d75e36446e7848ed454dd3a66ca5cdb75967ce8f9cc578c9d67cf5d24cc3b452ab23ac0cd418aad9f8caee80bac25cccab1a638143d0d21262cf39521dbfca549b7", 0x62}, {&(0x7f0000004740)="4ad0ca5b17d0fe2352f4ac4fbf8b1e1769e23af666757f731b14c30bb7f5ae0433ceab71864d38be7453b9bc6104530eb2170a9549871b13bb4c479d1e3e0d91816219757361a6246fceb586a7aedeb7290b3ba3214a1c9160ef1f1c3eeccc6ff597751a5e468bafdc6d631f75211be8cb25b2946ef8ee0858dad36fd54a305c874738df0c01e65b7e1756", 0x8b}, {&(0x7f0000004800)="c99ecf3b239996b1f6774f720f8a7e2b696f7805aa0ad0f55b509cc1650accf6e22340663c30c4d484487be67efc081a5cf5060bc9a91d3cb118", 0x3a}], 0x6, 0x0, 0x0, 0x80}], 0x7, 0x20000000) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) write$FUSE_STATFS(r0, &(0x7f0000004ac0)={0x60, 0x0, 0x5ae, {{0x3, 0x4049b925, 0x6, 0x1000, 0x7f, 0x8, 0x8001, 0x80000001}}}, 0x60) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendto$isdn(r0, &(0x7f0000004bc0)={0xffff, 0x85, "abfa485930d949"}, 0xf, 0x4884, &(0x7f0000004c00)={0x22, 0x3800000, 0x1ff, 0x3ff, 0x1}, 0x6) fsetxattr$security_evm(r2, &(0x7f0000004b40)='security.evm\x00', &(0x7f0000004b80)=@md5={0x1, "55d8a326869af9b2c1a782503c52dd4b"}, 0x11, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000004c80)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={r3}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000004a80)) [ 575.658978][T29992] __nla_parse: 11 callbacks suppressed [ 575.658985][T29992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:39 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002020680009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:39 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, &(0x7f0000000000), r3, &(0x7f0000000080), 0xffffffff, 0xe) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x100, 0x4) 10:33:39 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa283002020eb0109e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/254, 0xfe) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x0, @dev={[], 0x10}}, 0x60, {0x2, 0x4e23, @multicast1}, 'nlmon0\x00'}) 10:33:40 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:40 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000940)='/dev/audio\x00', 0x0, 0x0) poll(&(0x7f0000000a40)=[{r0}], 0x1, 0x80) [ 576.057870][T30262] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:40 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000180)={0x0, 0x2, 0x8, &(0x7f0000000080)=0xd1f7}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x3, 0x80000001, 0x80000001, 0x0, 0x501, 0x247, 0x6, 0x5, 0xffff, 0x8, 0x5e064c30, 0xfffffffffffffffc, 0x1000}, {0x3, 0xffffffffffffff7f, 0x1, 0x1e2, 0x2, 0x3f, 0x5, 0x3ff, 0xdc, 0x8001, 0x2, 0x74a1, 0x7}, {0x7, 0x1, 0x2, 0x1, 0x40, 0x0, 0xff, 0x7, 0x7f40, 0xfffffffffffffeff, 0x6, 0x4, 0x8}], 0x8}) splice(r0, 0x0, r2, 0x0, 0x7ffd, 0x0) [ 576.109712][T30280] binder: 30279:30280 ioctl 8953 20000040 returned -22 10:33:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020208f7c09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:40 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) close(r2) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:40 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) [ 576.338320][T30378] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:40 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff80000001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xce}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x331}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:40 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0003e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:40 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sysfs$1(0x1, &(0x7f0000000000)='system]em1\x00') 10:33:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 576.606840][T30533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:40 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0005e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") 10:33:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:40 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xffffffffffff6b21, 0x6, 0x8002, 0x3ff, 0x6, 0x101, 0x8, 0x0, r3}, 0x20) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:40 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) [ 576.868308][T30742] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) [ 576.913261][T30744] binder: 30743:30744 ioctl 41009432 20000140 returned -22 10:33:41 executing program 3: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0006e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:41 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="b0d661bbb8ab5e3ff792", 0xa}, {&(0x7f0000000140)="bf77155c13eb00ccb74a64bc69b34c1a26b23970e190f0303241bbf6dcef67df03da9f0b1ec0ee8e2afdcb106c3f531f386075f46a4e62f06b24a51859088adc17bd8e9a76d90b6ff15833f0fff1633dcf684f753ada2f6587f2b59bdb50f0917314204c0daa86c297141942fa830fce639021044538172f16646f5d368b98870b93212e8783d9424deb49309a7ada29adebcecdc33cfa0dbdb973451cf671c49b2f447b242acf8d0f97759e4c062fdc3aff9dd2d74606c4ae7e1067745558bb9609", 0xc2}], 0x2, &(0x7f0000000280)=[@iv={0x58, 0x117, 0x2, 0x3e, "4db7618b9e8b55a9a46b612dd911f63e77c3b762e91727f86933f50543ffcb439844221c84b72b23b2aa63ef974e7735c02b798b3a8b4603ccb4c6dd8483"}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8b}], 0xa0, 0x20000010}], 0x1, 0x8000) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xffff}, 0xf) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:33:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x10000, 0x2}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r3 = dup3(r0, r1, 0x80000) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3f}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @rand_addr=0x400}, 0x8}}, 0x1, 0x8, 0x6, 0x10001, 0x10}, &(0x7f0000000280)=0x98) [ 577.134567][T30967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:41 executing program 3: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0007e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:41 executing program 3: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:41 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4003, 0x0) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000140)=""/227, 0xe3, &(0x7f0000000080)=""/18, 0x2, 0x2}}, 0x68) [ 577.357726][T31159] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:41 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 10:33:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0209e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) [ 577.601069][T31285] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 10:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:41 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x200800000000001, &(0x7f0000000200)=0x1, 0xfde6) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x80, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4000004e20, 0x0, @mcast1}, 0xfffffffffffffe89) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0309e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:41 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 577.778263][T31418] binder: 31414:31418 ioctl 1267 20000080 returned -22 [ 577.803757][T31421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 10:33:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0409e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x37b8, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x3ff, 0x0, 0x5}, &(0x7f0000000140)=0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 10:33:42 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) [ 578.018148][T31639] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:42 executing program 1: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0509e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x2, 0x0) 10:33:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0609e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:42 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0x2, 0x80, 0x4, 0x8}, 0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000300)={0x4, 0x1000, 0x2}) splice(r0, 0x0, r4, 0x0, 0x10004, 0x2) getdents64(r1, &(0x7f00000003c0), 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="4ba3330ab2e350ce24783155f84d9b02cb9ece682fe18f615c0cba4097b194037d79fd70c36a3f1bda021d7ba1a0b4572d576f62e25308071b3ffd84ead2036e59fc9357dc59c2a3949758ac0cbc5b77414559da6fb9dac2fa960de3011f030c351056c372a6542cac3da1df9c5944ccb845d074470358cf7233e80d3a82092bddd982f9b30ea7af1dd555e718f506057f9a01aea970f005c73ae5aa2a7c2f739915023a469f9aa76770e9fec3dc0de25cb3375311621bedd3bb4a0304d5413edf8c195420d7b2fe53", 0xc9}, {&(0x7f0000000200)="724b27bb56e5627dd5c1b1c28caac5d9fc9a3056cbc8a826df6ccd8bfeedd7c137f4bc5fedb817a2fd72f4b8ade8efb11a4b92c4fd1481f091659489a4665bfb4032dfd283bfe9500023a7ecfe69f35580c7daaa9a413c1a6f5fbec960fadf91879d7643818de172c51b26d62419e9f2f50fde010f8fe20eed38fdac727d6cd695e1107b31105e7d6f03522bd68a9d9cacd8fff4bc6361de929add8c6d5e85a4317855c437ae9c904eb8a921e0731b2562041c7597e090ad", 0xb8}], 0x2, 0x1) fsetxattr$security_smack_entry(r4, &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)=')\x00', 0x2, 0x3) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000002c0)={0x8, 0x6, 0x16}, 0x10) 10:33:42 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x9}) 10:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x2, 0x0) 10:33:42 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x1fc, 0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20180, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast2}], 0x10) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000280)={0x3, 0x3}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0xa, &(0x7f0000000340)='mime_type\x00', 0xffffffffffffffff}, 0x30) write$FUSE_LK(r1, &(0x7f00000003c0)={0x28, 0xfffffffffffffff5, 0x4, {{0x8, 0x7, 0x2, r3}}}, 0x28) 10:33:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0709e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 10:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x2, 0x0) 10:33:42 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x8004) syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@empty, @local}, &(0x7f0000000080)=0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, &(0x7f0000000100)=0x50, r0, &(0x7f0000000140), 0xcd32, 0xc) splice(r0, 0x0, r0, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) 10:33:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0a09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xff, 0x40000) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={r1}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xb, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x1ff}, 0x10}}, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 10:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 10:33:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0e09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:42 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x2003) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:43 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10400, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x9160) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)) 10:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0f09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)) 10:33:43 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) semget$private(0x0, 0x2, 0x42) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x101, 0x5, 0x5, 0x9, 0x3}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) 10:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a4809e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffffffffb40f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)) 10:33:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:43 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) 10:33:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a4c09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendto$inet(r0, &(0x7f0000000580)="a3", 0x1, 0x0, 0x0, 0x0) 10:33:43 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 10:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:43 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a6009e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:43 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r1, 0x0, 0x3, 0x2) 10:33:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a6809e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) [ 579.844869][ T526] [ 579.847244][ T526] ====================================================== [ 579.852510][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 579.854265][ T526] WARNING: possible circular locking dependency detected [ 579.868387][ T526] 5.1.0-rc1+ #35 Not tainted [ 579.872296][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 579.872979][ T526] ------------------------------------------------------ [ 579.890129][ T526] syz-executor.3/526 is trying to acquire lock: [ 579.896351][ T526] 00000000a2538fc7 (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00 [ 579.904424][ T526] [ 579.904424][ T526] but task is already holding lock: [ 579.911769][ T526] 00000000e62e7490 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 579.921827][ T526] [ 579.921827][ T526] which lock already depends on the new lock. [ 579.921827][ T526] [ 579.924196][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 579.932211][ T526] [ 579.932211][ T526] the existing dependency chain (in reverse order) is: [ 579.932216][ T526] [ 579.932216][ T526] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 579.932238][ T526] lock_acquire+0x16f/0x3f0 [ 579.932253][ T526] __mutex_lock+0xf7/0x1310 [ 579.932266][ T526] mutex_lock_interruptible_nested+0x16/0x20 [ 579.932311][ T526] proc_pid_attr_write+0x200/0x580 [ 579.932329][ T526] __vfs_write+0x8d/0x110 [ 579.945903][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a6c09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 579.948405][ T526] __kernel_write+0x110/0x3b0 [ 579.948417][ T526] write_pipe_buf+0x15d/0x1f0 [ 579.948434][ T526] __splice_from_pipe+0x395/0x7d0 [ 580.009067][ T526] splice_from_pipe+0x108/0x170 [ 580.014458][ T526] default_file_splice_write+0x3c/0x90 [ 580.020432][ T526] do_splice+0x70a/0x13c0 [ 580.025287][ T526] __x64_sys_splice+0x2c6/0x330 [ 580.025726][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 580.030668][ T526] do_syscall_64+0x103/0x610 10:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) [ 580.042886][ T526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.049313][ T526] [ 580.049313][ T526] -> #0 (&pipe->mutex/1){+.+.}: [ 580.056342][ T526] __lock_acquire+0x239c/0x3fb0 [ 580.059294][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 580.061728][ T526] lock_acquire+0x16f/0x3f0 [ 580.061754][ T526] __mutex_lock+0xf7/0x1310 [ 580.061765][ T526] mutex_lock_nested+0x16/0x20 [ 580.061777][ T526] fifo_open+0x159/0xb00 10:33:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a7409e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 580.061787][ T526] do_dentry_open+0x488/0x1160 [ 580.061797][ T526] vfs_open+0xa0/0xd0 [ 580.061807][ T526] path_openat+0x10e9/0x46e0 [ 580.061816][ T526] do_filp_open+0x1a1/0x280 [ 580.061826][ T526] do_open_execat+0x137/0x690 [ 580.061849][ T526] __do_execve_file.isra.0+0x178d/0x23f0 [ 580.061860][ T526] __x64_sys_execve+0x8f/0xc0 [ 580.061870][ T526] do_syscall_64+0x103/0x610 [ 580.061889][ T526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.061893][ T526] 10:33:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a7a09e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 580.061893][ T526] other info that might help us debug this: [ 580.061893][ T526] [ 580.061896][ T526] Possible unsafe locking scenario: [ 580.061896][ T526] [ 580.061899][ T526] CPU0 CPU1 [ 580.061902][ T526] ---- ---- [ 580.061904][ T526] lock(&sig->cred_guard_mutex); [ 580.061923][ T526] lock(&pipe->mutex/1); [ 580.061931][ T526] lock(&sig->cred_guard_mutex); [ 580.061937][ T526] lock(&pipe->mutex/1); [ 580.061945][ T526] [ 580.061945][ T526] *** DEADLOCK *** [ 580.061945][ T526] [ 580.061951][ T526] 1 lock held by syz-executor.3/526: [ 580.061954][ T526] #0: 00000000e62e7490 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0 [ 580.062002][ T526] [ 580.062002][ T526] stack backtrace: [ 580.115868][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 580.117218][ T526] CPU: 1 PID: 526 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #35 [ 580.117225][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.117229][ T526] Call Trace: [ 580.117247][ T526] dump_stack+0x172/0x1f0 [ 580.117266][ T526] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 580.142193][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 580.150317][ T526] check_prev_add.constprop.0+0xf11/0x23c0 [ 580.150334][ T526] ? depot_save_stack+0x1de/0x460 [ 580.150346][ T526] ? check_usage+0x570/0x570 [ 580.150364][ T526] ? mark_held_locks+0xa4/0xf0 [ 580.193538][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 580.200326][ T526] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 580.200339][ T526] ? graph_lock+0x7b/0x200 [ 580.200350][ T526] ? __lockdep_reset_lock+0x450/0x450 [ 580.200381][ T526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.237605][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 580.246956][ T526] __lock_acquire+0x239c/0x3fb0 [ 580.246983][ T526] ? save_stack+0xa9/0xd0 [ 580.246997][ T526] ? mark_held_locks+0xf0/0xf0 [ 580.247006][ T526] ? __lock_acquire+0x548/0x3fb0 [ 580.247019][ T526] lock_acquire+0x16f/0x3f0 [ 580.247031][ T526] ? fifo_open+0x159/0xb00 [ 580.247044][ T526] ? fifo_open+0x159/0xb00 [ 580.247055][ T526] __mutex_lock+0xf7/0x1310 [ 580.247065][ T526] ? fifo_open+0x159/0xb00 [ 580.247088][ T526] ? fifo_open+0x159/0xb00 [ 580.247100][ T526] ? fifo_open+0x2b5/0xb00 [ 580.247111][ T526] ? mutex_trylock+0x1e0/0x1e0 [ 580.247133][ T526] ? fifo_open+0x2b5/0xb00 [ 580.247146][ T526] ? kasan_check_write+0x14/0x20 [ 580.247157][ T526] ? lock_downgrade+0x880/0x880 [ 580.247172][ T526] mutex_lock_nested+0x16/0x20 [ 580.247183][ T526] ? mutex_lock_nested+0x16/0x20 [ 580.247201][ T526] fifo_open+0x159/0xb00 [ 580.326100][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 580.330036][ T526] do_dentry_open+0x488/0x1160 [ 580.330049][ T526] ? pipe_release+0x280/0x280 [ 580.330064][ T526] ? chown_common+0x5c0/0x5c0 [ 580.350561][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 580.353393][ T526] ? inode_permission+0xb4/0x570 [ 580.353407][ T526] vfs_open+0xa0/0xd0 [ 580.353418][ T526] path_openat+0x10e9/0x46e0 [ 580.353435][ T526] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 580.353446][ T526] ? __kmalloc+0x15c/0x740 [ 580.353495][ T526] ? prepare_creds+0x2f5/0x3f0 [ 580.353536][ T526] ? prepare_exec_creds+0x12/0xf0 [ 580.428704][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 580.429313][ T526] ? __do_execve_file.isra.0+0x393/0x23f0 [ 580.435727][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 580.444092][ T526] ? do_syscall_64+0x103/0x610 [ 580.444107][ T526] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.444131][ T526] ? __lock_acquire+0x548/0x3fb0 [ 580.444146][ T526] ? prepare_exec_creds+0x12/0xf0 [ 580.444160][ T526] do_filp_open+0x1a1/0x280 [ 580.444172][ T526] ? may_open_dev+0x100/0x100 [ 580.444192][ T526] ? __lock_acquire+0x548/0x3fb0 [ 580.483910][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 580.484278][ T526] do_open_execat+0x137/0x690 [ 580.489988][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 580.500098][ T526] ? unregister_binfmt+0x170/0x170 [ 580.500109][ T526] ? lock_downgrade+0x880/0x880 [ 580.500129][ T526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.500144][ T526] ? kasan_check_read+0x11/0x20 [ 580.500172][ T526] ? do_raw_spin_unlock+0x57/0x270 [ 580.582710][ T526] __do_execve_file.isra.0+0x178d/0x23f0 [ 580.588329][ T526] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 580.594018][ T526] ? copy_strings_kernel+0x110/0x110 [ 580.599271][ T526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.605476][ T526] ? getname_flags+0x277/0x5b0 [ 580.610237][ T526] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.616280][ T526] __x64_sys_execve+0x8f/0xc0 [ 580.620939][ T526] do_syscall_64+0x103/0x610 [ 580.625502][ T526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.631382][ T526] RIP: 0033:0x458209 [ 580.635260][ T526] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.654848][ T526] RSP: 002b:00007ff927b8bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 580.663266][ T526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 580.671247][ T526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 580.679232][ T526] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.687210][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff927b8c6d4 [ 580.695161][ T526] R13: 00000000004be753 R14: 00000000004cf080 R15: 00000000ffffffff [ 580.707748][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 580.719705][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:44 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ae400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 10:33:44 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r2, 0x5, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @remote, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xcb74, @local, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8abd, @ipv4={[], [], @multicast2}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x14c}}, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x7, 0x7fff, 0xfffffffffffffffb}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r5, 0x2}, &(0x7f0000000440)=0x8) splice(r4, 0x0, r4, 0x0, 0x10002, 0x0) 10:33:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x2, 0x0) 10:33:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 580.774252][ T659] ptrace attach of ""[658] was attempted by "/root/syz-executor.3"[659] [ 580.784107][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 580.791396][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 580.813175][ T765] __nla_parse: 14 callbacks suppressed 10:33:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 580.813182][ T765] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x1, 0x2, 0x0) 10:33:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000be400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:44 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() [ 580.866313][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 580.886855][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x1, 0x2, 0x0) [ 580.919379][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 580.955771][ T788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 580.961348][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 580.981401][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 580.988701][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 580.999610][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 581.012804][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:45 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ce400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x1, 0x2, 0x0) 10:33:45 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200400, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) [ 581.041617][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 581.048759][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 581.074079][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 581.109630][ T1066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.125453][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 581.148755][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env 10:33:45 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000de400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) [ 581.166047][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 581.219103][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 581.240110][ T1251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:45 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') creat(0x0, 0x0) epoll_create(0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmsg(r3, 0x0, 0x99147de9abf155d) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)={0x38}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000001c0)=0x3) [ 581.261565][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 581.288174][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ee400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:45 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) [ 581.315153][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 581.368269][ T1342] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.380757][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 581.401329][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0011e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:45 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() [ 581.436508][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 581.467836][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:45 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 581.518510][ T1536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.538773][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0012e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 581.605908][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:45 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = socket$netlink(0x10, 0x3, 0x4) socket(0x1, 0x6, 0x100) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x80, 0x6, 0xfff}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 581.671177][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 581.683401][ T1606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:33:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 581.731036][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:45 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:45 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x91a4, 0xd000}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="82923c174c19231a42533a9d4be6ed51814922b0dba363365bacfffeaf22500905dcb60949f1c4073eece7056ad44ad35f0c0b6eee600000c76e7800b4abf62fe0153efbd1fcc5b2be90a55062c5e77e495f39eb95a4c303d4b7da7eccadde14c231070eb0fe2671c71a5efebad53a0ba75d383f0b2808c47f3cbff2a77db73e41a2db58b7b9a8277f3a2948705ab4cd235e0dd0911b25b5ffbc8e769bb168d8ccce7df70d25240e51945f6e49e7b0bcb02103f90cb8cf995a404e29d0af8d5ffc89b4af5f4f34d4368f263b4ec50ca64c5107", 0xd3}], 0x1, 0x0) [ 581.793432][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env 10:33:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 581.853511][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 581.901868][ T1870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.902544][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 581.928684][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000200)) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r1, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='net/ipv6_route\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a00100000005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 581.959468][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 581.981432][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:46 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) geteuid() 10:33:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 582.029468][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 582.057910][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:46 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0002e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000200)) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r1, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='net/ipv6_route\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 582.084490][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 582.101700][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0003e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 582.137080][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 582.152172][ T2022] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.162807][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000200)) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r1, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='net/ipv6_route\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 582.209939][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 582.230553][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xff1d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x251, 0x0, 0x0) 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 582.268801][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 582.289366][ T2132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.306978][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000200)) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r1, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='net/ipv6_route\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 582.335071][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0004e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 582.381831][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 582.418072][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env 10:33:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0005e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) close(r1) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) r3 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r0, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r4, &(0x7f0000000300)='net/ipv6_route\x00') [ 582.444898][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 582.473868][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 582.486877][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 582.510549][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0006e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) close(r1) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r0, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b03043f679a0189668bb3aceca0a22f3c6f", 0x1c}], 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 582.546540][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 582.583660][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0007e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 582.611180][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) close(r1) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r0, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0008e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 582.661485][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 582.676085][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:46 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) close(r0) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 582.736941][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 582.765569][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:46 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) close(r0) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ae400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') [ 582.821672][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 582.828851][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 582.861444][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env 10:33:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000be400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:46 executing program 1: pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) close(r0) socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') [ 582.880915][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 582.898368][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 582.909327][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 582.959555][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 582.976984][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 582.989391][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 582.999718][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ce400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') [ 583.012700][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 583.051406][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:47 executing program 1: pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) close(r0) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000de400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.076819][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 583.097531][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:47 executing program 1: pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.154355][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 583.169683][ T2230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pig=2230 comm=syz-executor.2 [ 583.192638][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000ee400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:47 executing program 1: pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.217889][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 583.236499][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0010e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.296046][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 583.323719][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 1: pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.341045][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0011e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 1: pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') [ 583.380596][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 583.403703][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 583.410313][ T2258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pig=2258 comm=syz-executor.2 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0012e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 583.430375][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') [ 583.472072][ T3875] kobject: 'loop5' (0000000062d95534): kobject_uevent_env [ 583.493532][ T3875] kobject: 'loop5' (0000000062d95534): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 583.511713][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 583.530569][ T2274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pig=2274 comm=syz-executor.2 [ 583.551226][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 583.569193][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env 10:33:47 executing program 1: syz_open_procfs(0x0, 0x0) 10:33:47 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 3: syz_open_procfs(0x0, 0x0) 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e402005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 583.577684][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 583.609487][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env 10:33:47 executing program 1: syz_open_procfs(0x0, 0x0) 10:33:47 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e403005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 583.645329][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 583.668809][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 583.679337][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:47 executing program 3: syz_open_procfs(0x0, 0x0) 10:33:47 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 2: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0068e400005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 1: syz_open_procfs(0x0, 0x0) [ 583.728157][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 583.746899][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:47 executing program 3: syz_open_procfs(0x0, 0x0) 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e404005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) [ 583.786718][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 583.801738][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) 10:33:47 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 583.835765][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 583.873068][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e405005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) [ 583.900382][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 583.933636][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:33:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e406005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) [ 583.971830][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 583.993002][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) close(r1) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x904, 0xffffffff, 0xfffffffffffffff8, 0x2}) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl(r0, 0x2, &(0x7f0000000100)="d9ee0b722d55a491ddb8ee8f4219ca90851f139096dbf55a1ced434b6e5390b47a5de3c316fc373e02b77fa486555ef00591111d9ee9f2baff934342503d987ea6edf4493eaf91a28dc3dfe4e54b9ce3ae1f14de9fc3d1c5c555899f4441afaa163b8e75a22dc9d900a17cf35d8beaf6c794b81dd70c79261778cfa51eb66dd82903cf1fde83715b3ac2ecd8cd0cb7abefed4373747ac70c86209c0a2f4c06e00fa0ea6113206153c42f874a71007a04e025e96057e4a9053abf2bee40e9c09e21ce7b1b2a5d807f710d86d9b39bddf2bddd614b") syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') 10:33:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.029417][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 584.059446][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e407005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.091681][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 584.109990][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 584.129518][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e40a005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) [ 584.145588][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 584.178571][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.211430][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 584.228071][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 584.236050][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e40e005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) [ 584.256427][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env [ 584.269237][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 584.293597][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) [ 584.312733][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 584.325815][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 584.333366][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 584.344026][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)}, 0x0) [ 584.383258][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e40f005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.426457][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 584.435205][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e448005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) [ 584.486911][ T3875] kobject: 'loop3' (000000003631bb8d): kobject_uevent_env [ 584.512068][ T3875] kobject: 'loop3' (000000003631bb8d): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.534830][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 584.554977][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 584.572094][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e44c005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) [ 584.595736][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e460005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.659717][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 584.676237][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) [ 584.704430][ T3875] kobject: 'loop4' (0000000040a4337b): kobject_uevent_env 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e468005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.736092][ T3875] kobject: 'loop4' (0000000040a4337b): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 10:33:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) [ 584.783029][ T3875] kobject: 'loop2' (000000005d40ef08): kobject_uevent_env [ 584.808868][ T3875] kobject: 'loop2' (000000005d40ef08): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e46c005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 10:33:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 584.861788][ T3875] kobject: 'loop0' (000000002b73e78b): kobject_uevent_env [ 584.879570][ T3875] kobject: 'loop0' (000000002b73e78b): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:33:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 10:33:48 executing program 1: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) 10:33:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 10:33:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a0009e474005fdcc34481d270d4ff09e700", 0x24}], 0x1}, 0x0) 10:33:48 executing program 1: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) [ 584.924261][ T3875] kobject: 'loop1' (00000000eebafb64): kobject_uevent_env [ 584.961042][ T3875] kobject: 'loop1' (00000000eebafb64): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:33:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0) 10:33:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:33:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 10:33:49 executing program 1: mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) [ 584.995496][ T3875] kobject: 'loop3' (000000003631bb8d):