fffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x5, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x12b, 0x281) [ 1282.516322][ T7568] binder: 7564:7568 transaction failed 29189/-22, size 40-5 line 2994 03:37:35 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) sendto$rxrpc(r0, &(0x7f0000000180)="a193db2286c8fe55ae34ee671928a5b6600e94d26d0022c602c359f475ec8cc3d06d9fe4e3e80476d5f5c50dac95a428d076657859da5dfcf743e3bf95bbff64ed7703e552c0cdad48a28ea050f5f2f0830aef69de4badf35b2bfea5638a4be9de17cc73250772d9f8ab4f451ce72b63f58754f60b1690428cafd0c69e4328b3833fe427f572dcd7c7c97b3bc495cb883bdf65f78d7deeb7f0eb22eeb0fa0e6d94c8be8da29212f6ad83247250b64d42f8b9c5b4a08d707e22309b780c0578df4cba1cf01c6b36ae4ae33040ddb0742a90d345d3b0c7b9d6252e0a7906de593e2aa40290ee6577695e4316f9873b3513ee815e18458f180dc92ac0290f8c4d301c54afa5a2f0a2fa5e94df16318e8d0a756ee84f360d1ef50ee8fd7d8a698e826b4ca16bf85096360f7bfa8ecc750bf41a55a40f3cc95a293288bcd2d4cc0ab7434e72300849ad6d39ded1dabdbe330a03eeb96ef95d31fadf9e278aaaa14f836948e3362727d5b58e1f96ba9ccb7cf3779c3fd2ccebaaa8549b1c4ae9f102938c9d683423c1678e1ff3f0d974a94eac7a6879f6b14e6b34b38d827727dccb937c7ec0591a1cdfdab55f98d226c132fdfa08cd10a4919c56a2b9094144b0c845cb1a751b2b238f7e4e29a797cd049abaad29dba07b592f8c4bc4ef2316edd21d40de69f9bacc83d59736df278bcd10d176e495dbc47f688a51a5ff00675e3bd25455d2a2e99ac7521d99dcace2ed6f42d0b87c975e71080d20d8f3b383aa9e1a06234771c61aa0ff76786aee0c31a59d36acbb6078666614589955f90a2c4358e1f294a9f1054aba4cf454a333c51bdd3d0bc125ff08019896d8452269486bd49edf103f37f8b2df2fce0641b35058b091fe1a503749edd779e7140ba6298e4c60178122bad162809d19a9c9df8e19d30af216c20f80be5ed203b28694740e3c237d4dcbb77efcb3d6412ed26d19cc4f9e6be79ea4c7103b06b305fc5d71ab1014c77bf217166b9402f2fe26296f13bdcc20108032bb661c2e1eef45dbf5b81ef99151d0125830f656c700b4b8e2750efda5d6f676a88373c1b92590219a3aa4993572386ed676150d751750b6b4a0338b1909732f5a18e982b911e9b25bcdbcfdeda99803941f53f15018d063f8d52fee4cf7f83880f0c62d80f271cc656fd042393daac5f0cfc5586e93dc34403f32d93f0bd9380a1313e50d1e633081f63831edb16316a202602d75ee76b0f653e042872e464d55edc1c82c4c90aa41d3c4fc336913a1cd7ffd537376e081b21da9a20427beec15fb95095aec7d95e9455d227d231f0bbcedf83ca4de6f44c77f122adceb4728e879db52feccd874bc9d369782a20ec57a7d9e5b9c6ea2c7da6423ad539948dec2bebf301e3ce8182c03a05b35553341994a850f1ff764ee2aa132867288021f7e8ce384d83f27908475f28cbdfff012568238d3598c4b52549735ac664517ca0a2c19cf17b75b007ffa6c4d00353597bfd967132a51deee4c157ae6d88d25f132206b17e0742ebe3616160d5745b1c4bc5688fc0da77e3edc36e6b5d81501292e7b216a576ffa3a6f129387ace1f474ff5c31adc1ba00519fc3c7f0ad850fd51faf2238212972214e115a048af8f561ed546439331b58c250df0970b793e27907e2d796a86c800dc40aff9c37ae18c336d048895dfe1f43b0c68269e3a322270d5484d082c647b8b09c1df13b1c2340dbc8a8aa583f7f29cc6d2f34b2d3d957b351f6866fa814cb5627c53a2e76541a41435cd8d9e71c7632ff0d9372f764b400f71c89c2a68cd9fd66c5b0d43d40801b326325b2aaac415dd3145d745ba4b8229188ecd856e9bdfe65abfc28595d2e359f2f0bce3ee0cb143dc78c5e8167f1fddb0785036f2cd4a66b0f0b37a9a07d2228763218942d11344513bbe34dbc5a472f1741219dc9187981cf1b281083d7a044889681a726afdba39ead9120104e8de9dfeabfab6c5c1e5cc0b49a4688a4f472a07351f28d6af77d00a7fc82317651b381e42ca4e8be31202143ae6159d349cd3b452a85a1c14cf6e43ea711e623d64ab555a7c02ea13ae8f7701a47b9c52a6e82fabff8763e0c91dfa420816a782e9c91d4f7e9e9c0fc9069629ec574a7d7b0a56afc5029c7e900caca61ec626a16d64cb7c4577c05bb90228ab6920320a1f834c06832eb54580f91a29c1c6629f9f78461f18b1e69de936b96ff82211e36c0ec255a7a1ec4222112ff96713820edf4cf4d48b6560cceb598fce292c2013c83eb277d685e5676d8f1829439c81f0a06ad4f713f25b28626d2d0bad46012dc800371cd6def1dafae2e36603fdb8e04b913a04ddca8a5a947f09fe3c7b7cf27f4fc093b9e99b97298439842bf37bac55f8a81e880b0c4800d8b57edae46edccd9b08f8caae3c4f517d5f958af8b874e6a3793b524bf11d4e07e91209c85e67f07f7770fa812ce6401d9a5f62a1cd9744da7a323311ac5506796699d16e257cc92d6c4f04fab3a9f060121f5803e7c89af474ed77d5dedd2e89c01787aaf993b5e5fa9b5e49b2ccc3ef9052dd9b9117525c8b786afea9bf07600ccbebf5c41f1a1a2dda070b4ebd70dc71d69d8dad4702c465ccd6f4674ebe75b4175eb8b79634acda934642c890cdb480bf44646c2f9590cadcd09415bbd3b88c6c0d4bae4516d2b60fa1e8182869b83462c5f8d82a4646ddbc7b72aed835bab5690be6e102d33c5e2de2da8bde270d44e204ab8b4ab2f79007967723f2481a47a41e23d5ae33c92a2151591e40994c96fa5a9088e1ce41bd12c55c35c46c433fd0adb872ccbd701b83bdbd39bb4728d0fb230ea12d05ff1b7227c04302a25b573eb7ecf114b15c0f896b09b1142500e93ebce8c340b4e760269d80edd5ac149af834e548849c5f471d3783eaae4b72744125f9d85e3f0b3066ae385d515c3ae144de79ee47ff81f87affdeef72dcf1a214e28378add837699c78a31b17c417065e2de7fb285159743adf7372f75b5b2bd2dd855a14faf019101b16ae8192e66ff9df867e7ba2e1a74dfb85d996a4fdd24e326fdb4dcd6cf1cec19885f15f13283c94e7dc3439189c856e57c4d0f955a41c8c9de5b05fd810e99353a76727b6db6e0e34cf5389757f668d7bee818160339b40a024760918b03e23ac8180bdb65844405bce40f1f55e83f1c73720a74fb943de56a8be6df774e95e3807de2a51270d669001206cd682c55bb3577c96dbef83323399470d696a97946741c1ecea7fb4131bb590ebbdd02ad4c9d03f530baa15f0fd5a2f28058a996938a128a634847e097451c8ddb68c3af7cb1e9d7ee69a43f6ac01331269c43b8cac23e5ec338b7373180041db34766e973c4d1b77e6265e6205a0961cc646ec00ae50a1812b62a37dd719000ae59b7759dde3626123493d9570add0d83e5a024ca544e106b1b9ce44067ef567eb3708ca1045f6ddc0e9c5ba422edf08aee57389c5a67356bd6d02d544242a6d2a7b673c6be4651bb8662fd26a6464e44442400a9327b24a0ddc30d6eef53b58bf1852263bd4eb48e2191e3d18861497cfb1da0690af6ceb5cb8c52abf697bfacc2557c3ea162eeb6f432bb8f1eac4280cde194c7fb59f96ee8ffdb707d1cd00279acbf0a2b7eb0e73d4da54abfd83d298d0a5870a8e3c8282ec57ce63ca179f3399385692e3f851872fa78cbaa157c7e928a40b4acdc0f8c6254230e7b0c28f21f32f354db058e6d572386c3658c5293b6b13ef7501f92002de6b43aa9a3cf563e37e7ffb5c9c13f56c989d4635481b4b5c39bfb72f3fad527817b783c89d62d0b959e12c2821e2a8c6ac51bca4572cc187bfabd5280a0dd42f17adb56a80387cd9b4e70ccd01de72804a882f692f1a864a967deaed774b8ba235a640e617468b924dd5d439dca01c5c0ea0b22cb2985a7dd9eabc3d240e611ebdf6095cbf2d34551031cb7198c29f793553107fc9541ba5b8bb6b413dd5b6dd515088456439a7735b952b01370fda79c0addb8ddad5b065be787233659156b8252612fcef79312cc27cce3b358c3bd6baae7722281f042cf7705e711e49789496479deb1e3e4abe746752b764acd8595775ca2ebe2bf9b98796870f9d336689855411c7347309664fddbfa464f4da18df689dd9b242700d4cb71113f2d09873760cff1f030e977643f4de549e1637a66eb3b8b6eb07270c45f6051204656e2c39b451fe7f9ba3301eebf8f09fe03432912d4e5b77467f68ea6337ae4e2d41160e11913f6404a5fda464514d4eaa84b937b64421ce45a09deef32ac5308e69daa0052fa784addf5347ea30a31af4f826d8f024d8555e02b7dee5e84ec8463f924e79873adcf3df72e2149fd06ce64bd6afcbb4ed29b88bf77deebced4b44dc1b50bf9306e689fe129bea4d6d7c57ba74f53dac2784bf3b0b33632c3b26923501017a17f32ce4346bf0d1868d5c8d8c945d883252131b0c640af42cf24e433cd6005f57973ee5c6b5aa3a5e721e111830ee215195a9dd53beed5a6bfc26e7d121e74322b568f5ebb853efab097589f04ff030be56d6ec374b818ec2af4d643b89d756647b460cfa464183b65e08e9d7a688701d2727bb06b72f93ede210a2ceaf764bb78b40db29fdd8d5bfd3b24399d9b35446e95aaf60efbd5b8380fa9122ac70bb7ee1849eff0a7f0b1b5ca7e955063c5cb976d456258f0f1d024ab0ff240fc49e5aa500d237b7aedba2ea2d3ad68a1a7dd2a655633e65e0ccf2171be898818cf0a1dc33a55ad9cd5228999d67a0dabc02ec55af30f7c80d4817616bdd76687afe8a6b54c9045b3cfed4b4fdb61b7a5411f9e1473899ed175c12b463035aedf4d5dd969bba9e58093605540218bd0d73dbdd227cff4b753e2c7dc41364d93d66f12e411edafa163bab85a17862ce9bd05e654ac47d22d328a250b952ee1e96878e2bcc8521aabbb2e446275c15bd830fa18522a73fc681ecd89343817f635d0aaa4751aa31114694ef4842e6eabbae08141579cdc0d876a4e9f9b2a44ac71fe6b26359e7f225b4d49ba021a722479160297259f8ab9b44f0742d2fb206158eca8e5b39128796446af81da23ae521b52d12f9d1fb703b121ad679f1076e50d49bbbbd46bb0b50d2ca421a40b1a0a1c037d1127011d44339ccf8176917f74240efdbba70f38e944fb24deb326654045f589fc6efb95770e331254dad0b3d4869f3db5cd6d516ab8c01b73c8faaaee9faa9b9c2f75f17a20c46c62350a8de240dbd16e2c3ac6b11e76f7b89ea1bcde9ce6b1328b2f049d62d7957d6bc43bd63c015f841823f08e913b4bf2fbd46ef726c1eb9e03ed78195b5afefd6946a88ebbde25738b4187df570cc3b4aa164a9b0418e5c3fe12efdf00e9100db6f3ab81ca2e12ac97e6fa9792c564ff36f3ca49ab74095094a462f4da743973aed95d2bc1ee7d4a4b866e2f1ecc8a6d2260989bcae0ed7b572f4194eb5e858ea2e45099497f0d49e4aad257e03f7daba2c44a1480428e2a507e61beb1e3e5dc304e1d45d128bb6c2970f10deb244e844bf426d0d7ead99528ec7291d935cc498ac218a53c8edb344d7c1f11f1fbed40f6ad7d1b762d7d681a23a038c9c4903ce4868332076eb5b85f6aca9e17f5e6f5fb0b849b8e010997c91f4a4331f2f86ece5c7923654bcf57e8d7c0495132c5e1cd4625f27c7d20fd998cac8f5f07fd77392c091cd7741fc507be965e99eeba533e8bd27866f99cf79a5a363e333ad39ff5e163dd71742bcad4ebc19142bba26b253d1f953ed0146759dfb828ca1deb709464d4b3b1", 0x1000, 0x0, &(0x7f0000001180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xfffffffffffffffd, {0x6, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1282.557584][ T7568] binder: 7564:7568 ioctl c0306201 20008000 returned -14 03:37:35 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x12c, 0x281) 03:37:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x6, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:35 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1282.814054][ T7577] binder: 7575:7577 transaction failed 29189/-22, size 40-6 line 2994 [ 1282.822339][ T7577] binder: 7575:7577 ioctl c0306201 20008000 returned -14 03:37:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 03:37:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xfffffe22) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @default, r2}) 03:37:35 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x12d, 0x281) [ 1282.933003][ T7577] binder: 7575:7577 ioctl c0306201 20008000 returned -14 03:37:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x7, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:35 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x12e, 0x281) 03:37:36 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:36 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='{\x0e\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00qge\x1e(f\x88\xb3\f\xd5\xf0}\xbe\xfb\xb5\xb5\xd1\xe0\a\xf4\xd97\x15\x8c\xfd\x8ds\x82\x04Y\x92m\xb5\xd8\xbb9\xc4\x98<\x97\xdd\x0e[\x7f\x1a\xee\t\xd9\x9c\xa5`\x00j`\x9f\x1cb\xc6\xa6!\xe9\xe4\xfcF\x8c\xa8\xaaC\rh>\xf8\xff\v\xf7>\xf0e8\xcb\xa5\xfa\xb8L[\xcdg\xca\x19\xfd\xe7IE\x86\x9f;\xebl\xeaj\xc2v\xa5\xde\xc6\xc1\x10f\x15T\x01\xdc\x02\x1f\ri?\xbc\x99\x91\xda=\x1at\x92L,SS\xf4\xbfyT2\xcf\xdc\xddM\x0fq\x8c\'\xbc\x9a\xac\xe1d\x0e=$\x1b\x9b\xb0\xbfb\xbd\x1d\xd3', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) rt_sigpending(&(0x7f0000000000), 0x8) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x26b, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/202) [ 1283.169002][ T7593] binder: 7589:7593 ioctl c0306201 20008000 returned -14 [ 1283.201906][ T7593] binder: 7589:7593 ioctl c0306201 20008000 returned -14 03:37:36 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x9, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x12f, 0x281) 03:37:36 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x40040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x58e73875, 0xbb34, 0x1, 0x1000, 0x100000000}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x1317, 0x2, 0x8008, 0xfffffffffffffbff, 0x1, 0x64, 0x5e, 0x7, r1}, &(0x7f00000002c0)=0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) setxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@ng={0x4, 0x12, "0336831d91"}, 0x7, 0x1) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 1283.455958][ T7605] binder: 7603:7605 ioctl c0306201 20008000 returned -14 [ 1284.696254][ T21] device hsr_slave_1 left promiscuous mode [ 1284.748879][ T21] device hsr_slave_0 left promiscuous mode [ 1284.808060][ T21] team0 (unregistering): Port device team_slave_1 removed [ 1284.831309][ T21] team0 (unregistering): Port device team_slave_0 removed [ 1284.856968][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1284.919469][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1285.095442][ T21] bond0 (unregistering): Released all slaves [ 1287.718252][ T7614] IPVS: ftp: loaded support on port[0] = 21 [ 1287.889524][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 1287.937116][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.945258][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.954039][ T7614] device bridge_slave_0 entered promiscuous mode [ 1287.963722][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.970904][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.979730][ T7614] device bridge_slave_1 entered promiscuous mode [ 1288.006130][ T7614] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1288.216801][ T7614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1288.242250][ T7614] team0: Port device team_slave_0 added [ 1288.252119][ T7614] team0: Port device team_slave_1 added [ 1288.436051][ T7614] device hsr_slave_0 entered promiscuous mode [ 1288.483228][ T7614] device hsr_slave_1 entered promiscuous mode [ 1288.715423][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.722566][ T7614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.730077][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.737239][ T7614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.972536][T30050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.981459][T30050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.013712][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.179175][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.195871][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.212225][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1289.402694][T30050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1289.412197][T30050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.429046][T30050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.436232][T30050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.452496][T30050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1289.461667][T30050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1289.477687][T30050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.484901][T30050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.685794][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1289.702434][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1289.711863][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1289.729721][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1289.740148][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1289.757239][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1289.943241][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1289.951332][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1289.969058][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1289.980540][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1289.997119][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1290.010267][ T7614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1290.150214][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.179385][ T21] device bridge_slave_1 left promiscuous mode [ 1290.192834][ T21] bridge0: port 2(bridge_slave_1) entered disabled state 03:37:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x84000, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x81) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200020000800, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xfcde) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db271e3fe5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b3261599c74301d2e70a8ab828b8f3597f8c035e7ece1fd94869915290bc2c90fc2962b521e4ec66cf07826b6f46f5104c7ad9cca429a4d6"], 0x1}}, 0x44801) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x1ff, 0x101, 0xfffffffffffffffd, 0xb5}, &(0x7f0000000600)=0x98) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="27ffa941c97b8569a769511fbbd12a4346cb19857b1224a94f49bb8c8ec280586e75e39e6d21117b3f8c935c712712b2b548893bc21bab11e310969ca43658038e78b371b87e1906fccfc523b531bed09f24"]) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/67) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000340)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x400000000000000) getdents(r3, &(0x7f0000000200)=""/148, 0x94) prctl$PR_SET_UNALIGN(0x6, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:43 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x130, 0x281) 03:37:43 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xa, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0xfffffffffffffffd) [ 1290.244220][ T21] device bridge_slave_0 left promiscuous mode [ 1290.250506][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.354480][ T7627] binder_transaction: 4 callbacks suppressed [ 1290.354500][ T7627] binder: 7620:7627 transaction failed 29189/-22, size 40-10 line 2994 [ 1290.416553][ T7627] binder: 7620:7627 ioctl c0306201 20008000 returned -14 03:37:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x131, 0x281) 03:37:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xb, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:43 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1290.652903][ T7638] binder: 7637:7638 transaction failed 29189/-22, size 40-11 line 2994 [ 1290.661270][ T7638] binder: 7637:7638 ioctl c0306201 20008000 returned -14 03:37:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$bt_hci(r1, 0x107, 0xa, 0x0, &(0x7f0000000240)) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xfffffffffffffffb, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6}, 0x0, 0x4000000}, 0xe) 03:37:43 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:43 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xc, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:43 executing program 5: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0xffffffffffffff2b, 0x0) 03:37:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x132, 0x281) [ 1290.949503][ T7656] binder: 7653:7656 transaction failed 29189/-22, size 40-12 line 2994 03:37:43 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:43 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'broute\x00', 0x0, 0x3, 0xd9, [], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=""/217}, &(0x7f0000000400)=0x78) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x18) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast, @netrom={'nr', 0x0}, 0x4, [@null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null]}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x5, 0x0, 0x6, 0x9, 0x5, 0x1, 0xffffffff, 0x7fff, 0x4a04, 0x80}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0xffffffffffffffd9, 0x0) [ 1291.003094][ T7656] binder: 7653:7656 ioctl c0306201 20008000 returned -14 03:37:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x133, 0x281) 03:37:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xd, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:44 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:44 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f, 0x10000) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/61, 0x3d, &(0x7f0000000140)=""/153, 0x3, 0x5}}, 0x68) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x2) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0x3, 0x1, 0x9, 0xeb}}, 0xe) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000280)=""/234, 0xea, &(0x7f0000000380)=""/203, 0x1, 0x3}}, 0x68) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1291.379011][ T7678] binder: 7672:7678 transaction failed 29189/-22, size 40-13 line 2994 03:37:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1291.448209][ T7678] binder: 7672:7678 ioctl c0306201 20008000 returned -14 03:37:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x134, 0x281) 03:37:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) sysfs$3(0x3) setsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f00000000c0)="e0ae5f5c25d0f63bac03f06510c8e1aec414bc4f4a7388a9f3de8984bb3255ab1d2b7802e8a29a139278114c43d1d695478ca9d6921bc1fd924d94f08e092ad7f8fe3790d13a186622ff25e90b6277747e134ba5b43deb39f0b79160814a55d91e06416055a1095c36dfe7bcf23bd45e58e0025e6ab40d7e3f5ca863e7445f10b495048439d3287531f0218db492546b3a", 0x91) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20400, 0x0) 03:37:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xe, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) 03:37:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x135, 0x281) 03:37:44 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1291.792252][ T7699] binder: 7695:7699 transaction failed 29189/-22, size 40-14 line 2994 03:37:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1291.846357][ T7699] binder: 7695:7699 ioctl c0306201 20008000 returned -14 03:37:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x200000) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x82000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="010000800900a0228a0bc4e8b9e3c52940f0c922eec157930037b8250a71f194852e3140bbf6fd9f3688d2fc5e7751e88d88aaeb2ea72d08d86211483603f16a6c7bb00b9481e1d1e60b6c779b3a44c3e02df7f5ebe0bb02c3c260f617eaba882d1015005edd954ca79958e4ed68037c8c1188d10f7632f10ce29317572ef56b79ef1394d1ce0ddd889f3eddce6a886e00e44b0ca506a681e39dc35201139f581360101bc85d9b5179ab2cf89beffd072af348a13a926978c8ce5b79946f807b7d1aa54e6d3778f0dc"]) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x136, 0x281) 03:37:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:45 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:45 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1292.103711][ T7714] Unknown ioctl 1074021064 [ 1292.140512][ T7721] Unknown ioctl 1074021064 [ 1292.164184][ T7722] binder: 7716:7722 transaction failed 29189/-22, size 40-16 line 2994 [ 1292.233520][ T7722] binder: 7716:7722 ioctl c0306201 20008000 returned -14 [ 1292.275099][ T7722] binder: 7716:7722 transaction failed 29189/-22, size 40-16 line 2994 [ 1292.301270][ T7722] binder: 7716:7722 ioctl c0306201 20008000 returned -14 03:37:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr/prev\x00') socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x2) 03:37:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x137, 0x281) 03:37:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff}, 0xfffffffffffffe78) 03:37:45 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:45 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1292.480560][ T7732] binder: 7726:7732 transaction failed 29189/-22, size 40-17 line 2994 03:37:45 executing program 2: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) migrate_pages(r1, 0x4, &(0x7f0000000080)=0xf6, &(0x7f00000000c0)=0x81) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1292.520732][ T7732] binder: 7726:7732 ioctl c0306201 20008000 returned -14 03:37:45 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x138, 0x281) 03:37:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x12, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:45 executing program 2: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1292.807264][ T7752] binder: 7748:7752 transaction failed 29189/-22, size 40-18 line 2994 [ 1292.863707][ T7752] binder: 7748:7752 ioctl c0306201 20008000 returned -14 [ 1292.897944][ T7752] binder: 7748:7752 transaction failed 29189/-22, size 40-18 line 2994 [ 1292.927195][ T7752] binder: 7748:7752 ioctl c0306201 20008000 returned -14 03:37:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x139, 0x281) 03:37:46 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:46 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:46 executing program 2: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:46 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x204001, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0xa0800) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x9, 0x541300) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x408400, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) pipe2(&(0x7f0000000240), 0x800) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='semor\x91.events\x00', 0x275a, 0x0) write$apparmor_current(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="7065726d686174203078303030303030303030303030303030345e68756765746c04000000000000006167655f69725f5aa2f4657300282100747275737465642e6f7665726c5a792e6f70617175650068756765746c040000f6ffffffff6067655f69725f5aa2f4657300656d306d696d655f7479706528776c616e310068756765746c04000000000000006167655f69725f5aa2f4657300680000000000006167655f69725f5aa2f4657300747275737465642e6f7665726c61792e6f706171756500ebdd0006c4127e0305"], 0xcb) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000100)='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffcb5, 0x3) 03:37:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x2f, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1293.177664][ T7764] binder: 7760:7764 ioctl c0306201 20008000 returned -14 03:37:46 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:46 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13a, 0x281) 03:37:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x50, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:46 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:46 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) [ 1293.420039][ T7783] binder: 7776:7783 ioctl c0306201 20008000 returned -14 03:37:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x281) 03:37:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0xaa, "d1f153", "a35a6718bcf14e7f244b4b0ac5e075da8447b361dbecc0fd948c4abe45b28c41f4d4639f21adf0905e3f4afe9fb6a0feb577819081258caf9ba49ac5021401873693be72098db23cc7ce3abc070d308113a2aeb0f995c3b7299d67249dfaf0289e479290856040252577d99ea0e04fe18a6abb6cca0cb20b7b57179a400d1d53c8e6da02ec5fb6fe0c4be26083b0dfa11272c4fa1c08a36421c79a0db99978433ea05282bdc6607f88f9f7794c200a213a9c0333a21c940e99d57d347dcfd05b1c161d74b07597e87fab7321143af23d1699b348d52130fe1ed6f37be8af69d616529ee5000cea8abc7031bc85cc0611ab0f3c2a269154e7a3c92bf86ee67091"}}, 0x110) syncfs(r0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 1293.469147][ T7783] binder: 7776:7783 ioctl c0306201 20008000 returned -14 [ 1295.776569][ T21] device hsr_slave_1 left promiscuous mode [ 1295.836958][ T21] device hsr_slave_0 left promiscuous mode [ 1295.908272][ T21] team0 (unregistering): Port device team_slave_1 removed [ 1295.932510][ T21] team0 (unregistering): Port device team_slave_0 removed [ 1295.957224][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1296.050450][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1296.221875][ T21] bond0 (unregistering): Released all slaves 03:37:51 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0x9}}, 0x20) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x5d, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:51 executing program 2: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:51 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13c, 0x281) 03:37:51 executing program 5: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x6, 0x200000) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x101000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r1, r2, 0x8, 0x2}, 0x10) fgetxattr(r0, &(0x7f0000000040)=@random={'os2.', ',mime_type?keyringeth1+md5sumeth0\x00'}, &(0x7f0000000080)=""/206, 0xce) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 03:37:51 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13d, 0x281) 03:37:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCXONC(r1, 0x540a, 0x54eb) clone(0x20000, &(0x7f0000000140)="24cfb879f21dd05024ec0a00cb3ed9edf46aabb9c5df05e0e1d8d5b92b193bde6c42d7833acfa24fcb7205b927dc8fa8dc817fb518021e1091931a468843700cbb4b35e71fb51c0e20e95f23c774f48c79f5d505eaaa5c70c065accb6fffe2ae2f59405790b20908417a0f6b1d152b453d4f220ae900f5c0ae4507a11c35fb7b03b7e38f634277e61094a11de26090ae088d15605c1bac82a6f2eeb0812f414d9d3e0647bca02bd150afc6c68660ff8001d847fc5528c39d536471a1cc849ed41d0089", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)="bab6e006a62fdad2831c6c8bd088a0afcae0b55336b3c9f8f4c5bd64270dda1af7b3153458a7108f7b17c6b000053860f11147e7501abb6bf4c1ef2f23c9b0ce437f924fe0ec20a1d684dfd4424fb822cad018039bba3be117e8b34cf357497ea9f7bdcc14aa0e71cd171032fdcf3f22ca498caa0795130898b8465591e38222f2257b00862965fb187f33efcebf603d2dd979cbe7fdb7c855f8ec6d3ab87029d7427ba9096cf1b63e94") connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x1, 0x2efe, 0xee9, 0x9, 0x14, 0x9, 0x1, 0x7fc0000, 0x20, 0xffff, 0x5, 0x2}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 1298.793177][ T7809] binder_transaction: 3 callbacks suppressed [ 1298.793195][ T7809] binder: 7800:7809 transaction failed 29189/-22, size 40-93 line 2994 [ 1298.824753][ T7809] binder: 7800:7809 ioctl c0306201 20008000 returned -14 03:37:51 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x63, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:51 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13e, 0x281) [ 1298.989834][ T7827] binder: 7826:7827 transaction failed 29189/-22, size 40-99 line 2994 [ 1299.050231][ T7827] binder: 7826:7827 ioctl c0306201 20008000 returned -14 03:37:52 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x13f, 0x281) 03:37:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x2, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1008}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r2, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x587d6282, @mcast2, 0xfffffffffffffff9}, @in6={0xa, 0x4e24, 0x1c1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}, 0x118) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:52 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1299.258945][ T7843] binder: 7842:7843 transaction failed 29189/-22, size 40-8 line 2994 [ 1299.320202][ T7843] binder: 7842:7843 ioctl c0306201 20008000 returned -14 03:37:52 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x140, 0x281) 03:37:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000080)={0x34, 0x0, 0xfffffffffffffff9}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb, 0x4}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6, 0x1}}, 0x2) 03:37:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x3, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:52 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1299.488366][ T7862] binder: 7859:7862 transaction failed 29189/-22, size 40-8 line 2994 03:37:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x140ffe, 0x0) 03:37:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x141, 0x281) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1299.557793][ T7862] binder: 7859:7862 ioctl c0306201 20008000 returned -14 03:37:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:52 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1299.733197][ T7879] binder: 7878:7879 transaction failed 29189/-22, size 40-8 line 2994 [ 1299.766824][ T7879] binder: 7878:7879 ioctl c0306201 20008000 returned -14 03:37:52 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x40000000, 0x0, 0x0, 0x0, 0x400006, 0xfffffffffffffffe}, 0xfffffffffffffffd}, 0xe) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4) 03:37:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x142, 0x281) 03:37:52 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x5, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1299.902512][ T7894] binder: 7888:7894 transaction failed 29189/-22, size 40-8 line 2994 03:37:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x143, 0x281) [ 1299.963792][ T7894] binder: 7888:7894 ioctl c0306201 20008000 returned -14 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1300.007297][ T7894] binder: 7888:7894 transaction failed 29189/-22, size 40-8 line 2994 [ 1300.029870][ T7894] binder: 7888:7894 ioctl c0306201 20008000 returned -14 03:37:53 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x144, 0x281) 03:37:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x309100, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x9, 0x2, 0x6}}, 0x14) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x145, 0x281) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x10000, 0x4) r2 = gettid() fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x4, 0x3ba0, 0x7fff, r2}) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1300.290881][ T7920] binder: 7919:7920 transaction failed 29189/-22, size 40-8 line 2994 [ 1300.312776][ T7920] binder: 7919:7920 ioctl c0306201 20008000 returned -14 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800005, 0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x2, "2c4aefc9f7e941bc"}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x146, 0x281) [ 1300.578540][ T7946] binder: 7945:7946 transaction failed 29189/-22, size 40-8 line 2994 [ 1300.602179][ T7946] binder: 7945:7946 ioctl c0306201 20008000 returned -14 03:37:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x147, 0x281) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x12, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) [ 1300.717124][ T7957] binder: 7954:7957 transaction failed 29189/-22, size 40-8 line 2994 03:37:53 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x10000, {0xffff, 0xa20, 0x0, 0xeb, 0x2, 0x401}, 0xfffffffffffffffc, 0xde17}, 0xb) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfc, 0x200801) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @local}}, 0x1, 0x9}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x3}, 0x8) [ 1300.761177][ T7957] binder: 7954:7957 ioctl c0306201 20008000 returned -14 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x148, 0x281) 03:37:53 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x48, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1300.957584][ T7972] binder: 7970:7972 ioctl c0306201 20008000 returned -14 03:37:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) 03:37:53 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x149, 0x281) 03:37:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4c, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:53 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) [ 1301.107911][ T7985] binder: 7983:7985 ioctl c0306201 20008000 returned -14 03:37:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20380, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000140)='\x00', 0x1) r2 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000000)={0x399f1736, r2}, &(0x7f0000000080)={0x100000000, 0x8, 0x10002, 0x5ae, 0x6, 0xffffffffffffff81}) 03:37:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x60, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14a, 0x281) 03:37:54 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) write$binfmt_script(r0, 0x0, 0x101d0) [ 1301.320119][ T8003] binder: 7997:8003 ioctl c0306201 20008000 returned -14 03:37:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14b, 0x281) 03:37:54 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:54 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1301.375670][ T8003] binder: 7997:8003 ioctl c0306201 20008000 returned -14 03:37:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x68, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000140)=0x6e) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14c, 0x281) [ 1301.566663][ T8018] binder: 8017:8018 ioctl c0306201 20008000 returned -14 03:37:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6c, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:54 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14d, 0x281) 03:37:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x2db8, 0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x9, 0x6, 0x7fff}}, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r2, 0x0, 0x1f, 0x7fffffff, 0x40, 0x3, 0x0, 0x8, {r3, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x25f}}, 0x20, 0x7, 0x0, 0x0, 0x7}}, &(0x7f00000002c0)=0xb0) 03:37:54 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1301.774430][ T8030] binder: 8029:8030 ioctl c0306201 20008000 returned -14 [ 1301.798275][ T8030] binder: 8029:8030 ioctl c0306201 20008000 returned -14 03:37:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x4, 0x0, 0x0, 0x6}}, 0xa) 03:37:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14e, 0x281) 03:37:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x74, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000180)={{0x1ff, 0x7fffffff, 0xffffffffd3c890f8, 0x1, 0x6, 0x1b}, 0x1ff, 0x0, 0x2}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, r1}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x3ff, 0x0, 0x0, 0xeb}}, 0xfffffffffffffefc) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1302.088146][ T8053] binder: 8052:8053 ioctl c0306201 20008000 returned -14 [ 1302.118800][ T8053] binder: 8052:8053 ioctl c0306201 20008000 returned -14 03:37:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x14f, 0x281) 03:37:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4000003, {0x0, 0x0, 0x7, 0x834}, 0x6}, 0xe) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x404, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x244) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) setsockopt(r0, 0x0, 0x1, &(0x7f00000000c0)="947f2d2c45", 0x5) 03:37:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7a, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x150, 0x281) [ 1302.337815][ T8073] binder: 8069:8073 ioctl c0306201 20008000 returned -14 03:37:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x300, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) inotify_init1(0x80000) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x151, 0x281) [ 1302.538124][ T8081] binder: 8080:8081 ioctl c0306201 20008000 returned -14 03:37:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x500, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x802, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 03:37:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x152, 0x281) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1302.765504][ T8100] binder: 8099:8100 ioctl c0306201 20008000 returned -14 03:37:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x600, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fallocate(r0, 0x1, 0x7, 0xe50d) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:37:55 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x153, 0x281) 03:37:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x480000, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x1, 0x4) [ 1302.987544][ T8116] binder: 8112:8116 ioctl c0306201 20008000 returned -14 03:37:56 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x700, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x154, 0x281) 03:37:56 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff8c) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x8001) [ 1303.245335][ T8132] binder: 8131:8132 ioctl c0306201 20008000 returned -14 03:37:56 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x155, 0x281) 03:37:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x1200, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000880), &(0x7f00000008c0)=0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0xfffffffffffffffa, 0x80000001, 0xf52, 0x3, 0x1}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="000000010000000000003fd4ff02685da8d22f7c0d13a66d2116237a1f036e20f5"], 0xe) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x1f, 0x6}, &(0x7f0000000180)=0x18) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x4}, 0x8) [ 1303.459155][ T8147] binder: 8145:8147 ioctl c0306201 20008000 returned -14 03:37:56 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x156, 0x281) 03:37:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x2000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:56 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, {0x0, 0x0, 0x0, 0xeb, 0x4}, 0x6}, 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x4}, 0x18) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 1303.664604][ T8162] binder: 8160:8162 ioctl c0306201 20008000 returned -14 03:37:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x157, 0x281) [ 1303.714653][ T8162] binder: 8160:8162 ioctl c0306201 20008000 returned -14 03:37:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4800, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:56 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x158, 0x281) 03:37:56 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:56 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) write$binfmt_script(r0, 0x0, 0x101d0) [ 1303.962014][ T8176] binder_transaction: 17 callbacks suppressed [ 1303.962032][ T8176] binder: 8175:8176 transaction failed 29189/-22, size 40-8 line 2994 03:37:56 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:57 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) bind$x25(r4, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 1304.046972][ T8176] binder: 8175:8176 ioctl c0306201 20008000 returned -14 03:37:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x159, 0x281) 03:37:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4c00, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1304.274308][ T8199] binder: 8196:8199 transaction failed 29189/-22, size 40-8 line 2994 03:37:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15a, 0x281) [ 1304.409992][ T8199] binder: 8196:8199 ioctl c0306201 20008000 returned -14 03:37:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:57 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x101d0) bind$x25(r5, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15b, 0x281) [ 1304.581073][ T8212] binder: 8210:8212 transaction failed 29189/-22, size 40-8 line 2994 03:37:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:57 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x101d0) bind$x25(r5, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000180)) 03:37:57 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x101d0) bind$x25(r5, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1304.651526][ T8212] binder: 8210:8212 ioctl c0306201 20008000 returned -14 03:37:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6800, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:57 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:37:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15c, 0x281) [ 1304.893961][ T8232] binder: 8231:8232 transaction failed 29189/-22, size 40-8 line 2994 [ 1304.974401][ T8232] binder: 8231:8232 ioctl c0306201 20008000 returned -14 03:37:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15d, 0x281) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) recvfrom$ax25(r2, &(0x7f0000000180)=""/216, 0xd8, 0x40002000, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:37:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6c00, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) recvfrom$ax25(r2, &(0x7f0000000180)=""/216, 0xd8, 0x40002000, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 1305.260986][ T8262] binder: 8261:8262 transaction failed 29189/-22, size 40-8 line 2994 03:37:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:58 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x101d0) bind$x25(r5, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) [ 1305.318449][ T8262] binder: 8261:8262 ioctl c0306201 20008000 returned -14 03:37:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x242800, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 03:37:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15e, 0x281) 03:37:58 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7400, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) recvfrom$ax25(r2, &(0x7f0000000180)=""/216, 0xd8, 0x40002000, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:37:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x15f, 0x281) 03:37:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1305.570965][ T8280] binder: 8279:8280 transaction failed 29189/-22, size 40-8 line 2994 [ 1305.608598][ T8280] binder: 8279:8280 ioctl c0306201 20008000 returned -14 [ 1305.646816][ T8280] binder: 8279:8280 transaction failed 29189/-22, size 40-8 line 2994 [ 1305.678494][ T8280] binder: 8279:8280 ioctl c0306201 20008000 returned -14 03:37:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x242800, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 03:37:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x160, 0x281) 03:37:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7a00, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e667de3b6e561b1e6fb8ba4f5db"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x2080, 0x0) getsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000100000000000000ffefffff0000000000000000000000004aac9eaff138eef501e5cf1a5a9a940004635f1778ec6cee22e3bd9836bdb18198cc4c8fac2de63de9846103d3d834e0ecb05594af52d011f37c40748504da"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, 0x0, 0x101d0) bind$x25(r6, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:37:58 executing program 5: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x161, 0x281) [ 1305.839951][ T8297] binder: 8294:8297 transaction failed 29189/-22, size 40-8 line 2994 [ 1305.864874][ T8297] binder: 8294:8297 ioctl c0306201 20008000 returned -14 03:37:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x1000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:37:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f000069affb)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 03:37:58 executing program 5: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x162, 0x281) [ 1306.079736][ T8313] binder: 8310:8313 transaction failed 29189/-22, size 40-8 line 2994 [ 1306.115773][ T8313] binder: 8310:8313 ioctl c0306201 20008000 returned -14 03:37:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1306.168877][ T8313] binder: 8310:8313 transaction failed 29189/-22, size 40-8 line 2994 03:37:59 executing program 5: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1306.223058][ T8313] binder: 8310:8313 ioctl c0306201 20008000 returned -14 03:37:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x2000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 03:37:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x163, 0x281) 03:37:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1306.404886][ T8333] binder: 8332:8333 ioctl c0306201 20008000 returned -14 03:37:59 executing program 5: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x3000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:37:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x87fffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f000069affb)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 03:37:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x164, 0x281) 03:37:59 executing program 5: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1306.583651][ T8346] binder: 8345:8346 ioctl c0306201 20008000 returned -14 03:37:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 03:37:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:37:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:37:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x165, 0x281) 03:37:59 executing program 5: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1306.820073][ T8361] binder: 8359:8361 ioctl c0306201 20008000 returned -14 03:37:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 03:37:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:37:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x166, 0x281) 03:38:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x8, 0x40) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x4) 03:38:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x5000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:00 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x167, 0x281) 03:38:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:00 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1307.178716][ T8385] binder: 8378:8385 ioctl c0306201 20008000 returned -14 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x168, 0x281) [ 1307.243179][ T8385] binder: 8378:8385 ioctl c0306201 20008000 returned -14 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:00 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x8, 0x40) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x4) 03:38:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x169, 0x281) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) [ 1307.426249][ T8402] binder: 8400:8402 ioctl c0306201 20008000 returned -14 03:38:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16a, 0x281) 03:38:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1307.653204][ T8419] binder: 8415:8419 ioctl c0306201 20008000 returned -14 03:38:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x8, 0x40) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x4) 03:38:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x12000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16b, 0x281) 03:38:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) [ 1307.858055][ T8431] binder: 8430:8431 ioctl c0306201 20008000 returned -14 03:38:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16c, 0x281) 03:38:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x20000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16d, 0x281) 03:38:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1308.148765][ T8452] binder: 8449:8452 ioctl c0306201 20008000 returned -14 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x48000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16e, 0x281) 03:38:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1308.344341][ T8467] binder: 8463:8467 ioctl c0306201 20008000 returned -14 03:38:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x16f, 0x281) 03:38:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4c000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89}, 0x1c) write$binfmt_script(r0, 0x0, 0x101d0) 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1308.607721][ T8485] binder: 8484:8485 ioctl c0306201 20008000 returned -14 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x170, 0x281) 03:38:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x60000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:38:01 executing program 2: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x171, 0x281) 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1308.825495][ T8504] binder: 8499:8504 ioctl c0306201 20008000 returned -14 03:38:01 executing program 2: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) 03:38:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x68000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x172, 0x281) 03:38:02 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0) [ 1309.061174][ T8521] binder_transaction: 12 callbacks suppressed [ 1309.061192][ T8521] binder: 8517:8521 transaction failed 29189/-22, size 40-8 line 2994 03:38:02 executing program 2: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1309.102825][ T8521] binder: 8517:8521 ioctl c0306201 20008000 returned -14 03:38:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6c000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x173, 0x281) 03:38:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) [ 1309.314571][ T8539] binder: 8538:8539 transaction failed 29189/-22, size 40-8 line 2994 [ 1309.346011][ T8539] binder: 8538:8539 ioctl c0306201 20008000 returned -14 03:38:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x174, 0x281) 03:38:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x74000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x192) 03:38:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 4: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1309.544545][ T8558] binder: 8555:8558 transaction failed 29189/-22, size 40-8 line 2994 [ 1309.576632][ T8558] binder: 8555:8558 ioctl c0306201 20008000 returned -14 03:38:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x175, 0x281) [ 1309.615475][ T8558] binder: 8555:8558 transaction failed 29189/-22, size 40-8 line 2994 [ 1309.652536][ T8558] binder: 8555:8558 ioctl c0306201 20008000 returned -14 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(r0, 0x0, &(0x7f0000000340)) 03:38:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7a000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:02 executing program 4: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(r0, 0x0, 0x0) 03:38:02 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x176, 0x281) [ 1309.830790][ T8578] binder: 8574:8578 transaction failed 29189/-22, size 40-8 line 2994 [ 1309.845984][ T8578] binder: 8574:8578 ioctl c0306201 20008000 returned -14 03:38:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 4: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(r0, 0x0, 0x0) 03:38:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x100000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x177, 0x281) 03:38:03 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) getpeername(r0, 0x0, 0x0) [ 1310.052982][ T8592] binder: 8590:8592 transaction failed 29189/-22, size 40-8 line 2994 [ 1310.079123][ T8592] binder: 8590:8592 ioctl c0306201 20008000 returned -14 03:38:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x200000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000140)) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x178, 0x281) 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x179, 0x281) [ 1310.330606][ T8613] binder: 8610:8613 transaction failed 29189/-22, size 40-8 line 2994 03:38:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1310.408909][ T8613] binder: 8610:8613 ioctl c0306201 20008000 returned -14 03:38:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x300000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17a, 0x281) 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffe}, 0xe) 03:38:03 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1310.621735][ T8632] binder: 8629:8632 transaction failed 29189/-22, size 40-8 line 2994 03:38:03 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17b, 0x281) 03:38:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x700}, 0xe) [ 1310.692906][ T8632] binder: 8629:8632 ioctl c0306201 20008000 returned -14 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x400000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:03 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17c, 0x281) 03:38:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffffe}, 0xe) 03:38:03 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1310.895811][ T8652] binder: 8650:8652 transaction failed 29189/-22, size 40-8 line 2994 [ 1310.921431][ T8652] binder: 8650:8652 ioctl c0306201 20008000 returned -14 03:38:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17d, 0x281) 03:38:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:03 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x500000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:04 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, [], 0xc}, 0x10001}, @in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @broadcast}, 0xc014}], 0x38) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x440100, 0x0) write$uinput_user_dev(r3, &(0x7f0000000480)={'syz1\x00', {0xfffffffffffffff8, 0x89, 0x8, 0x5}, 0x3, [0x7, 0x80000001, 0x400, 0xde23, 0xffffffffffff7fff, 0x8, 0x102c, 0x0, 0x8, 0x3, 0xffffffffffffffff, 0x1, 0x81, 0x101, 0x4, 0x7ff, 0x4, 0x1000, 0x5, 0xfffffffffffffc00, 0xab0, 0x1, 0x3, 0x5, 0x9, 0x6, 0x80000000, 0x9, 0x4, 0x9, 0x6, 0x3, 0x80000000, 0x400, 0x9, 0x7, 0x70a, 0x9, 0x9, 0x80000000, 0xff, 0x100000000, 0x0, 0x3ff, 0xfffffffffffffff7, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x10001, 0x1, 0x7, 0x0, 0x1, 0x592311ee, 0x81, 0x1f, 0x3, 0x2, 0x0, 0x3, 0x5, 0x3, 0x80000000, 0x8], [0x6, 0x1, 0x6, 0x9, 0x40, 0x7fff, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x1f, 0x9, 0xffffffffffffffe1, 0x13, 0x800, 0x1, 0xe6a1, 0x8, 0x29e, 0x7, 0x0, 0x1ff, 0x0, 0x5, 0xfff, 0x5, 0x7, 0x4, 0x5, 0x2, 0x1, 0x2, 0x6, 0xfffffffffffffc00, 0xfff, 0x694c, 0x3ff, 0x1, 0x1, 0x10000, 0x6, 0x7, 0x80000000, 0x5, 0x664, 0x4, 0x2, 0x6, 0x1, 0x3, 0x9, 0x6, 0x10000, 0x6, 0x7, 0x1, 0x100000001, 0x8001, 0x4, 0xb45, 0x401, 0xa803, 0x3f, 0x9f, 0x9], [0x1000, 0x1, 0x3b58, 0x2, 0xffffffffffffffc0, 0x3ff, 0x5, 0x2, 0x8, 0x80000000, 0xc0000000000, 0x9, 0xfffffffffffff800, 0x6, 0xd4bc, 0x1f, 0x7fe9, 0x1, 0x8, 0x0, 0x4, 0x9, 0x4, 0x3, 0x1, 0x1, 0x0, 0x2, 0x5, 0x80000001, 0x8e, 0x100, 0x9, 0x10000, 0x10000, 0xb65c, 0x9, 0x9, 0x5, 0x8, 0x9, 0x0, 0x1f, 0x2, 0xffbb, 0x8, 0xff, 0xfff, 0x7fff, 0x1000, 0xfffffffffffff801, 0x81, 0x1, 0x8, 0x3ff, 0x176a, 0x1, 0x400, 0x7fffffff, 0x3, 0x400, 0x101, 0x14, 0x3], [0x0, 0x8, 0x9, 0x7ff, 0x6, 0x5, 0x1f, 0xfff, 0x5716, 0x3, 0x3, 0x6, 0x100000000, 0xf22, 0x39, 0x0, 0x200, 0x4, 0xfffffffffffffffa, 0xffffffffffffffc1, 0x401, 0x5, 0x4, 0x3, 0x6, 0x3f, 0x80000000, 0x80000000, 0x2, 0x1, 0x8, 0x0, 0x82, 0x5, 0x7, 0x7f, 0x80000000, 0x1, 0x8, 0x1, 0x0, 0x29, 0x3f, 0x200, 0x3, 0x47, 0x0, 0x1f, 0x9, 0x6, 0x80000001, 0x0, 0x1ff, 0x9, 0xfeff, 0x80000000, 0xff, 0xfffffffffffffffd, 0x10000, 0x5, 0x8, 0x1000, 0x81, 0x8d]}, 0x45c) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x1) 03:38:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17e, 0x281) [ 1311.149057][ T8673] binder: 8668:8673 transaction failed 29189/-22, size 40-8 line 2994 03:38:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000140)) [ 1311.197991][ T8673] binder: 8668:8673 ioctl c0306201 20008000 returned -14 03:38:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) close(r3) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000008000, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000000c0)=0x1) 03:38:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x600000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x17f, 0x281) 03:38:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1311.418224][ T8690] binder: 8689:8690 ioctl c0306201 20008000 returned -14 03:38:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = dup(r1) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000180)=0x2a) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000000c0)=0x1) 03:38:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x1000000, 0x0, 0x6}}, 0xe) 03:38:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x700000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x180, 0x281) 03:38:04 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1311.677865][ T8711] binder: 8704:8711 ioctl c0306201 20008000 returned -14 03:38:04 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:04 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x181, 0x281) 03:38:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x1200000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:04 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x182, 0x281) 03:38:04 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1311.878627][ T8726] binder: 8723:8726 ioctl c0306201 20008000 returned -14 03:38:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1311.951036][ T8726] binder: 8723:8726 ioctl c0306201 20008000 returned -14 03:38:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x2000000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x183, 0x281) 03:38:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000140)) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x486, 0x0, 0x0) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x486, 0x0, 0x0) [ 1312.124697][ T8743] binder: 8741:8743 ioctl c0306201 20008000 returned -14 03:38:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 1312.171689][ T8743] binder: 8741:8743 ioctl c0306201 20008000 returned -14 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x184, 0x281) 03:38:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4800000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x112, 0x486, 0x0, 0x0) 03:38:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x112, 0x486, 0x0, 0x0) 03:38:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:05 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600, 0x486, 0x0, 0x0) 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x185, 0x281) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600, 0x486, 0x0, 0x0) [ 1312.376049][ T8760] binder: 8759:8760 ioctl c0306201 20008000 returned -14 03:38:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x4c00000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:05 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201, 0x486, 0x0, 0x0) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201, 0x486, 0x0, 0x0) 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x186, 0x281) 03:38:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1312.605483][ T8779] binder: 8776:8779 ioctl c0306201 20008000 returned -14 03:38:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6000000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1000000, 0x486, 0x0, 0x0) 03:38:05 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1000000, 0x486, 0x0, 0x0) 03:38:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x486, 0x0, 0x0) 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x187, 0x281) [ 1312.766205][ T8791] binder: 8790:8791 ioctl c0306201 20008000 returned -14 03:38:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6800000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6000000, 0x486, 0x0, 0x0) 03:38:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6000000, 0x486, 0x0, 0x0) 03:38:05 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 03:38:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x112, 0x486, 0x0, 0x0) 03:38:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x188, 0x281) [ 1312.950027][ T8804] binder: 8803:8804 ioctl c0306201 20008000 returned -14 [ 1313.000560][ T8804] binder: 8803:8804 ioctl c0306201 20008000 returned -14 03:38:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x12010000, 0x486, 0x0, 0x0) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x12010000, 0x486, 0x0, 0x0) 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000140)) 03:38:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x6c00000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600, 0x486, 0x0, 0x0) 03:38:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x189, 0x281) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x100000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x100000000000000, 0x486, 0x0, 0x0) [ 1313.209827][ T8820] binder: 8819:8820 ioctl c0306201 20008000 returned -14 [ 1313.244437][ T8820] binder: 8819:8820 ioctl c0306201 20008000 returned -14 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201, 0x486, 0x0, 0x0) 03:38:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7400000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18a, 0x281) 03:38:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1000000, 0x486, 0x0, 0x0) [ 1313.487380][ T8842] binder: 8840:8842 ioctl c0306201 20008000 returned -14 03:38:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18b, 0x281) 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x7a00000000000000, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getspdinfo={0x1c, 0x25, 0x900, 0x70bd2a, 0x25dfdbff, 0x5, [@ipv4_hthresh={0x8, 0x3, {0x5, 0x20}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) r3 = gettid() fcntl$lock(r1, 0x25, &(0x7f0000000280)={0x3, 0x3, 0x8, 0x591aa232, r3}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6000000, 0x486, 0x0, 0x0) 03:38:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x486, 0x0, 0x0) 03:38:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18c, 0x281) [ 1313.761875][ T8863] binder: 8862:8863 ioctl c0306201 20008000 returned -14 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x12010000, 0x486, 0x0, 0x0) 03:38:06 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x47) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7ff, 0x3, [0x0, 0x8, 0x5]}, &(0x7f0000000200)=0xe) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r2, 0x1d4, "86a940719f07369c585628e719f88e17d8d59f1197e40e72f0e751aa5e6c41747cd1b33abb336c90c65b5695f64c637e26d021ec25fa89d2d1be86bbb5d7b37e4600778aaeab423cfb107f0358bee12d80981ebf94963bf86065d13745c23c067a581fbe50d2c863abc541abdda937c22c3e619ca460535991c3f3888e80b9b8010c46255b1d9862dede647e0a6ecfcb2829f90f74f60f5b14f3e6992b38ba0d35f5643426b113"}, &(0x7f0000000140)=0xaa) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r3, 0x6}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1313.807928][ T8863] binder: 8862:8863 ioctl c0306201 20008000 returned -14 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x112, 0x486, 0x0, 0x0) 03:38:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x2, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18d, 0x281) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x100000000000000, 0x486, 0x0, 0x0) 03:38:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x44) 03:38:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600, 0x486, 0x0, 0x0) [ 1313.987808][ T8884] binder: 8883:8884 ioctl c0306201 20008000 returned -14 03:38:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffc02) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x52) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = dup2(r0, r0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$FUSE_ENTRY(r3, &(0x7f00000003c0)={0x90, 0x0, 0x4, {0x0, 0x1, 0x100000001, 0xeea, 0x4, 0x8, {0x1, 0xfa7, 0x10000, 0x6, 0x10001, 0x60000, 0x7fff, 0x2, 0x0, 0x65a, 0x1f, r4, r5, 0x2, 0x6}}}, 0x90) r6 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x8}, 0x4) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{r3, 0x0, 0x1000000002000, 0xfffffffff0001000}, {r6, 0x0, 0xfffffffff0000000, 0xfffff000}, {r1, 0x0, 0xfffff000, 0xfffffffff0000000}, {r1, 0x0, 0x2000, 0x4000}]}) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000480)=0x1ff, 0x4) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000180)) 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x20000003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1314.056688][ T8884] binder: 8883:8884 ioctl c0306201 20008000 returned -14 03:38:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201, 0x486, 0x0, 0x0) 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600000000000000, 0x486, 0x0, 0x0) 03:38:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18e, 0x281) 03:38:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x3, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/66, 0x42, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @ipv4={[], [], @loopback}}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0xa, 0x0, 0x7, 0x10001, 'syz1\x00', 0x1}, 0x0, 0x103, 0x5, r2, 0x1, 0x1, 'syz0\x00', &(0x7f0000000040)=['!vmnet0/bdevkeyringlomd5sum.\\#posix_acl_accesslowlan0\x00'], 0x36, [], [0x5, 0x6, 0x401, 0x903]}) 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201000000000000, 0x486, 0x0, 0x0) 03:38:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1000000, 0x486, 0x0, 0x0) 03:38:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x18f, 0x281) [ 1314.309377][ T8909] binder_transaction: 18 callbacks suppressed [ 1314.309394][ T8909] binder: 8905:8909 transaction failed 29189/-22, size 40-8 line 2994 03:38:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000040)={0x1d, "555a7b38230ff47f000161904c8fe753c6f999c1fd22b3839e1b355f619b869d98a6046ff250da6d3857610c6da44136eca844d19c982e20c35acfb71e9c9f0ee92c2681d61945bcd832eaf6282038f5e5c21c5b14ed034312ff91960f69633c97a9e72c16080125e8eb0b3484036400fcf47bbfe9e2c6208f06520e0b82d60b"}) [ 1314.351772][ T8909] binder: 8905:8909 ioctl c0306201 20008000 returned -14 03:38:07 executing program 2: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) 03:38:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6000000, 0x486, 0x0, 0x0) 03:38:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x4, {{0xa, 0x4e22, 0x7, @mcast1, 0x7681}}, 0x0, 0x3, [{{0xa, 0x4e20, 0x7, @mcast1, 0x8001}}, {{0xa, 0x4e22, 0x101, @ipv4={[], [], @multicast1}, 0x2fc5}}, {{0xa, 0x4e22, 0x9b43, @dev={0xfe, 0x80, [], 0x14}, 0xf444}}]}, 0x210) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x190, 0x281) [ 1314.580767][ T8929] binder: 8924:8929 transaction failed 29189/-22, size 40-8 line 2994 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0xa01, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'team_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/51) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x224000, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000280)={0x8, 0x1, 0x2}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[{}, {0x0}]}) syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0x3, 0x349b44ce9c7b787d) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r3}) close(r2) [ 1314.629914][ T8929] binder: 8924:8929 ioctl c0306201 20008000 returned -14 03:38:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x12010000, 0x486, 0x0, 0x0) 03:38:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x5, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6347, 0x2000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0x8}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0xff, 0x202, 0x8, 0x5, r2}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="212bf1e0e9577390290c1acf44ba6e7cc061a97a2402e51e4ea3ccb0ae20f5abc31e376f91d91d7d", 0x28, 0xfffffffffffffffc) keyctl$describe(0x6, r3, &(0x7f0000000240)=""/69, 0x45) 03:38:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x191, 0x281) 03:38:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000140)=0x4, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="46e301fb8100"], &(0x7f0000000080)=0xa) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x7f, 0x81, 0x5, 0xffff, 0x2}, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 03:38:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x100000000000000, 0x486, 0x0, 0x0) [ 1314.885191][ T8954] binder: 8951:8954 transaction failed 29189/-22, size 40-8 line 2994 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1314.933190][ T8954] binder: 8951:8954 ioctl c0306201 20008000 returned -14 03:38:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x192, 0x281) [ 1314.975300][ T8954] binder: 8951:8954 transaction failed 29189/-22, size 40-8 line 2994 [ 1315.004616][ T8963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=8963 comm=syz-executor.2 [ 1315.017722][ T8954] binder: 8951:8954 ioctl c0306201 20008000 returned -14 03:38:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x600000000000000, 0x486, 0x0, 0x0) 03:38:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040)) [ 1315.084291][ T8970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=8970 comm=syz-executor.2 03:38:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x83fc, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/69, &(0x7f00000001c0)=0x45) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@ng={0x4, 0x7, "582aa38ded7b49663fd9b6ff457f"}, 0x10, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000002c0)=0x1, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @mcast2, 0x5, 0x4000005, 0x101, 0x400, 0xfffffffffffffffe, 0x4, r2}) 03:38:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x193, 0x281) 03:38:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1315.194967][ T8979] binder: 8978:8979 transaction failed 29189/-22, size 40-8 line 2994 03:38:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x1201000000000000, 0x486, 0x0, 0x0) [ 1315.242995][ T8979] binder: 8978:8979 ioctl c0306201 20008000 returned -14 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) 03:38:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x5) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0xffffffffffffffe6) 03:38:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) eventfd2(0x2, 0x1) 03:38:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x194, 0x281) 03:38:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffc, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000200)={0x73, 0x7d, 0x1, {{0x0, 0x5d, 0x3e0, 0x2cf6, {0x9, 0x2, 0x2}, 0x1000000, 0x180, 0x1, 0x1, 0x9, '\'ppp1user', 0xb, 'nat\x00\x00\x00\xa0x<\x0f\x00', 0xb, 'nat\x00\x00\x00\xa0x<\x0f\x00', 0xb, 'nat\x00\x00\x00\xa0x<\x0f\x00'}, 0x1, '}', r3, r4, r5}}, 0x73) mkdir(&(0x7f0000000480)='./file0\x00', 0x21) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6174000000a0783c0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000"], 0xfd15) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xffffffffffff96c1}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000540)={r6, 0x7ff}, 0x8) 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40482, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, {0x4, 0x2, 0x10000, 0x101, 0x200}, 0x0, 0xfff}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1315.473071][ T9003] binder: 8996:9003 transaction failed 29189/-22, size 40-8 line 2994 03:38:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) dup2(r0, r0) 03:38:08 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1315.542898][ T9003] binder: 8996:9003 ioctl c0306201 20008000 returned -14 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="877ee1a624c5a4fd3c848ed94cc045420f72641061b39b1a3f00f262eb62caa6525280d72a6a2cc380220502cd558d86556232bd377e9cd84a7a46ce0139daae5da212a7eb52c56e95d3bae89860587ea150e15a1356dd845a5f3fef8a5344de235a9f72440252965431b4f4a0306604d5d2f06f91e54dceb590400d539826d364c1947fd8a4b12506eea7101c1ed8390cdf7596954b5241e539daa79be60627ce83e7735a294a73cd15611d521d0a41d25c45406070b193953afe90806ccabeb8bd41f6ada3957c413436201009ac35840dcd3979d0bdffa7bae1a7a81c7f67231f191061ed151bd8a6a6c0154adcdf5d84387eba608fe67ad06ce6f9d63b7b257236541a8fb2966edb7a6083766903984870a93bcfc24df5f33e81eae080f6b2ccbce5fb46dd4f9c01415e8a7b2e153dcd53bdda6d966210156630f12fb91e1f36a48e3e2699a970a44bac324ea441728e1562b4010f9e894d0b403b9d59312f68dc73c52f7707834163f2505a8f44c01684fdb47cc604699a783d7b15dab9fa68e3ddb7828cffe98b24937770ed95b38b74bda10496910e5e6237392839a87ec64ef156f7f4cc65e71ff8f63fb3b6d6ef7993377861b905a733dff6b1b36a218ee32510a69dcc69acc2a246e6f9c9bacb9218b4a62402e6657895cd60c336eb4c90ef35e1fe1b81e027d581687d6e80bf1c0980cf2cca43cf266f5f4cc251667a900a73b62840e10c8b4b6833fdb56782b20918d2466770f69c51b996f267b8620b4fcf8778cc41cf0b7b25db165319e783236e8b9029cab8d03b642c4d390027cc11c13e2f4b925623f77ceab2584cbb4a890753234d8b863299e266f52cc053343a2758ff4b231727570180e069a494793d266049b70776a34f541a00e19640edae67e13f47266e9d4592089c301b2c261a5b535bd77a2f5926cc511e4a37c5335f0f66722c64c847fa9892a7daf85f206147347b4f2ca4d7aa4b3b1dd7117661bd96890eb6ebba9bd3105cb5893c11fd750b5d74535daaba153a6cba5d8a4f4a6abd65cb2bf18d7595b3a69acf1561e2253a8823e3555c88c2bc87904cf168337632cb43fae0a5ec798c6a8e94adabbaf07a2549be7ae09d0bb733f2b573a9785fadae4f879ca617ac5b66cb7774869c84208d861f862376b497a443397232f8e51183a669cf7178e685400babbe39a586725025aa1bfe3c1dceb865d8ca820f6518baea922805e6b5104c698d7430fc7009eaa6f43f6298123781769336607a758304afe5b848d52eca82303eafeafec81cfe44505c8d9e8e744c27bb66c0bb6441f4fccb7bc5dc8c74719391d94d27e7611f05fb796f098398f1c3d643d4d3e590bf3bff908f962805db80deed957316395c8d785063f717e9eb16b0f21feeb5f8985d5dde813d318627016de9ff0ceb6f54f6da8a53c5afbdec4e18956353391d2f5588cb74557e016f3d663b6bfb6aef948548a11385e22a40d4af2391d1cb9718f1b36a3c82e3f2b0fcac8105c22d05d1b135ed153be40c1e9cb7c30575d2661fa80800adf8f71d1512c4f98e3b78b53d4eea39f6e0d833489171254e43183c9b9107b7a749a550cb6dcc5a7c8b28375f225a88c557a04c03b322f08080ccf781b7e7c44bddbeee4dd58f7bba83e800142d799d8983395a18bb31657bfbc0074c49d6a680841b7827a57377b149c2b865428852ae5fbef2699d53e40e874e40606b2812a1c70a04785a676bbc12fa46d976427634deea4206bc161edb44dbf779a4b4e6eda9891f851b32dc183a4a085370d78d38a70a83a57238321c5e1b52e1805ba3d24e5d4165c64778b6c59b6d997e812ca31fa1b91f474fdd9d2991f3fd4a70023de6953fe0c910c12106dc280b6b4f5d2452bd50ac0e86fbcb707f92d1fda2c363aaef8ba7eeb219a52baf5a8903fd648970b57ead62042c2c056e44f8372e8f25706d43c2dd3f1de03fbe3d85590be755b301d84281e075d2db38d687e7be019f71b207187a28a88d04a0597ea13d0a3a007562318747c2739f956ca67dfdeb1670087966c3796a0b016e102df665d4e39d53d3deff6ff58617627da2f76b8e3863700a5bf71284e17e9039e655ab8babb3ff8c7a0c91c8e53196fef5bf2f8a4b63a86d73446c011da460d93bc90041857b1dd5474182f2987d7b3f041fec9c6ac41b7b16364b855a04c03b57ddfacbac55e64f043c0a1c4b9c565aa8980f10c3cb247c3afd34e550b362ee81769ad4fa54cf805590bc2fb0d6fe7485694ad09b56d8e5511af78607b7dfd389ac88f5891268dcd9bf83166cde48dfb012ce72b9077225bc149d702797f402c941d94115089bad177200d0eeabd6d62f38c3486939a5b1d4ef02e637ffe10a88bcd5d33d847ed1a3cf3e2d1e5f6bbf0286a2eb03321d8a75f581d6feec54d2bb90b6f4cbefa3500bd8e9c8ae233e09a134ae0c1e88ed1e41ab59ec80ae4ec19ffd8030e5d9af73be7de79204ad7612f0ce1af7686aa14d610a874b4cce31aa2c6f5cb90e84bdc129a4aae8fcddabad22116f80c6a1f4457abab8343b5b35e1828d719afb29b785196a1b590da94521a780f09b92b6595faa6ca7c62e46e230d1eb0e44efae0e2a39511c0f292baadc92355c877d8374559c886dd569fbdf52e45df78378a5d97d578a4c13e5230ac154e44f5a43e653cda3203739db074ce25d313e72915bc1916c0bf13b99b98bf24c3a441728aa487b77273322d7cad4e2427e96e89a278952bf5bebce56b792b3082a80387e2c0f26bf56e8e458cebaf5c2ffea2b5bb9b0caec7a22addb6c304d0ae920dc643832652e4af5ca076c61c362ad1b04bf206030a022202cc8b985d6a95dfe20a298e1c7eee6267497a507f4b32ed954f7ddcdd3d4a8cdfaeae13bd827295b732916fd2384a30eb5ea6aeed9a488e6521d1975d344eaaf3f4b9dd8d8d8ed1baafd6b33127c2beefcd79de22b77520b9b4f9243d46b3b348df8c444d8ef00765aa7981b816fa5523ab48a05e5a59276e2039b59bb961e7a0553e53ae371d0f961489421f0b4a210a618a55f629e4eb0fcb02a355809ad3d83d53261f57a6d42023eb6d7fb8fa1f042eefca70c68e70e3e6cf72b9e0b3357e3f9d63f5a4c8c4e323f730cdb6cb7e1f386368b1c60901f094ae608e9e5436c54c3a1ad6a079171a433cdde6dde8aeb4a45cf6ffa8fe42b36e5ffe649d72f1be375dd4390fc26f5853d65d13420a208582caac30d927e313ba4216a85972c1344d40364097a561add86146843c9557fcbe73fb4f669de1d2662cc6708fc6e6bbcd82874900d529505db0b37b67e9ed730ed9a5f77d5581e0184addff28f63bef3aa4dafd3fa91497406f1dfa4dff386805c2a6e71484cba84de64594526198e4e175f3728f715133d83f8e0d4764f52b56089c6bc71e26bf58aff193a5bcffb1d505dc606e28eea42b30989e0c4b1746bc9b86233e089b131b04ce1104cacb11a6d98d83a42c56f8cc2e04cc7267909c1ded82824b74310c7d819f16365b9cbc61790f7df01b0eb63f09eb4ab0a1c7d475c0f830a9c460303fff45f4b78d0c58403d0c2bc35d3fb53e02d7b5e710b51f2ae4abf850e920f90acc7b7918f0b705f10be5ecc3813b6af67b4472adb80116c128ef827096581769637de54bdec035a38188dbee08aba825f95329653f13872293aecd63d295754253b3cd7d89fcaa0e9737008d4d379c19a6575ced8b5d85598b2426301d3e54151d3c5b44daced71629702969aa3bfe39bdc88dde834cf78b90538dbb0dd683156f8cb25be258e9d5338619faa8c8d6961be11956549ccd3ba32893d59ee2a39d4f6def51bf83e6c300e90513457e458c9ccce50b69ee665a5727e7eccb9a773271c9ce3e5a07e5ca619bc99f5b1a5585bf90aa5067660e36b76f2952eb1ac9b8e25f6bd5847a05379be04fe78df4841bad7f0efed6912b481abdd2aa34312674b0ccb8792c8ee4ac9eda40b125dc54e03b9a3244971fff7959cdbbf5d581c0195709d2d6d47d5d40ebff9ffb87b09b44475a4bddfa936492aa7121ca20bc09f8245de0ac56ed5ad506ccae8fc33af94b9f7705c7ae0f8f64bad810387050f1de304ea0dfbecfaac58fcbcbcb91bb16c55b9168e09cc78d5b1168d6b75b8c921b003e5854c54f1a8a02d96462e45e2433c8eae49c396557c37b2af37f8c98e111640b0a1f9243d77216a0583cea362302ab49bbde8a1799a969f7fd99deedbc2bd2311f46a45edfec5dc9a7694e0f62a6b07f012323756dfe56cd62d7c60a63057743365740293b041327dd52318f45fa51805ba6ecdb2690bdcf1e5882911f88e9be73d9b9e83804d5ae51fef12cfd44898d3f1009b89cd23f1125c4f22249d68f51c09dd143716878c7bdc6f48bb0c9f491ba74aea8f31e391ca9645bc7f09a9a3c11d8ea52e3a19ec6347f09e5fa1cdfda45015166183f810f1d97b0cc45b5c7189ff68eb3f08b5aa79b9163db477d22a2ec68e0c590c3b5024c5213b9248a4340ed47b0d27b0ed3fd56df62f3a29b6e399387684c71ae28c04d470859a077f786687e98e373fefa7bb830b718a28778c0e8957d279d52963cd0757b4e4b403ef68e86ad613dc329835197c5dd2769e4601fa293abda704feb84b53fc114c22372caf38c0d5a917470b81ba09c908ee690a99af41d64de3ca70d6c44e51c956840d21b3ad39e3789c2e253c6c82dbc55dec9edc820428f2ccd8b2d99685f7f0e57bb8927ef730e7df8a070df47a7f96729a237f3df8a38d7a21a98d1ce44a32950774eeea3d09efe88f43758dfe39e09a92ae87a059afe5f717078b0205abad9884361904612a719d1c0336405bc814ff95d27067e2d5a49169d711333f4ae76f589b0d63e067cc3450dc402bf0d6be49f1ee7db1565157ff5b7779b6cfbc6f95ed5ea74b321887ac7501071f1a54ffefd5e068e18482ed71aa42891a8f6d2d619a0976527ed2d2e52087230921396d1a7e72b5e2abc4f2c004aad2467e827983cb4d4f1be25dd59a44e69036404edad181f0458e3d0d5cc77e034a481ae0489f0b04bdecb8f8b8e94e3e79267e7c7df142f6c32d48cf82f775cc14182e40fed75257e3c980c9058d426d92cfc1f1ffe1f7aef0e85edd9cbd0d0767b424d2f4c9d80f2512ee39d50a4f45c1817c8a6238507641a15449e5e0cd186d87868dd5c8d72e4d0a20a709cb17061a5bd74d43808984d1a3d2851c83f96b265bddc3bd310972e6a87d6961206dd91fcd40de940317a2869c94c3f897ca9699bf3499797f668093abeb703ebb474c15d9579cb913e6027509cf2a287886f00dcc7b77c588ef3dcca8ea3a2c672bc1803e9161985b282816cf5eb923f6aa42c2b551c66d7ceef97fdc929804c72efbda0c6f356513bc42d11636c4ead96eb46c2b3ebfc641586a7e7cce2db4184b8974d571916d572963d637c2e15c86f0a5f35ddb826ce5d9acccd6097a68b711f129e68fcd87ffd17c91a17184c7bed89669a41ce4282c90306fc6927524a83ec71030bc133cff638750fc60d10345e11394134ad20f6f5a04237b84cce513060a84f0624ceac267b3b051331373e27ef09d9f52c832bf391c03c9d3b964a68a0760a1db7436575488b0de4b0be483cafbf5041773749b78068cc4a684ab88da402497f915330c2eee20ed5ad16855c2d34f1b8405353d49ff06d73440c7457cbc3168948f775b5a60a4ae7d8ecb963e3df4c08878d1f0f7358bf6362bee74d3eb6db38b0f0f5f6a6babd62dea985f3fa7b1aac9decb5271648e032e", 0x1000, 0x44, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x12, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x195, 0x281) 03:38:08 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4002, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xa73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000040)=""/146, &(0x7f0000000100)=0x92) 03:38:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, {0x1, 0x7, 0x200, 0x80000001}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x4000000001, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = msgget$private(0x0, 0x81) msgctl$IPC_INFO(r5, 0x3, &(0x7f00000001c0)=""/175) connect(r2, &(0x7f0000987ff4)=@generic={0x5, "48a8dd35766ed1c59b6a650ceb4b84ed0202bb27ca20dc1297ed4c5e0b25b135bde3228d6956b0e4b2291fecfa30f3bf28eee621497d44e4822625dbf2f4424203cef20003f784402d4b9ceb36ba03cbcf0ebaf5adcbfae5c4a63dbcbba1214496b4cad39c98bc2ac6d05e4b4f2b345bf938899c61bb17c512a2644a554c"}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1315.773808][ T9028] binder: 9025:9028 transaction failed 29189/-22, size 40-8 line 2994 03:38:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x196, 0x281) 03:38:08 executing program 2: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'hsr0\x00', 0xff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:08 executing program 4: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x5, 0x7, 0x100000001}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) get_robust_list(r3, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) [ 1315.862767][ T9028] binder: 9025:9028 ioctl c0306201 20008000 returned -14 03:38:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e4, &(0x7f00000000c0)="a8e00d8b6579a047c7aa25cedd0b3a7cf94194649d7f5cdc2f2768c785bfc21ba2d85c50c3c1b0a2180f2c51c180ce41082218deaf396f5e0a349f1d7ce8927dd220ba2ec2b90a6daba24c058f76dffd1696476ba5e0ac5580094683f2b155e66d5d2e5735f750e8424ffe45c59dd9ed69363e2b23c920dc123565dbf91b2f786e140f2d8b71bfd0ca00db04c58ae4d76b21119fc369683df0a7ddce1c0e951e37ce38e9208ec111950a69b9370e149a528dda8807882c215e81") 03:38:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x48, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:08 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x9, 0x4) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x4c0080) socket$inet6(0xa, 0x805, 0xd91) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bind(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x0, 0x1, 0x2, 0x4}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x1ff, 0x0, 0xc497, 0x907}, 0x14) 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x197, 0x281) 03:38:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040)="5703bf66721fa6dc26edb69d27ff2ec5209b7708ae978481323e28258f55af0816a8d7120937834537116d107870cf5eda4c31ea332af938058f58e156e21b2c3d04bd55c20e31b334cc0a66ed76a22ed499c2c3dd7c5bcf319808a44ce5d08bb83c08992910775b0febd37ef79c64196b78aaa107782e9eecfd1cafb20773fcfe2a4f4cb9b64a164237fac43a1b7e271cbc814679e8a38f8f8f7e1978f5922c60", &(0x7f0000000100)="4210a94769bea1795320c997de01481c133150ebf09bcd87aaa4a8faede71181a50ab1e882f121d9682524983118aa367f40ab7c8de874b68d71e04a9fbca386073db2bbe43315e6667ff92ba52dff797014837051be8fa9da41d836fdcb2b9acc17483006f3e97bb2ced20074d25300a59ee7ef4ddf5120735ffba4938d5a7c0ef30459fd7da2295d27062e3c453a601170a8d5813ac98dc63dacd519eb32a1f5fd06bff636fb328bacab3898dd7d443aa1126ce633d9d33651fab70744a156d86c5ebf8a1fd0fc47e757382bde9dfc4bd2af5aa75c09739637da", 0x2}, 0x20) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000280)={0x0, r1}) syz_extract_tcp_res(&(0x7f00000002c0), 0x3, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x2, 0x9, 0x0, 0xee3c, 0x2, r1, 0x8}, 0x2c) 03:38:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = fcntl$getown(r0, 0x9) kcmp(r2, r3, 0x3, r0, r1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RCREATE(r4, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x10, 0x3, 0x6}, 0x3ff}}, 0x18) 03:38:09 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa00, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1316.155104][ T9061] binder: 9051:9061 transaction failed 29189/-22, size 40-8 line 2994 03:38:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200002, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x5, 0x0, [{0x0, 0x0, 0x80000000, 0x6, 0x80000001}, {0xf, 0xffffffff, 0xd0b3, 0xd95, 0x1}, {0x8000000b, 0xe27d, 0x2d, 0x9, 0x1ff}, {0x80000000, 0x5, 0x2, 0x2, 0xe4f}, {0x0, 0x4, 0x5, 0xd91, 0x8001}]}) [ 1316.223015][ T9061] binder: 9051:9061 ioctl c0306201 20008000 returned -14 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x198, 0x281) 03:38:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x100000001, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4c, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x20}, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0x4) 03:38:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x10001, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x0, 0x989680}) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000240)={0x17, 0x4, 0x70000}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x6, 0x2, 0x7, 0x3}) 03:38:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000080)) 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x199, 0x281) 03:38:09 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) fcntl$getflags(r0, 0x401) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000540)=@ax25, 0x80, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x16, 0x100000000401, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x4, 0x0, @binary}]}, 0x18}}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x4, 0x4c00) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xaf6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x7, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'yam0\x00\x00\x00\x00\x04\xff\xff\xff\xff\xa0\x01\x00', 0x400}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) close(0xffffffffffffffff) syz_execute_func(&(0x7f0000000200)="fe4b00c422a93f0d4e160000c401fd5b690026660d0d00c44185f59ffaffffff26360f18a9a20000002e4492c40111e2fd400f56b0cd300000c482a9b897116b23ab") open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x25) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/3, 0x3) [ 1316.433583][ T9083] binder: 9080:9083 transaction failed 29189/-22, size 40-8 line 2994 03:38:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000540)={'NETMAP\x00'}, &(0x7f0000000580)=0x1e) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x7, 0x100000001, 0x2, 'syz1\x00', 0xfff}, 0x1, [0x8e1, 0x80, 0x2, 0x0, 0x3, 0xaea, 0xffffffffffffed40, 0x0, 0x0, 0x0, 0x2, 0x6, 0xfffffffffffffffb, 0x0, 0x100000001, 0x8, 0x9, 0x9, 0x7, 0x400000000000000, 0x9, 0xfff, 0xfffffffeffffffff, 0x7f, 0x10000, 0xe6, 0x7, 0x80000001, 0xeda, 0xfffffffffffffffa, 0x7, 0x81, 0x1, 0x7, 0x40, 0xfffffffffffffff8, 0x1, 0x3f, 0x2, 0x0, 0x17333b34, 0x4, 0x8a, 0x10001, 0x5, 0x1000, 0x1c1b4dda, 0xfffffffffffffffb, 0x4, 0x8, 0xff, 0x40, 0x4, 0x400, 0xffffffffffffffe1, 0x0, 0x3, 0x9, 0x1, 0x9, 0x2, 0x6, 0xd09, 0x5, 0xee, 0x7ff, 0x10001, 0x1dae2000000, 0x80000001, 0xffff, 0x3, 0x5, 0xac50, 0xfffffffffffffffb, 0xf312, 0x4, 0x1, 0x81, 0x6, 0x5773, 0x0, 0x58b, 0x3, 0x100, 0x0, 0x9b5, 0x0, 0x7, 0x18620c1c, 0x1f, 0x5, 0x6, 0xffffffff, 0x47, 0xdb, 0x4, 0x100000001, 0xffff, 0x0, 0x2, 0x3, 0x1, 0x4, 0x70a, 0x7f, 0x20, 0x20c, 0x0, 0x8, 0x1, 0x2, 0x4, 0x1, 0x0, 0xcbd, 0xfffffffeffffffff, 0x7, 0x9, 0x5, 0x100, 0x5, 0x80, 0x1, 0x98b3, 0xfa, 0x1, 0x0, 0x7fffffff], {0x77359400}}) [ 1316.475674][ T9083] binder: 9080:9083 ioctl c0306201 20008000 returned -14 03:38:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x60, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19a, 0x281) 03:38:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x200100, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) pwrite64(r0, &(0x7f0000000600)="f3e4a267475401f9e7f2c0692b3a97575482abd748abde43e92005663200677cec767e2bd7a7bcf87f271438c58994dd583abefab715c21a2772bf", 0x3b, 0x400000000020) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x100, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000000080)={0x18, 0x0, 0x6, {0xffff}}, 0x18) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x2b}, @in=@loopback, 0x4e21, 0x7, 0x4e20, 0x6, 0xa, 0xa0, 0x20, 0x29, r5, r6}, {0xc25, 0xe37, 0x0, 0x9, 0x3, 0xc1d, 0x2, 0x401}, {0x2, 0x800, 0x7, 0xfff}, 0x1, 0x6e6bb2, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4}, 0xa, @in6=@ipv4={[], [], @empty}, 0x34ff, 0x7, 0x0, 0x2a, 0x8e4, 0x2, 0x8}}, 0xe8) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x1, 0x8, 0x7}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x3) 03:38:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8001, 0x8) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) [ 1316.676718][ T9101] binder: 9100:9101 transaction failed 29189/-22, size 40-8 line 2994 03:38:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) r2 = eventfd(0x205) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xb398, 0x60000) r4 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0xffffffffffff8001, 0x80800) io_submit(r1, 0x3, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffff81cc91d9, r0, &(0x7f0000000080)="3a54b5fd7fbf8282346bf0da572fc673a12c91cfd935463c6f6da4b637af2adee7799de5ab0f6eae325c1f3c316a7198bb0324edd192791e0e627d13d91eb059b218f4dc226a28ebd66938dc72a74cc726e810ce63717acc3ab8096ca9cd4483ebe99aa42148e0c2ea8fb063ac9c82f44955a804164054322e608f24299b8ffefd47c76b5b94d52e98eb6229ac805fb2a662fa9003e5b323bd4ffe500430d90b958a80591c166e6f22b0917cf4540126b619395cab503e9b0caa4f58da98a185a2599fcb3eb1692b414700d060a15e83", 0xd0, 0x5, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfff, r0, &(0x7f00000001c0)="12141d490abda005b08f5a6636fcee2629e0ce5cee57a5b751331022a7b07b42983d1227fa842e8222c6f81da0e29ca10bb86582c8e1fbd26eceedece2a851938f2ec993722a695a0d752559030d425e76232e5c4016fdcc", 0x58, 0x823, 0x0, 0x3, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f00000002c0)="5009f5be618db5bd242e19f884350e8b9ae5893b43dbec006049e67070e1d2fa1fea774b15c9794a5272babab89fc176659279b46e82ea75903342ec7ba417805e7034c3ee54cc70de50d26caba721301c6ae3156148d16bfbd8b827d56ebed060b0428e9fab6825044069eabf89500155f13d14d8a138f02181fbaf6a97eaff62a264cbe3312a5cb1c870c3619f8f73c993a5298359cad0dc176b4c522dff60469fc93192a7fbdce0504cc52abe0123effaaa592ee57f6ea91f7f231651ef4b390be2271199bce2b8c4c3243a023aac8785ac4486e6501d978455aa38ba6369eb66ba31d04e41e0bf05452cac2d90", 0xef, 0x40, 0x0, 0x3, r4}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19b, 0x281) [ 1316.773718][ T9101] binder: 9100:9101 ioctl c0306201 20008000 returned -14 03:38:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000002c0)={@local, @multicast1, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:09 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={r1, 0x7, &(0x7f0000000040)=[0x3f8000, 0x4a2, 0xfffffffffffffffc, 0x75dcdeb7, 0x1, 0x7fff, 0x1], &(0x7f0000000080)=[0x1000, 0x6300000000000000, 0x1, 0xffff], 0x4, 0x1, 0x9, &(0x7f00000000c0)=[0x40], &(0x7f0000000100)=[0x10000]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19c, 0x281) 03:38:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x68, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xc3, "8bb7dc1e6eb4de76a2c99ae6d469f097ef9538b69d88c068d1432ae9c4ec5878e9e9bd42d453ac06152b69af5c5805223de0e4020c3d16e3251f8ad569f2e464b01b373fc7c3d58e58e98e4bd1cb19abbd4460ce09aaa8adfb5b43f3b6ea0e9fdca18758262cb21b640217dca4992235a234bf8f3bb0a090104cb0dfd299a004c56224a3287c3fc2c7ff8e63c1f166b9bb33635029909eefc7e53af0908c63a276392496bd35404439e1c7d065b8a8c2416dde6344b7e2628ea74725679633f4a725c1"}, &(0x7f0000000100)=0xcb) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) 03:38:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19d, 0x281) 03:38:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() ioprio_set$pid(0x1, r2, 0xffff) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) 03:38:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'nlmon0\x00', {0x2, 0x4e20, @local}}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x8, "e6216f774697eb07d4aba20f050c9642484ecafdbaee56891016e9b79676f3f3", 0x1, 0xff, 0x7, 0xc000c, 0x10000, 0x2}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa0080, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000080)="bb5df3454ab7761e87541880b5675a66c692be51fb179c108c8d6feb53f3f095b83ad82905b69f9902ce9c69775f503f771401d8eda1b62d94013689f9e358aceb9d247fc755d3332267d49e23ac20b6610839875f9fcfec728b2162eca19f197f258eba", 0x64) [ 1317.094151][ T9131] binder: 9127:9131 ioctl c0306201 20008000 returned -14 [ 1317.129261][ T9131] binder: 9127:9131 ioctl c0306201 20008000 returned -14 03:38:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6c, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:10 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19e, 0x281) [ 1317.307898][ T9154] binder: 9152:9154 ioctl c0306201 20008000 returned -14 03:38:10 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x208, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @local, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb61532b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x351}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4004) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x2, {0x9fa, 0x5, 0x200, 0x9, 0x3, 0xc718}, 0x80000000, 0x9}, 0xe) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x74, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='bridge0\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) r2 = dup(r0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000440)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x8001}, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@local, @broadcast, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@deltfilter={0x12c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, r3, {0x8, 0xa}, {0xa}, {0xf, 0x2}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0xfc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x10001, 0x17cf}, {0x7df, 0x9, 0x9f}, 0x77, 0x3, 0x3}}, @TCA_RSVP_ACT={0xd0, 0x6, @m_bpf={0xcc, 0x14, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x5}]}, {0xb0, 0x6, "2e1ce22195734fa7581dafd3becc626e21ef9e5d99ce14989bcf7c45681f379697d9b2d91f080d15780c05a63eabc4374ed0aa557282c69019cb3df7bedc3b745396c8b568dfbcd700984ddb85854e7063aeff901ef2a8ecdc827408f090b21dae52904e9371fc749643b74946b32d0577998230b87eb8f49195cb5b0939d2c37eb197d884d8d34761394a140d0e3a8a3d2991a19039899b145783fd21dca64f6c7741977035670d19b6"}}}}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0) 03:38:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x19f, 0x281) 03:38:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2004, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e23, @loopback}}) 03:38:10 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'sit0\x00', 0x94e5}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0xa) [ 1317.477366][ T9168] binder: 9167:9168 ioctl c0306201 20008000 returned -14 03:38:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7a, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffff312d, 0x0) 03:38:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4200, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 03:38:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x80045438, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a0, 0x281) [ 1317.665192][ T9184] binder: 9183:9184 ioctl c0306201 20008000 returned -14 03:38:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x300, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket(0x1d, 0x80f, 0xffb) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'gretap0\x00'}}, 0x1e) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x450000, 0x0) r2 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @bcast, r2}) 03:38:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a1, 0x281) [ 1317.877888][ T9200] binder: 9199:9200 ioctl c0306201 20008000 returned -14 03:38:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) clone(0x802902001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x3) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) accept4$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x80000) msgget(0x1, 0x0) 03:38:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@access={'/usr/lib/telepathy/mission-control-5', 0x20, '/usr/sbin/ntpd', 0x20, 0x100000001}, 0x49) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x2, "a95a16959e3ed383"}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1b) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="00000000060000000000000000000000000000000000000000000000edacbd3abb50221d9475f4608e1cf03254d56b3fde4fe34213d8dedc7cc129fabe30b0cf2bc0b55d023f6445011072726d927b03c84928a30b81cc603bbedbfaf16fc823a418d1ab41671ff567498f683da50800009a070000000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x1000) 03:38:10 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x80}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8) 03:38:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='wlan0GPLkeyringsecurity#lo(\x00', 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="72501443e9abec26705a98a893763ccd28a1f723464414984ac8dd63fa8ae4c8f2ae7b4b3f8bfef7c1e1518eb2bd272ea2390f2c40b64b4b16e0988617888df98893d8f8d07c4dbc53a112b34dc9645cb726821637a038859acaaaa02b1397b81c0ba68411598a11fc579bf6d8a4bbf9445c958e11f0b708a5ec1b5d583a2bd4156283ea8278613fcd8df9c43ecd2308b8edc5623472be992d8bb1bc00359088462fc98e7206ace20079366a592f1d6e", 0xb0, r1) r2 = getuid() syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x8, &(0x7f0000000680)=[{&(0x7f0000000280)="d83944e53497fc73838576164727e542acbaca57dc76ae", 0x17, 0x7fff}, {&(0x7f00000002c0)="30e82d9454d5790f3366c7598b3880d08bb572671610fcb3260818f6b7933bb8e356fb3f55df53436566f47400282d455483591b0e1952f948c36a77e86e15a600f8e8aacb6b3491a720016164942c26eaa39027adf930d5653fd212c026ba395222b6b24f538add090b1bc6952939b6ca3a74020d4789bc99826c0dcb7d", 0x7e, 0x1000}, {&(0x7f0000000340)="47dba4255f17e0d903000413366851ffb07481dad83bf58dbe89457147cc9ca72cb0", 0x22, 0x200}, {&(0x7f0000000380)="e1e1889b34de0bdb0197d1ad60addd12d13896e9b86ac7ede6447879a5704bf1e0497693cd96ce7f635015c887648dd8421660ab2fdd711510fe5dc5d063cd9205e5f106015071c5d3bebbdb1ab41302fd3c3b417c99be02dc7524280d6472acab07cc667c6ec7bac1d7924e4087e417f8bb9a1e12833cd77b690afa7de6a40ac755d8fd73c97f338f956b246f7159eccd22f87114dcde11b519f234aea0a4f8bac9fc5a1ef2b9d5c33a7090d4e37135b970c03410b8635ec765eab9f636870f7657c403a1534266c34249ab60d9ee50", 0xd0, 0x640}, {&(0x7f0000000480)="b4508e937b3202949ce9f9c603d5e982f4a6f2caba09aaff51c5a939dc48973d5b2677051fc913ff4190da754fb864eafaaf26711f12fe6c93449c6a6e932231605f206759c0124a6e0143e88736741500cd281a35efe834d490c397285f072cd85cb94aa51c2526c9fbc60f7e9d28303a408c096c2a42cd", 0x78, 0x7d4}, {&(0x7f0000000500)="9be5ba605d5990b1e682e19eb0cb28fcbead4becd7c7497e5cdefacdb3a8f582d478141e3a874c194ce853f82dc115115520e8effbedd471f74ef649d6bc51661c2c2444aa99a6bd3b35f0b6176387b2df88d28d0f9e75695158802f4f73f1605f99e49dd081bce737c17c557ef92572da8d824fcc37184607ba36dbc46b77f0b45c486be358ffa7ba60bfc887e7c9", 0x8f, 0x10001}, {&(0x7f00000005c0)="a1e704364d1621ccdc6d4b3157f8829b0f78ae5b5863165fca28d57b6253cb6de4816b7ff9133465f1ab94150bb31c0135ecdba1eeae9a50416d96c1056c91481e8cad958cf6dad1291f48255185d340371802384321651b428f1763f1c2712776bc7ad3742239a105d94d0bcb69074ce46f3f9158f3f6d86dadb6", 0x7b, 0xc07a}, {&(0x7f0000000640)="719948af8e95626a95e04cdb424ae37c2f5910adba2a7ee6b6298a61f85156f39179dfe725cee002ef", 0x29, 0x3}], 0x4000, &(0x7f0000000740)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "407c3e12"}}, {@session={'session', 0x3d, 0x6}}, {@part={'part', 0x3d, 0xfffffffffffffffa}}, {@nodecompose='nodecompose'}, {@nobarrier='nobarrier'}, {@decompose='decompose'}, {@force='force'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@dont_appraise='dont_appraise'}]}) 03:38:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x500, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x20800000020006, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a2, 0x281) [ 1318.086452][ T9219] binder: 9217:9219 ioctl c0306201 20008000 returned -14 03:38:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x600, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1318.147076][ T9232] hfsplus: unable to parse mount options 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a3, 0x281) 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) 03:38:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffc, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x90000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x9, 0x8208, 0x2, 0x128d, 0x7, 0x2, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1318.329502][ T9247] binder: 9244:9247 ioctl c0306201 20008000 returned -14 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a4, 0x281) 03:38:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x700, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:11 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERROR(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000702000e002f6465762f61646d6d69646923000121ab17dee766b235b4a03bff20417231a56171c5bfb14c1b00677d8bec5bab1c65ce2ac19a46bbc11503c391f5e07ccbe790d5ad8d6e6d919a42ba14930dac28be8311bacc8041517f30173bb1222661c03a257d33605554794553d0eb825d772998340948cabf117294c47c4747dbc4db2319c3885db0566629f7416655d8fab2b91dcf31481e84a9df6100ed26390480b9a97faea2abfef32d64f7aaa07ace50c0f87f059f7c40a2638d389ee949a02d68f308c668f04359d40065a85ecbb2e9c026278ef25a7ae4615438fb3943151638f5e61f32de4775eb0bd8a774"], 0x17) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x20200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x6b0b8c97}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x9, 0x3}, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xffff) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'gre0\x00', 0x240000}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) [ 1318.561668][ T9269] binder: 9261:9269 ioctl c0306201 20008000 returned -14 03:38:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x103000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @empty}, {0x306, @local}, 0x20, {0x2, 0x4e24, @remote}, 'irlan0\x00'}) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x32) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a5, 0x281) 03:38:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa08c0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x1200, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0xffffffffffffffff) 03:38:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xdcc, 0x28000) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a6, 0x281) 03:38:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1318.770252][ T9288] binder: 9278:9288 ioctl c0306201 20008000 returned -14 03:38:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r0, &(0x7f0000003480)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @rand_addr="c94777172f0d1d80af409369996a3b0c", 0x6}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="f720521cf71f08dbda78bba1d0ba6956ea54407d84de4868b64bdf944e275a1029d1718a361e8e574cd31b51615aac825b1f4e3a9db1cfe94e715b7d54967fa0328bffa22deabadc8e824521b1945a594801d33120bb65c505a00de717a8fbef43572fc1c7f1902aef61797ef12d1a", 0x6f}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="cc5f7ae5fe5d41526b368188b0fc9aa61368de75ac81b493a668568cf2aaf88d1a4f41a19a1068a2d999b38d058e57ec84cc1850ffe1a412d6416e6f2354a480cf44012f0937b05f33e0106bcff8d388779a07c9b091e2a780c239fc115bcbdd9db68aeaf3dc7fb4bd427665f922c250de36cafc3ebda37a99", 0x79}], 0x5, &(0x7f0000003200)=[{0xf8, 0x117, 0x0, "6d866f6b0219fd3fe17f8d7a98df039b4eaa4e424892c9c97da1e3c0c68d31e085bed0d95f31064d32d47a119f2b6c61f38780e9f127d7e301c87c2c88f1a4ad0e6448e68c33228f87c5a021053a6666f401ce7c1bfe54a48941e6f6c371885f8b7cdf62d1fc47a370fc1c37b8c03e7d4814c7220d39244803ef4996fd891a8a6348407c514489401373313b591ea545ec2753b09be15ad2f1f4f4742ce9b66e10123093b350ae3ba98922e7d3d7140f7eabc3b825706e4d05ceb9f5945c693445cae3da379a8912c2ebdb15d10020c9164c90a92197065d1d69c6bfc802557e17cd64"}, {0xb0, 0x107, 0x40, "90e52150536a8b4ba4e58abb377a909c342f6661b8187d38f0973b40bdd359950e749de23bffa017acaee5773259b32a27310bc387272e1031e2c0ac4f556126f2e69d035c90566caf7c75256477c047dc5615ea3ff4148bd329bc76f62b72fec7a2e2bc6d9fdb7dc7bd6b92766856796bb5bfa00065b8db0218396ce413a8dbc9caf4dd26e8d2b1517bca5d10d7178788d2be7a1a46776da77e55875911ac3f"}, {0x50, 0x1ff, 0x3, "25c66e6ca68b520fe6427dc196150fe049c3ebe291ffdb078b0dcf31a205dd904bb4d83198de32bfe40ac2d43dc6e961c527648092a02d689d7403de"}, {0x70, 0x108, 0xf27, "1d31ac7085483c6c49b6e9257f23f091c73bad60cf64d0e2536ee7792a98ae55e2c277cf71fddabb191fa272769dd6850dbcfd0734996a4af484b8c9ef8509b233d3298e47b6ae27c33b5aaae96b07d5e2f20caee86daa9f2c"}], 0x268}, 0x4000080) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1318.819773][ T9288] binder: 9278:9288 ioctl c0306201 20008000 returned -14 03:38:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x2000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a7, 0x281) 03:38:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) 03:38:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/52, 0x34, 0x2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="2f6e0b39b1085ee819699e736891a3c06dbe72a7ebf2f676f65b3cd5c86f66a2b1c608b443c68a76c31de5c31faacf7d98836c4337b35e3eb56ba28f94d3bcb80634f681720ebd52491dbcbcb82d9b58c4256b59cf5174b22e3e9d9a2ee71b1437868d03c3a0ea7ee5232aacede95c1287b46eb2a17ec3c64b6ddd689d8d3858a2a00b37468cd47719a168cfb38fcd1e8010bd0bbe9b07fcbe3cc172c45e1d0d0e8ead0dab04a03a4184ae9986e611e6f0271081a5cb4be98d1dc5c10e3b83f932466bac2b573e3944f81c1632fa01e31f6c3d6c0808a7a2dd96041bd44008e704e82fa717186282d58ff0969446e1380044b7a86d7dfc693390910f46074885c88759aedbf503f693e16277f34615addf83e8518c82f3e146909237a871d96e807f31066b683a3e51ba3660ef8cf7c453072d32ab842ce04fbdd09ee0eedc189b1d2d4ba437a08478baeb5c3914825f63052823e56ab85ecd186d7cb538333ad504c7cee707ef5dfbcf6c058d37ad84047bdf610329484949970dead215774e6d0199d006da79fd0a6084155e84ac6b37ea16f6431f344984d2f7b45d79ddb8f9eee46c2c75e9740be1d6f6332a16074a87d47b65a8d9debe2f27d6f597286096dd1730852f81aa11d125b0c228ca307c77fef82f9d9d6d37aeafc22a3b9185f765ef96ec35c0cfbc7d0381ad987a9dc7d88442c6d6d4dd2cd9043eb4e0deb86950e430f3365f02510d381a5d8a9853f055713ebc70d8894dea62105ed6fe045f57f6f70bd4b46d80933a11a549ba008823d3b7730ec0fe475779cfb4b91fabe1baba969b070b94b3daf21c1ae47513f21ae1e79d78a52026b587b53d869eb1cd6f3ed92b4453d2c76b8bd60e58f8a1f948acb3c1de7de5b938a43474f4d95f4b0d2f23288da00b662f5a2c95a29210d2d945d08365192f68adf019e91b3db39f2d6c890500717e67408eb0e1f8d2a2de6547b4bda12718b3a97b05dd4f3e4e8dd78a981b5026bf02e9dc15bf51aaaf140590b9ae49f6cd17ef3ac33efb806dd088af45850415b70ea07e6351f8591296b471ad31f4317e0c7eefc8e0caa6892b75e62f4667101562da728b24c6c6cfdf7ad189fc3e20ec1f17ce4755e183cb995c029d96fba91c816900950a60ba1d709cc4feffb277910485af0f51ad30bfe8b7cbebd0d690968d37ee0d1696f21ff09862281398713e2544e9382363693e9a4cc9bddda06e3902892c7bfb53337e35b6c0cb5c1f26996359a23448e8c678202a4f181bfb1ccf9fef9894c16cb82c66783fdba7556eefc937cd3b1a72ba2e2d0025ea0824ea91e95309292d6b7aa1b9c75152f4bd5f3e96d4bd44e81533a7a7a5342fbbadff23e720ae093c8bd343c96d398dc163996f570fd4ae2a37a018b1add596932846002e9b049948eb66b757e77ef364b94d99890654dcdc2fb153007a219d231b693d5fe27423f2f7d2f01000f04bd71f46cf4589b067224c265dadf7aa57b97de832be44c8906f201100439855313b3369e1ca312c2bd09be5b1836032b133bf81330f08065da8cc4af8986cfa92c1a4b3bd709176a3eef54e5c70d4c9565f729ac34b5d5e47c2bcb65a940c8b852db52abb2364998b51fa5793d62badcca0108da62d9d6b477d03e84f9cf4e2c226dcf9632718be4c4ee0189ae6210edbe3b3ea21cabb53e81f9085ad480fe7c262ad441046710847afcc1c4810f7a17c96488f26aa22abcc9ce1b62cf05358f50d3993b85b8c5523fe15ea1f50f990621b626f009fb13c6a51bd4773f1f77e59fcac57aeae1eb5edb4859f05e5c47084f4d537b4da18b736d5aed18fb8482ede3e4a331ce6dbe75172314660c89a980b9bfede49b8219e70b9cdfc3b633db059a0b04b0021f908068cef8de288f3ddda3551ea788249957d232aad7b66f40e64a5653d8db2fed0e7274e55756d7e9c40fad2ba1697e21c9a69b5c42dd6425dc5947f5fbada1aa4b42846874fb796aa2180d7d2ac2524faa3eb0c17c82f9b2aac7e17a2912bddadbcf4adc3d10767dfb299b772879b1626d5e341000833494a217454f10f65b4f4774b89cf20fa11ccc463d1e6469a73ec049ae34a51fed1c3fe9cbce1f2804c56f4b46359d7573f6b73f1290933a7f4211690b742519790d438b7895139376ded56dc0ceb757317e1877de63d4102b747e2592f2758cd361665415314ce89975ca04b08567834ec77ea8c3d6d1b3c95e524dc467410cd02275a6f356e35588cd0c9a85ae5ade839d44481e7b1799c259250f1f2a7e4c907e6419483ea747fd62571add57daef68791317f0fa39d702622c2dffa3f65755dca746040a1009f484a3fe78f137125809917437db11dfea3ab14d43a46cbe70cc8e655eab99ddd514fcb3fd1bd9a28614c5d6b004bb199323a55893fa55b3e01faa1574c74e21811b914ca319d71dcfc9fa9940e183d6cc4fbb73402e3632d8697f97a8d8d0aab33fe3efff176217dac9d630f29630f90eb94d3f89db3f5cc3902924feb8d314b66416ff6a8512872a66bb8eba1aa1cf58a550ce762b934845bd94434c2f784b20bfef6ae7577384f6fb3adadd179bef03564f981023546cc8de284241ff5c9a891b9e33ac765c5095e6443bcdf350de794f62287efced7a56792d0f1d9965f97511347d690f88da83a8bda17cc38c48c360cfa207f6436f62566d07cb32b8a79587894f3255a08ff0e6966723f8a5a223eb9030de3ca76afd5da3ac78e7dd21706a93704611ccebec5e7fd3740623be673cf73f5ed4d248f36c5f2c3a98dfdb0691a62a4deb413dada42f47311630bc535ab22ca8f5e73b33ac23428f3c8f357117924fdbc529bfad8a818d04c39b22ea6d6ea4b16b9a5bca7581c7ab1ba8fec3da88881bb6eba5dabeb9b49c2722847723c24b1f7b08472bcc8df0dddb010d0e902a196b783b445501f3d151b0991f79f1098d9f9c77609126d4f6a8fc3f90a4629185ddbda8c863800d3ae2e529dbdc9a8499b7c18fd55de971bcc0e196c7ad4ebd32e726442ee86ee10b62f1a9816de346c76fde8c5c4bf9fcc2d2b9ac25ce8d7580377f798236d0ff20eeacf681f5e7c54db6835280a2768d99be075e3e7f208615ef291b3af831a5b2178071af8a9579b29ac46e6d5a4067c8121b4e1110ce57d48739b43ab206845016647fe23d32cf95ce4432a71a54fa235151202540f7493b2dd0183f44d5106b1d911c79602254e5f438739a7c2befd0289e917047e7116bc08b1e2070805c41cc56354c2269331c82717adbb574d42e8bda58a39008706554e688d8012655cee251b1dd4cca037a37a1ab03add499acaa226b4c4f6de0f8a501a4522a7767c78cd9e54e49e1a21b610d1a6c688ca50be3b5f9e04fe399ef2eca58aa4c09683bd772a0ef7d0e1d335e8a7e99dc8ca23d3adb3cca415d5e3e2ed353834776c4c9da7e98bf7c0e1585a38bdc42605f2341204b377fad842b61b412d3f866f6a24b9d1ee5d77dd158f512dca361b42530b34b7d89f6b0cf02d2c2139ef20607f1d49b9e640181d0605fcada9916811f1e4f92df0c0569b68201eb6ec4338da0bc1e2bf6f34410e1381767c53b059ce8818942fac28ce3f392aaf7b1145ff8fc0f53d64c4cf8ad4f26603092c4019cdfbc86eaac314bedc88380f7d3af187fd4cc0544bc96abfe5235195b4c21cc743468e50b718722f4ef19df3f5151588e2f51ae60455555a9be0292644f5d6ec7bc3f02e335d8b928d279bdd25ca2e51b22413123063a7114023eb96a37017476da0a4606d87fbf8fa71778ab89ced39bd05e03fdc3eab6cb4aeafdca9643f4ba2c6d6dc61a0f4d121d93e3434c544fc26d9a06265a17141a222de33343f821e1d8b3633d23e683263b14302b66fb8bd0953093a4e50ee7ea078662a15e7fdaec02dac49e47b4329ef750a7cf446ccff7804ffcec896101fd2f0438954def76aa1b4a7a257a25627496f727408300333732aa9919c49a4d125db62d6f662e7ea050b4117f246d6db6f513bd99e4cd8618113fc2fb5a8e7e7ebd5e51c53a7ab97d7a081d6664e1e7a3478d52e9638b6691849f768617eae75559c50e17a2fbcd747e0f7a3cf1b59d4ccb19c32d726fddff13fe0b691871fb225bef0c2f4d285869ff50dd1b7bb9da798477839fe30f129adc98fc97c8b5cc8983115f1a469d6ca8357d082669103a14bc438fff7ef86e7c11e3fa47ab58593eb43904e05db8ccdc67697dbc203a6707b4114cad8bee343b4a148ad5de135381336e72ba99f0d81872d26b7ee1bf50453835b54604d1b751a0dcb53326f72040a48d0423ab86cd1f1ad1703824091e962890c84b6936567d5c66e7890b41a343cd9c09f3e3f4b46877e5f61693bb5b0c25207840fe68348692355fbfd325ef3e2754de88330b5ea53660c2a2075fe82500bf49b0996e086a2998240459a8f2c8db5ef5181479185f231de2714894deeaf7f4cccf3c02e4c983c1e5c689fa62dc732b5a65f1840cadabaad8a79a646fc3b5ece6dfde65a83d26049589a227a82cae9dc2cfb1af734703b1a46e2efbaaab936240b06baf2b9bf9d3dd4d7bbec9f8274ea7df5cedb01abb24c7201064712ba8720b519342d3ef1da89c83f6914e69366d8b83bf00650e45901b63559d930aa8bc0a0c896d8ca86686d03f69988a9b2026004b8a099bd3cf1e92df4274194dd497c05087eb492ab91107ca5f381340b40bc40c339b183f20cf940b7f9e77de57fdb760ef7fc559991b9aeb258b95529297d1c6b0d944376166c3976405c4d69ecf2412e4f2f2eee5234d4c03095d1739395497a0001823a4a3bd9e39bc2d99b0029f782857b04b09bc37a70b95b72c91155422edaab3458d95310a23e7b167f020c54f2377ac1ded7ea6233618e31d1207a2115a87d31235436b0a7b89daffa9f177364b284107e68a47bc5906410460a179f3ac3923999b7410def318fb8511fa7c2a4f2adcd408b69defa21b86dd0aa4a15889ebbcc33feab4184dc11ad2d0b9fd6e82c1ab31a73227e4191217261bf7d65099e605c2257ead394f93ad36eeb0257f43f875bdc7b9564e279ba2dd76e9881e0944c7b09436dd2804b63fc75200b94ffa77c66243aba5722ed31fbb4cdab85151b788483bf48a7caa75d0dd8847edd6a8782af51426a9fa8e94566953a2f2cfa9b2120db0556b714511af75b7f184bdce067d748a9c3cc8efdcffeb35c9f6837cdcb02830ffd2db6256a1dc5d1966528b1231558add4514300325d8bcceb8f84a821cd27ea010ad832e3de3dc6bc83b8f62e20caa5947b4b36e52b64e9f199bbf63776425c8fb805137f138f93d60a6069102a75b713aaac965f56eb06c506dae4bd8888ee16e385401df3cc9f1847fbe3228d2c7d574563ff5edc960a389bf1e0618aef35ba046dfc3bdba886ca8420fb5820fa602bc28e8098bd475869f725cf40320e28ee976a2a8c75b4f824b1b50dd23e55920bad3c9532f7634dd8468505f861bf26f1efb0fb1ddb86756d731beee6ffecf0c33e4052510f103889367d0345bea13a6f5fc6e97d22b0123f37abae2dccb2eb82fbaa9585263817c0dc848e635ae342e97ac5757bb57e8ed2ae5f332364933dbeaf85707a944742ed0172bdf5992cc5e64b929f4e9c4a7d0e1adfb4d610205cbec13b6d045772d20f3684ba78696a067f78170d10802b8ee1731f36fbe81205d7ff7261854925e4d505e50c9e6803c9c7b6e928acde59f75ab83e55a69b6072514a441372ef1446c02def791545e2622dfefe01ae597cae7e9d4e76f0", 0x1000, 0xfffffffffffffffc) 03:38:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1319.037292][ T9306] binder: 9305:9306 ioctl c0306201 20008000 returned -14 03:38:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4800, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='\x00', 0x1, 0x1) 03:38:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a8, 0x281) 03:38:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) uname(&(0x7f0000000000)=""/5) 03:38:12 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101800, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c2aad0a", @ANYRES16=r1, @ANYBLOB="050029bd7000fedbdf250100000008000100000000000c00050001000000000000000c00050000000000000000000c00080008000000000000000c0008003f000000000000000c000800cf0a000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0x0, 0xf75, 0x9, 0x332a, 0x3fffffff8000, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1a9, 0x281) [ 1319.270759][ T9321] binder: 9320:9321 ioctl c0306201 20008000 returned -14 03:38:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 03:38:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4c00, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 5: r0 = semget(0x0, 0x1, 0x8099f180e2a25ff9) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/193) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40100, 0x0) write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "c4727c4f8badc10ff271f1de8876105dbedfb9742f9a88fc69fab4f022a065f9752622b8c7fb5512d6414002e53683b637a7f762ed933ce3be1fc42fc74689669236244d646d5550d5710f1f7fe8e34a6b6b6abe9a045998a6a0b891f09355067eb17d4252270f88874af529732fdd30afafe4cc65fa0585b06d87caf78dd5a17fedf4be506b48e31c3d626e7c204ffa6bf6ea031d54231a49e577818c6be3cc6b5d25a42bd62e7d802f61db61193d9128555b3ce614369d00e4659ae482fbf2f0e149c5156023f3fba5b67dfda2f39ba109eb"}, 0xe3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x40100) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) 03:38:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1aa, 0x281) [ 1319.499522][ T9350] binder_transaction: 13 callbacks suppressed [ 1319.499541][ T9350] binder: 9344:9350 transaction failed 29189/-22, size 40-8 line 2994 03:38:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000040)=0x4000001fffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) 03:38:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) times(&(0x7f0000000000)) 03:38:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x80, 0x104) connect$vsock_stream(r1, &(0x7f00000001c0), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x82, 0x0) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f00000002c0)="ddf3e6d272f2c4d2650275dc9272c8686667d24a001a4f85a28a4393ad13021dcc469093b4db922fff99688aaf5c980c9631c6091e6829fa6076b1baba445f7aa2cc0cda2ccc7db8a010d32291f42f987f4e1541365262226d8a4986e731552a70201b7139997f370ce5cac96e5612fc85a796c448d931313f91b750152c0f18cb82bd6b6b98e56951e75fac1eabc1c5f440b168370dee3c40bd72bdf70e88e057dd0cbcb1ad48eeaf864d86ff33") getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @bcast}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @default]}, &(0x7f0000000280)=0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000003c0)={@loopback, 0x100, 0x2, 0x3, 0xf, 0x2, 0x7}, &(0x7f0000000400)=0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = fcntl$getown(r0, 0x9) fcntl$setownex(r2, 0xf, &(0x7f0000000380)={0x3, r4}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 1319.619904][ T9350] binder: 9344:9350 ioctl c0306201 20008000 returned -14 [ 1319.659929][ T9360] Unknown ioctl 21521 03:38:12 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$tipc(0x1e, 0x7, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x101002) syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'vcan0\x00', 0x400}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x3) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0x51, ""/81}) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f0000000140)=@srh={0xff, 0x2, 0x4, 0x1, 0x1, 0x40, 0x3fe000000000000, [@remote]}, 0xb6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x3, 0x7ff, 0x3, 0x4}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x97, 0xffffffdffffffff7, 0x200, 0x4, 0x13, 0x5, 0x7c, 0x599895d, 0xfffffffffffffffc, 0x8cc, 0x100000001, 0x10000}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'lo\x00', 0x400}) 03:38:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1319.693767][ T9360] Unknown ioctl -2147204316 [ 1319.710921][ T9367] Unknown ioctl 21521 03:38:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ab, 0x281) [ 1319.744699][ T9360] Unknown ioctl -2147204316 03:38:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x100000001) 03:38:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000002080)={0x3, 0x0, 0x2080, {0xd000, 0x10000, 0x2}, [], "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", "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"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000054c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00000000e5002500000000000002000100000000be000000020000627c05000500000000000a00000000731f65000000ff170000000000f690b9a7008807a4cbadbed30200"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001000000530b2000000000ffffac1414b206000102"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1319.841877][ T9378] binder: 9372:9378 transaction failed 29189/-22, size 40-8 line 2994 [ 1319.875763][ T9378] binder: 9372:9378 ioctl c0306201 20008000 returned -14 03:38:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ac, 0x281) 03:38:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x422502) 03:38:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='veth0\x00') sysinfo(&(0x7f0000000280)=""/4096) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/109, 0x6d, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x101000) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x43, 0x0, 0xfff, 0xffffffffffffff01]}) pwrite64(r0, &(0x7f0000001280)="e0eb77de7835e32c12426d48399386ed323c814cb79315e59b15bccb866f58dcaaa8ebe61ab0527524f0a1f5f5f2a85c256fd45b8c29d51764fc3845099072fe06839446378ee829d86b3b9e16a2d529a9488fe7112fbcad16056588fa726a9c4568819952d8d1386d18640ab54db6376c4a28ce0a7d65f6cb4db5f9492e9f367fc91bcdfa977905f6491f8a31c57b63b5ae868c4a0785d2f7a4", 0x9a, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101000, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') 03:38:12 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6800, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x0) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @bcast, @bcast, @null, @null, @default]}, &(0x7f00000000c0)=0x48, 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f00000003c0)=0xe8) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r7 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x4}, [{0x2, 0x0, r2}, {0x2, 0x6, r3}], {0x4, 0x6}, [{0x8, 0x4, r4}, {0x8, 0x5, r5}, {0x8, 0x4, r6}, {0x8, 0x7, r7}], {}, {0x20, 0x4}}, 0x54, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x80000001, 0x0, {0x7, 0x803, 0x5, 0x7fffffff}}) 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ad, 0x281) [ 1320.078480][ T9402] binder: 9395:9402 transaction failed 29189/-22, size 40-8 line 2994 03:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) accept(r0, &(0x7f0000000200)=@can={0x1d, 0x0}, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@empty, @loopback, @mcast2, 0x657, 0x2, 0x8, 0x500, 0x80000000, 0x20000, r2}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc42, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) 03:38:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0xc0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xa271}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xab}, &(0x7f0000000100)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@local, @local, 0x0, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}]}, 0x1c) 03:38:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x8000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/158) [ 1320.133774][ T9402] binder: 9395:9402 ioctl c0306201 20008000 returned -14 [ 1320.160639][ T9402] binder: 9395:9402 transaction failed 29189/-22, size 40-8 line 2994 [ 1320.222103][ T9402] binder: 9395:9402 ioctl c0306201 20008000 returned -14 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ae, 0x281) 03:38:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6c00, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:13 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x8}, &(0x7f0000000100)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000000000000006, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) ioctl$sock_ifreq(r2, 0x8927, &(0x7f0000000180)={'hwsim0\x00', @ifru_flags=0x6500}) 03:38:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1af, 0x281) 03:38:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x203, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, 0xfffffffffffffffe, 0x44000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000480)={0xa7, &(0x7f00000003c0)="a1c495740effa9b8f5f71d77a37464b2106a55b5b47a0356e25847675a79282a0b8fda73cfb873a393b9fc39f0af4facfe437b0b79df7142dd9d5ddc66b74c20a1238f4124e4c23a0c9121d9907efcf7701894cc9fb132d6be8e14de7620d58111904acffb63d47f948e55e921cc52bc981dd5998993a3b2f87064255250ed3fcc3d0c3de67ed191200dfe64191cc6b0a0134316bfc670c6977d603d368484dd46145c562a2e0b"}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000008c0)="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") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x81}, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xaf, "9511051a051444758a8238336d2c6160028a0c0d749b3a52b466f6c482168148824e098a21fe03d09142964be2a5f51c33f3fd07552bc7e28f06291fb59d7fd742fd84b138070c2829942c66fe241c4bac266871de0546f4f5611cc1bbc7c963c5d7c67b736addfab3d3640b2d469514448600e95acdbd13b9eae3b397d691f887eb6b0caa53a7bef73d252e9a5d2c7c09c57256a6e9d854a20f0fb7194be84ccc8d49fd3c0992325e7955f5cd49f1"}, &(0x7f0000000180)=0xb7) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYBLOB="0500d600d01deb42754dcd3353ad26e03b5eeeda4e48c013c3346c3ddf0d558fc13b3faf94fc563d007f10b52d0268cc44dca5007997971792bab2f504dafb67c4746d65f152cfd46a9d9a7939c2dc10e6a4795f4aeea61c6f973688ef800c0420c44e8fd4b39132854bf94d04583b9822040000000000000003b9715618689919a4e805388379be9d6b430de064ae04baac6ab15307d6bafd5017b1e4b359cc1e209671cece11426f14d090f1f32ac9590fb30233afd836c76888e252487fdb82cb3ea479005ac428af0d0fc5d00928f2211f815e245433c2bd35eb7a0dfd5d8492f568365ff23a6a0639484723d45b032a2596febd65399a4c81df1aaafc5fb3ef5a9cd10fe3de8c741a270a20ed2e36fa577712937312575c67bdcdf57c36c518758fe67c999ef7efea6275e80e18adbb491edb051a53f5d1b6216043b1155bdae2ed54b36935ee25e95c60ed7185528b6b1b77a0e5363e92b39b3f40797f0d25ed01b38604b24af16bfba48088b3fc3890944f1ae00c9da64dfa8d3a82b10b7909b821a4ba03be9e3ba612a3b3ddace10b"], 0xde) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) [ 1320.401375][ T9431] binder: 9423:9431 transaction failed 29189/-22, size 40-8 line 2994 [ 1320.426156][ T9431] binder: 9423:9431 ioctl c0306201 20008000 returned -14 03:38:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7400, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x5) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x7}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x81}, &(0x7f0000000180)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getgroups(0x5, &(0x7f0000000200)=[0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xee01]) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) r6 = getegid() r7 = getegid() r8 = getegid() r9 = getgid() r10 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000500", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="10000100000000002000040000000000"], 0x64, 0x2) 03:38:13 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1000000000002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b0, 0x281) 03:38:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1320.607524][ T9448] binder: 9442:9448 transaction failed 29189/-22, size 40-8 line 2994 [ 1320.636738][ T9448] binder: 9442:9448 ioctl c0306201 20008000 returned -14 03:38:13 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) fchdir(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) write$capi20(r1, &(0x7f0000000000)={0x10, 0x1, 0xca5a0ad559b5c95, 0x82, 0x6, 0x7}, 0x10) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/101) 03:38:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7a00, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b1, 0x281) 03:38:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) flistxattr(r0, &(0x7f0000000040)=""/184, 0xb8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="87c42102cb50bf0aaac237ff67ea3989335bf328b54b5125e19e6decb4b4c697d12b569642972fa32330b9bfb52c587dbf21125312891b2f0442b1421cf5183ac42f38baf01b57486eaee7587da8aa5b2afe3e65666bff1634a19021aabbeec9003a80c5c766c8172362725698d90ff4451946b031124dd55aeef5cf", 0x7c) 03:38:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = getuid() mount$9p_virtio(&(0x7f0000000000)='-$wlan0\\(\\$%\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f00000000c0)={'trans=virtio,', {[{@loose='loose'}, {@cache_none='cache=none'}, {@uname={'uname', 0x3d, 'em0eth1vmnet1)selinuxvmnet1'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@msize={'msize', 0x3d, 0x57cd}}, {@access_any='access=any'}], [{@audit='audit'}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x65, 0x77, 0x77, 0x62, 0x30, 0x77, 0x63], 0x2d, [0x3d, 0x32, 0x73, 0x63], 0x2d, [0x61, 0x63, 0x32, 0x33], 0x2d, [0x63, 0x76, 0x31], 0x2d, [0x62, 0x36, 0x0, 0x37, 0x3b, 0x63, 0x31, 0x76]}}}]}}) 03:38:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 1320.904913][ T9471] binder: 9465:9471 transaction failed 29189/-22, size 40-8 line 2994 [ 1320.925902][ T9471] binder: 9465:9471 ioctl c0306201 20008000 returned -14 03:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000007b00)='/dev/autofs\x00', 0x501000, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000007a40)) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, &(0x7f00000000c0)=""/149, 0x95}, 0x525}, {{&(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/77, 0x4d}], 0x3, &(0x7f0000000400)=""/56, 0x38}, 0x2}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/254, 0xfe}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/220, 0xdc}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x9, &(0x7f0000001b00)=""/4096, 0x1000}, 0x807}, {{&(0x7f0000002b00)=@rc, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/93, 0x5d}], 0x2, &(0x7f0000002d00)=""/221, 0xdd}, 0x8001}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002e00)}, {&(0x7f0000002e40)=""/15, 0xf}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000003ec0)=""/34, 0x22}, {&(0x7f0000003f00)=""/71, 0x47}, {&(0x7f0000003f80)=""/15, 0xf}, {&(0x7f0000003fc0)=""/240, 0xf0}, {&(0x7f00000040c0)=""/56, 0x38}, {&(0x7f0000004100)=""/225, 0xe1}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x7, &(0x7f0000005280)=""/187, 0xbb}, 0xff}, {{&(0x7f0000005340)=@nl, 0x80, &(0x7f00000054c0)=[{&(0x7f00000053c0)}, {&(0x7f0000005400)=""/180, 0xb4}], 0x2, &(0x7f0000005500)=""/135, 0x87}, 0x8}, {{&(0x7f00000055c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005640)=""/123, 0x7b}, {&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/154, 0x9a}, {&(0x7f0000006780)=""/155, 0x9b}, {&(0x7f0000006840)=""/119, 0x77}, {&(0x7f00000068c0)=""/58, 0x3a}], 0x6, &(0x7f0000006980)=""/17, 0x11}, 0x7fff}, {{&(0x7f00000069c0)=@alg, 0x80, &(0x7f0000006a40), 0x0, &(0x7f0000006a80)=""/129, 0x81}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006b40)=""/237, 0xed}, {&(0x7f0000006c40)=""/196, 0xc4}, {&(0x7f0000006d40)=""/88, 0x58}, {&(0x7f0000006dc0)=""/10, 0xa}, {&(0x7f0000006e00)=""/154, 0x9a}], 0x5, &(0x7f0000006f40)=""/185, 0xb9}, 0x9da}], 0xa, 0x40, &(0x7f0000007280)={0x77359400}) sendmsg$kcm(r2, &(0x7f00000079c0)={&(0x7f00000072c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000002e00)="99061e16f2bf03643573c6052c0a5289f78bdc7ab2ef81798f11fd5dae05e71980b1d37d1b52e99b80055f8ca41edc273f4068089c4a6b63f79daab5083516", 0x3f}, {&(0x7f0000007340)="7becffa857de0b11c0512082cf473e20c3cc083c6a0475d112a3a36ec04f1f89fbcde73aa9b23b3f89a6ce556eb923cd9a3e6b91c181df9cee694b5d40439589bdf70b0e38ef159f", 0x48}, {&(0x7f00000053c0)="ead061a4f0c24ac1ebe7b18140df3ca82459f9ce24343471e02e75a64d24bcc373ef99df9e0a90a6c42f5f40403e2a", 0x2f}, {&(0x7f00000073c0)="d37ea51962ac93cfa846651a548d3bb21eb6856ce50f32778302945e76c078776ba12cb1d0635a8c460df3c012e91daad2b26afdae91ff9218b7c6948b813affe2bf2092f4be0089d4a1f00af2db6d621e6575288b243afcb273c32fb7ac2242e684d8", 0x63}], 0x4, &(0x7f0000007440)=[{0x68, 0x113, 0xfffffffffffffffd, "2c006a1a9af31b8a1d468fbab184b5a6502423e21171862aea3b180dd030bd7aff2e70e3f2c69bb466568c29fb803d07e05ec635289de039b3297e2f75d8e2c5e8d19845e5c535dbc8dc1b2c555992f6ca11849fa5cb932c"}, {0xe0, 0x102, 0x1, "b059819f79afdbd6fc217b598af455f6fd99317f4fdd97ed371b0fc8811e289b8b7a5a59300cf79590cdc9cf58106ee10de4f288270d7029f3544ba396b654682f91b8b24468769b25a9b297cfd37a9bbb50e4b9e4b01e5675792d2f3a4a5494f73442ce3abf414b62498babb4c8e8e2a4ce47e690ed3553effff87538dac1700a9badfbc5e57864539e8ff161cd8c644fe9ec7fb1aae717f48d920d40903ccd238c1f904327961dab55e97f78ca4b6626ed293defe574ad19867b82a6a881c13287d1a1cec40bd2fd5fb4786de3fc13"}, {0xd8, 0x11f, 0x88dec6e, "ff6c3a40e8171f59c9c526dcdd7abffb4599a4156037aed05bcd3ba7d17436ba360a7a8d3cf036f724b75c8b5d4931859b192c458047d08ee7e7bd729bdc5a3b9317c0663abcb9e10cbe49beb237416e472586474293dabf32d41a739724c7c991aea8235d1ae88e4fc5e2bd9701d7f9eaf1ed88c3c17c578c3a93e9e282a0341f8b7d9ba6a4cc61a09654b5d653934323b82b69b3ae6834e89986054f1ea462c781ae5eedabc04c76942e2ad1519bad401624fd5a8e958ebeca6df31c2d14eb43e9bbcffbb128"}, {0x110, 0x88, 0x1, "ddf9d45c83ebd06da3116b67d29c229cfed0249bba3d81fd2b73ad12fdbca68a40e2c47b8fa15899adc2075290e5cf0161882ed8ab11ae7c73ac09d43e7849b94bd77215c0b950698f49aa7c7a9dd2ecfbafb43f097cc2cc16eb87ec2c861a86de59ed8cffc21a20323dc42dbb1ac430b30cfc1e0b1cfb37e47411b8f2d9e33a995a4de9031af56d0b8aeebe9694fc2940e06a6c0c776fa29b4e016fcd2a1b91db164e4deef1460240251af6d7869fa7aa43728c01739d5354aeb6ec73d6d89731b9bdfceb843bba99bba61d36f57b2ece9d138599c0a6fec4b562565e5f8c8570ac743686fa1be93fcae0d2c088a604ddd1ced742c20531b3687c05"}, {0xc8, 0x109, 0x4, "accf7ea362d9813e9dda4bf3123ba296422c1ccfec9c171c9b850541cc180a2ca872d5ed2b6c234ad77e1695db90bf41751abded4b51f8b35d7133514b75ad8a56f8c670013f1715cfb416ddd7f70259e84f6d15e43229f544e93813e9d9f12eeff06fe59d670993d407dcb9652b8e5ac3cdec1d92f13c9a9f16d7360093d3d0d41ce511010567bfc5a0e2a7d49b35012274bf323167cc39568f42c3e5f6cba3bb48cb6fd7f6d2e403e4529c56a48a3d24e86a"}, {0xd0, 0x3a, 0x4, "d688f3d3d202843a122152c9cd116baef220f7b8a4664879e27959547863c35355e555187380d8d2de29fa7b26281e3318cfd2506e896aaf228777d3978290f6ca5a9199be1a926c46515e886324c73b232f7519800d7015f817b0d5d1e0fd041f7bef51ff7715b556f2eb35c0fe4d87ef2b05b5edf4e9691b553e74e685be2cb9d9ea4ed703d8875b3f6e25c849b41c0c1a715eb284e272c305939ccccb9210b1347bed2956f27e814b04c617e1e7093784942fb0ec1be393af64c6395f47bf"}, {0x98, 0x10f, 0x1, "2269a1786064d93fe47f5190921ad644e0087fecba19e95cee518c0308dcaee1690b438bf17724ff4766875eb6f6c32258fe8ac3ac89e2a34c58451ba77eca6c910439bf47bdf59410cf09e7f84cca142bac08abc6fbdc2311ae1171d367a10fed51a1a4a3bec1f1cd88151b26d34ef62496b704348166bdc39771c990c9185ffe72"}], 0x560}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001980)={0x0, &(0x7f00000072c0)}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) setxattr$security_ima(&(0x7f0000007a00)='./file0\x00', &(0x7f0000007a80)='security.ima\x00', &(0x7f0000007ac0)=@v1={0x2, "d0d734b349ed15c61beb6290fa911bac"}, 0x11, 0x3) 03:38:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b2, 0x281) 03:38:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x1000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 1: r0 = semget(0x3, 0x3, 0x124) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/179) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x800003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b3, 0x281) [ 1321.126520][ T9494] binder: 9487:9494 transaction failed 29189/-22, size 40-8 line 2994 [ 1321.151790][ T9494] binder: 9487:9494 ioctl c0306201 20008000 returned -14 03:38:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x2000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) pause() accept4$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@default, @netrom, @netrom, @null, @remote, @remote, @default]}, &(0x7f00000000c0)=0x48, 0x80800) 03:38:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffff9c, 0xae47, 0xd000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x8, @capture={0x1000, 0x0, {0x7ff, 0x2}, 0xfffffffffffffffc, 0x6}}) 03:38:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b4, 0x281) 03:38:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400004, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1321.325672][ T9509] binder: 9503:9509 transaction failed 29189/-22, size 40-8 line 2994 [ 1321.354930][ T9509] binder: 9503:9509 ioctl c0306201 20008000 returned -14 03:38:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x3000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0xa1, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000000000, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}]}, 0xa8}}, 0x4000) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000600)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000003c0)={r4, 0x7ff, 0x7, [0xb669, 0x100, 0x6, 0x4e1e2ec3, 0x9, 0x5, 0x1ff]}, 0x16) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00000002c0)={r6}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc82b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x30, 0x9, 0x5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={r8, 0x22}, &(0x7f0000000100)=0x8) 03:38:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x410800, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x20, 0x4) ioctl$KDDISABIO(r2, 0x4b37) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x6, 0x4}, {0xff, 0x5f71}], r1}, 0x18, 0x1) 03:38:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b5, 0x281) 03:38:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1321.533924][ T9526] binder: 9522:9526 transaction failed 29189/-22, size 40-8 line 2994 [ 1321.574102][ T9526] binder: 9522:9526 ioctl c0306201 20008000 returned -14 03:38:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000040)="c9d81f79bb6116784b5d08450b83fff56485fcba840b434ce0592af4c4f3c4586258df6bb6", 0x25, 0x4004040, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) [ 1321.777548][ T9546] binder: 9540:9546 ioctl c0306201 20008000 returned -14 03:38:15 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:38:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b6, 0x281) 03:38:15 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x800) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)="8a0dccb7856ed026b7a5e5b9f6d1"}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8081) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) ioctl$TCSBRK(r0, 0x5409, 0x7fffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10100, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0xad, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x880) 03:38:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x5000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1322.212262][ T9554] binder: 9552:9554 ioctl c0306201 20008000 returned -14 03:38:15 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x21, 0x5, 0x0, 0xed8, 0x22}, &(0x7f0000000100)=0x98) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/enforce\x00', 0xc041, 0x0) sendmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000500)="592c5b35bf211991e6e2175593e1cb07f3c30bdd439ff2003499af031c5af51a4494bcb90d0fe9d243471e321a3ac98dd1ddcbc2e7acfacbc07bcbdb77ba5aa2f350d9856450851110849f364f5ee6cb763335f194c5a8fdd51ac0968fc0e745e58167307fd094b1c293f002eab42f1bcb4f5f7e5b22fecd6683a412ab32953148fcc8", 0x83}, {&(0x7f00000005c0)="70ef7035f5340e7e7095252e084fb121605cc12091e602cfd0669ae59e4f2b3eb2d8306ece6f359f71e5380a72894aa293bd5b65054b8c4e09f682e5be7c992de6ac05b80e46b9a1d7de3a71053df74ea0b18446bb69821388bdf202e9e2fff87fbef3f1c254a83a41de692922c864cd94dda68b6618c7f05d8f51485064d1d51cb53b6f3f039ef5924b33086500a368c164970fba3f2c78c1b0a4a4c572c20dd472d5a8814c6cd9bf121375dbbf919c9fa1bc396596cb28c4", 0xb9}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="f8233d6f951f898e0a194ea52f1f9309c4d1ceb8265bddd04f7fe12fb80a3d3448c4030d56c811d633ba23ac1e8921bd718115811817fe8fe31b9db238f17e530427a51983009dd716b0f040f401e2776dfb0a4dc4c549", 0x57}, {&(0x7f0000001740)="0a8afebf63afd009dfb8cfa0549f3a228321d50668887496376f9345ff34b9d189ec3c7de62e501168e3f03ec6ac4f759d32a091118bfae702ad46d37cde8082a88b927605000d78bda91217e69a2f090d1921d7dcfce4570bf742d5c01ff86c177e9c9bc478e2fdf304b4d1239decb06e8887ea9ce6f94d70d59498c396c142168a4c058b3a474883ad975100854eedf894ec969abdd74eca4f716f2b6959cbc4d73e2998bd2e803b78550c34c084592de5e67a79316a972b191d52d22bc5e0e078a0288c05d0bc55c3af1c97882811a7efb391a0b821038d7f651494c8b2597e49cb36e526c8b4f50d3b8e51fcfb19", 0xf0}], 0x6, 0x0, 0x0, 0x44095}, 0x40010) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) recvmmsg(r3, &(0x7f0000004000)=[{{&(0x7f0000001900)=@ax25={{}, [@null, @remote, @netrom, @remote, @remote, @null, @remote, @default]}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/194, 0xc2}, {&(0x7f0000001a80)=""/153, 0x99}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f0000001b40)=""/209, 0xd1}, {&(0x7f0000001c40)=""/205, 0xcd}], 0x5, &(0x7f0000001dc0)=""/59, 0x3b}, 0xbf0}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/232, 0xe8}], 0x1, &(0x7f0000001f40)=""/116, 0x74}, 0xfffffffffffffffd}, {{&(0x7f0000001fc0)=@nfc_llcp, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002040)=""/235, 0xeb}, {&(0x7f0000002140)=""/74, 0x4a}], 0x2}, 0x1}, {{&(0x7f0000002200)=@x25, 0x80, &(0x7f0000002400)=[{&(0x7f0000002280)=""/49, 0x31}, {&(0x7f00000022c0)=""/195, 0xc3}, {&(0x7f00000023c0)=""/59, 0x3b}], 0x3, &(0x7f0000002440)=""/234, 0xea}, 0xffff}, {{&(0x7f0000002540)=@tipc=@id, 0x80, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/251, 0xfb}, {&(0x7f00000026c0)=""/209, 0xd1}, {&(0x7f00000027c0)=""/106, 0x6a}], 0x3, &(0x7f0000002880)=""/239, 0xef}, 0xc}, {{&(0x7f0000002980)=@sco, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/197, 0xc5}], 0x1}}, {{&(0x7f0000002b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/75, 0x4b}, {&(0x7f0000002c40)=""/167, 0xa7}, {&(0x7f0000002d00)=""/122, 0x7a}], 0x3, &(0x7f0000002dc0)=""/145, 0x91}}, {{&(0x7f0000002e80)=@generic, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002f00)=""/131, 0x83}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x2}, 0xffffffffffffd0ee}], 0x8, 0x2000, &(0x7f0000004200)) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x1, 0x100000001, 0x17c0b40b, r1}, &(0x7f0000000180)=0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000, 0x0) write$P9_RWRITE(r5, &(0x7f0000000200)={0xb, 0x77, 0x1, 0xffffffffffffff00}, 0xb) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @local}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)='sit0\x00', 0x9, 0x94c, 0x270}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x80000001, 0x1, 0x7, 0x411c}, 0x6) 03:38:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b7, 0x281) 03:38:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/2, &(0x7f0000000180)=0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x7, "3d8f656102e5efa7b9ee7dedb7088f2053af3de25f8ac37eb17d3dce97c749cc", 0x1, 0x1}) 03:38:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/68, &(0x7f00000000c0)=0x44) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x5, 0x400, 0x2, 0x80, 0x0, 0x1000, 0x80, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x0, 0x7fff, 0x8, 0x1, 0x0, 0x4, 0x9, 0x200, 0x9, 0x2, 0x7fff, 0x3, 0x7, 0x80000000, 0x3, 0x20, 0x0, 0xfffffffffffffff9, 0x8, 0x6, 0x4, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x165}, 0x2400, 0x80000000, 0x9, 0x0, 0x2, 0x7fffffff, 0x9566}, r2, 0x0, r1, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000480)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 03:38:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/capi/capi20\x00', 0x7ff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1000, "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"}, &(0x7f0000001080)=0x1008) sendfile(r0, r1, &(0x7f0000000000), 0xffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000010c0)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x1}, &(0x7f0000001180)=0x90) [ 1322.478883][ T9578] binder: 9572:9578 ioctl c0306201 20008000 returned -14 03:38:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b8, 0x281) 03:38:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe94000000000000, 0x10000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x4, 0x4) 03:38:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1322.568513][ T9583] QAT: Invalid ioctl 03:38:15 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1322.606993][ T9586] QAT: Invalid ioctl 03:38:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3f, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="a3", @ANYRES16=r2, @ANYBLOB="190429bd7000fddbdf250a0000000800060000000000080005003d00000008000400000000000800050006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 03:38:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000080)=""/4096) [ 1322.676657][ T9592] binder: 9591:9592 ioctl c0306201 20008000 returned -14 03:38:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1b9, 0x281) 03:38:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x12000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffc, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x40) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r3 = getpgrp(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000140)={{0x5, 0x0, 0x3, 0x0, '\x00', 0xff}, 0x1, 0x20000400, 0x100, r3, 0x0, 0x81, 'syz1\x00', &(0x7f0000000100), 0x0, [], [0xf05e, 0x7, 0x80000001, 0x8000]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x69, 0xad, &(0x7f0000000280)="5b5ffe402c2cd62ef00d730c14635e6383dcce97a60d6708434d34e13626f3059d0eccabd5f5a675cef06b19b243eab2eec7b12ac5db6925d0679dd521e990e2b6d05415a08c4028cf5e9f3133f22eece15b1bea609a35de19e0a4bafdae9f8f23ce64a3302611feb0", &(0x7f0000000300)=""/173, 0x6}, 0x28) 03:38:15 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ba, 0x281) [ 1322.895698][ T9607] binder: 9605:9607 ioctl c0306201 20008000 returned -14 03:38:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8d, 0x2) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:38:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:38:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000001c0)={0xfffffffffffffffa, @bt={0x5c7e, 0x3, 0x0, 0x3, 0x2, 0x9, 0x8, 0xdd, 0x3, 0x800, 0x6, 0x9, 0x9, 0x101, 0x2, 0x9}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') 03:38:15 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0xc2) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x20000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x7, 0xffffffffffffffff, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff00000000}, @alu={0x7, 0x7, 0xb, 0x4, 0xa, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xf, 0x7, 0x7, 0x1, 0x14}, @call, @map={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xfa, &(0x7f00000000c0)=""/250, 0x0, 0x1, [], r2, 0x5}, 0x48) 03:38:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="24000000100007041dfffd946f6105000a0a0000fe00000000020800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1bb, 0x281) [ 1323.120989][ T9631] binder: 9627:9631 ioctl c0306201 20008000 returned -14 03:38:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x2ca3601b2a6e0fce, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x80000001, @local, 0x100}, 0x1c) r2 = geteuid() setuid(r2) 03:38:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0xb, @capture={0x1000, 0x1, {0xffff, 0xb0a9}, 0x0, 0x1}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x48000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1323.309153][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1bc, 0x281) 03:38:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x400000001, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1323.353086][ T9652] binder: 9648:9652 ioctl c0306201 20008000 returned -14 03:38:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4c000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xe) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xc14, 0x214000) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000280)={0x2, 0x92, "c5c51df7075c32a0852346bcd8f30e81b081f32472d9f6b6169440bd00151d00c3113a4b3108b05e42d2f447daaffa2be5084b2aec44d18089e313e199dc09a71fc2f58eb5008462205913967b2d3b7bf85f87d1972576d8eb6f36ff3c849243cf4cae726461f63efe32218baa1f3b46699e6d03f4e101b4234cf1781734d0fe698c69ed78d61fd0a4970000000000000000"}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000001c0)=0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="660f5bcfd33e0702b866bb64464361ce4487e4177fe88cb188c282f2194c698e196101a40d9faa781ececa77c69550417b52b6c3bb9e617313baf9ab89b2234c09a3ec54ea6073fe03072cbb4e9cae628b3207d8a650f312d2a3db9c59441a9282f910df71a270ae5b6acf2f474a65ba75308b037a58660a37a439286db0a9019bf1ec3d76e2ada50b6cb365236d40d54ff1fa6eea5179bbf38c778ec40b7878") prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) [ 1323.564882][ T9664] binder: 9662:9664 ioctl c0306201 20008000 returned -14 03:38:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1bd, 0x281) 03:38:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000012c0)='/dev/vcs#\x00', 0x5, 0x0) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=""/208, 0xd0}, 0x100) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) connect$inet(r1, &(0x7f0000001240)={0x2, 0x4e22, @multicast2}, 0x10) 03:38:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x60000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1323.856774][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:38:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x800004, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) getsockname(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0xfffffffffffffff3) 03:38:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1323.968556][ T9674] binder: 9673:9674 ioctl c0306201 20008000 returned -14 03:38:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x68000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f0000000180)=0x8) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x3}, &(0x7f0000000200)=0x8) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/39, &(0x7f0000000100)=0x27) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) accept4$netrom(r2, &(0x7f0000000280)={{0x3, @netrom}, [@remote, @bcast, @netrom, @bcast, @null, @remote, @netrom, @netrom]}, &(0x7f0000000300)=0x48, 0x80000) 03:38:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1be, 0x281) 03:38:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x45df, 0x4) 03:38:17 executing program 2: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000000)={0xb5e}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1324.149011][ T9690] binder: 9686:9690 ioctl c0306201 20008000 returned -14 03:38:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6c000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "db561390d145349c7a36dcd023f126c0e5ccffc8b3cec2a2d75bb41dea420da8031afc9b657fa0dd2744f9c63f680aec698fad692f20c35c9aec78a4fa9f6333355be6cc54f9f9f107379d6711e1269d23cee0e56ef6e020f2f051b20e045234bdb568e767c5c25adb37dbdf27347c9f0b75ed78d2b012eca058767712ac73ac3aee1a3bab3cc880cc69c40ea56b8d52bf5adaa331f26a75ba07f027107d5412490f6ee40e4a5573328f62489dd10213eab244ab9ca91406bbe46945390e20b43536405c"}, 0xc8) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffff9, 0x400002) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @local, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x4, 0x19, 0x2, 0xffff}, 0x35, 0x1, 0x0, 0x0, "b3b040543fa730c1695fd0245660a926f29292fd0e474d493742b266a5c07035e36cd02529a8474d1ec5a76333ec04dab8e0872b53d2fc141604453fe8fc9e0f"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1bf, 0x281) [ 1324.353831][ T9705] binder: 9702:9705 ioctl c0306201 20008000 returned -14 03:38:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 03:38:17 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={[], 0x3}, 0x9, 'erspan0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1ec00, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'caif0\x00', 0x1}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'ipddp0\x00', {0x2, 0x4e20, @broadcast}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:17 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c0, 0x281) 03:38:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x74000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c1, 0x281) [ 1324.882026][ T9722] binder_transaction: 11 callbacks suppressed [ 1324.882042][ T9722] binder: 9715:9722 transaction failed 29189/-22, size 40-8 line 2994 03:38:17 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x802, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd774764dd602a3c3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7ff) r3 = dup3(r2, r1, 0x1000000080000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7fffffff) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000700)={'team_slave_1\x00', 0x1, 0xfffffffffffeffff}) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @remote}, 0x2, 0x0, 0x0, 0x0, 0x100000000, &(0x7f00000000c0)='nlmon0\x00', 0x9, 0x9, 0x30f}) init_module(&(0x7f0000000180)='.GPL\x00', 0x5, &(0x7f00000001c0)='team_slave_1\x00') syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x0, 0x2) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) dup(r2) 03:38:17 executing program 2: r0 = shmget(0x1, 0x4000, 0x84, &(0x7f0000ffa000/0x4000)=nil) r1 = geteuid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000037c0)={0x0, 0x0, 0x0}, &(0x7f0000003800)=0xc) r5 = syz_open_dev$mice(&(0x7f0000003840)='/dev/input/mice\x00', 0x0, 0x480881) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000049c0)={&(0x7f0000005140)=ANY=[@ANYBLOB="9feb010018000000000000008c000000a4000000200000005927070173aa920ec89ba2f061dc74e4583c9f97dfe64a7c0a88c2c1fefddca6e8f5cbb2e1823ae82d34e86355b1cd368872b3612ab8db3d8232ceae5ae6da102d9b2b9296e88fb1dcde1f2f6a627d1fead869c59c3cde8d733563bd8881c84623ed6621bc2043155367b54fa2ad6be198819905b78a69c749e27b6c995b4e47f56f5aec3ed897f1117a0000003d5158f51cc5d7077f2f6204230d4076f33f52b4dde02e6375e155387131a1f806ce11e398771799f886e77159764feac854af6c4b84d5113c50ddd0c1ee4f8e832358b620605841a5cac447bdf3d9fb72bc4c2a5ee1ef20c058d9257fdc7e562018c0fb780b32b2023353d562fd9416c0816f915477e8362a3086aabdebe5d43043ca4a6067e4789ec9d7b4483587c43b4178c3b549d28d0566cad12fc8602b884f29d5c12e6434d338c98c20720fa90cef5710842058bd45f5528ef1072a2c1968a854974c55d48070f1fd7e42613542e1c2c49a1e18d8b9cb77d9b87499f3a8b68e7db011e7d58eaa352d65e28a4a8c005792567edadbc8a3d2a580ff59a470bcba20afaab5c5ce5b938a9cd7af167888b332fbba4a45b508ec333f00e434c3f7aee62ca7e2981f483335cae0dba8f7514a6381110368b3556d8a1d7e986e7f564c93967adbfe392c04edd84a29c3d2dd50ffae7b9fd1a4b2517410d3f4862ea31c6f8036cc3005f9e00ab744698bc41979bcf70f75919f39d60abc6ee0a1a0bb43ef38ccd9017c41a4bf5cbdcea9ca8beec4518c46a4fab9b51f0139f8d9177a32ac75489fb7ff6eebf1302b35ba0c99ed9639ce703f069a4201184a735e26c124922561b5546e07fed5ca47b1a8acabf2027b9f4dc97f127eb9992133c311b6c51a003ab5f8be034882617a3697f1845c77727cc3c958c89363624d45dffb5a37df050adf0494a3e055d74faeb48b4bcce8bcdb3d4bae5e0c7068bc061a78f5a79d0a6480e78294955f69a3bd6cb68b3ed1d393c89fb8625e879c802f7d556232e2e41a16baf21d1cb66c98eb31cacd9d4103f06719d7d01d166745d666152bd26cc485831e0107b774825149e7c58157fa50af9941125a31523b583c6f59d6fc12330fa86e1786aa30810b58a9f54f288f730edd15525a1166aeac4c51cd22410f24a9ceec6ebf017213db346a9663a4918e65686010d8946aceaf8256d2cd9566a16b807273596fa5ffad6033e0955279090e97e085f5b1bcc0b01be2eb77f553696017ec9256c6c7ef20e56e058a7a7b64d3c8ba5f88d5774ac2a6bee61b5a1ea6d6b097012154b3d672f752ce536abbff5ec725f9e732d25c027bc81c339f643411afbdbc9f5c8bb3caf148fb3ab942bb233c39b3f96d4ed4029665234409efe3bb69574aee90c36926cabc7eacf58961bff6de5dc5c39db6c63d5cee85ed4decb8b635756b5ab9ed165c4eeec85dce260fcb3926ed3bf67466850ddf746784a13347b9894590fb33160034c1a3397e2336785cc38410c7af1979d7ff41e3be094f0c16415647eab0d7701e2e1d22f08ac37a739ec03412450761620eb3d325c75a956d5af0e34bae373a476f4c898c7617fc20ab4a642c13e04e01ef24858b45e20f142229b40e798e59e56dd93b46dfb00412a64776c800e7fafde93837f0c3038bc7294a7905a37f7cb357d4b193ec1616b63144236dfd49d11d13f3e5901db5b2352cf8bcfc190eaa27730f351b0382da2ed03b59f5ade68d03ffc154ba7c711bfb3dfb7bcfc90a9988ea80bc7c6ca784c11fdd51f210af06c516b68bfb9340c38a823e1a9bed647bc8a7bb6da9282904649381dcc376f331d44495656832a6f64dcdbc4da49a31d33b991d463b186ad2ff1be7cc2c7c63945597f4861d993af06a7ae03b7d609b4b44a49d82e6af7068e3e65e6cae30863d854a0189e7760de17b7a5634b6638fef27e365ad24d4619ba8c88b431ea3eba7941d6c5ebc9c1e8514a6567ae5376c89435117b3f99922f8616e349062bbc6e02708afe95ff0ae9c73d2a8ba89a4345291618dc9c5552b649b9fbdb448b526d64f80ec3b52ff6c898a10a1e9221a5e7db1b3666cef9eb595382bdeb47cac35f0959e68629f7b1b6f6d84970248159355928d793cb88e442c7a841272c6916fc880a3459e63531d3e85e3749027650702d41981728b595a66bd72b510779d682c98fc4720a2bbd8e7c104ef0d8f8d673c2d0ffdd8218c6fe0a9473b0a21a63197f680a20d29f681c21cedabab3653461f13018c7de7dd8f194e303d7df1449df739ca92ea6f9f65a5dd4f41185ac58cd52b4da8d0b0f641460869b54ca81ce99cce9b4bea4f571c1a24ed58877635a31f683757eb82f2147a4899b71d2afeb144888434d6bc48a5393ab8b51e41392ce40f442a9f73226b213b3307ba00910597604435b3901feb98be8c8309637ff06d459b0979b169fc8c35d474cefd02695f6cd639f1b1d2aec9b762dfec2e0b061a5d6fd9af424f802e16b4fa5f023010913fcac46affbc190b55c5fe1815460e23205455d98a7a6ad370c906e18e71362515c8fe118f400c9092b62eb1298548909fa7326323259607b7fc5de4bb761a6a3cee64b85592a86b1da5c30ad42c40b982763d1f79d17b43e1f93f9ebbe16fe98e3da38aff28a01a9c8c5ad86a55bf669ff4383c1399a4ca395f2b048e4df76119c1b3110357ed8f14c5b659e6daf02536ece18602ba291b360cba8503d9caf9b75cbd7584bce37ff528d4357dc549f5e925071b852cb189209824644ec877b22f11ce12158104e79b9168be1e8f812c7bc6f25988f2ba936149cfa2ac4e27848bb2fac615cfef10338b4f5a05698cacb08489328ad4ca0f37ebf242a8f4eb2d230d5839a0f1ecf401be6e84043783a1f2cd9489bf2b20b4ab137946ce3c1c5ea30d8fa8d8f703f4e412b329fbeceee8d97c34edaf44d544bb706aab5e5e75dd2f080ad2de3f95038c4ffea6fa4fcbadf8b62b1c479abe23f03017899c44f5c05cc715a073960f0026558a6603c3e82e25b73b19e16c8e5e8c519cc276d3815763e614dbf7eb8065ce286dba91f68a2470179ad49d733897d74fd0d8001771e6a6d9fa0b7d847c4609e1b7f1d849f9ddfa44daa45214d631af32a6c5791bbc83c07b1077baebd28fd861b17f2adb9da3e1d7e17f0857c70d5051de10da082c4fc8c6b142b0a40cdf81b9d145d7506e8fbce29e7cb9294a37a9eba97959b6ad1431e55a457b300d04c7ed0a337cd4d9fa724eadcc5c0b12272808796f160acfe3e6278025a8abc4df402f1cddc6bea962faad864012d48439c959e0b02c644c5bbe126de5bf5e0e8da69b5d99b66479d34d09b84d215f6eabb887af01d60be00a78bc202bd960a613e8ee482dcfab671515b2a09f1add6a80ca2d3618d83ae8fdf623c9cb59edfd2015bb03c647be6320ff954938008ef338612c0d2930ac61c612d4d0ef6645de553c9a59a40441d1f45de4f874dcf8c75e3f498073d732562fa788cceccdf32e72befa0b111b39815b77f8b823105fb50bee046640cc213cb765b3e8e4d7f6e6dbd207abc5eacb2d633ca94db3fcdabf42eb3c3fd41fa24926ec795822389da93f607e21273fa2ac973a3900e0722cba2d9dec5159fbf487090b4160c24d60f3aeb890c6972910d1c82bed433515f4749b1001e4b8c418b3e51ab811fcdf4844f8ba8a6d457999de068ea2929de0a642583e0d536f69270bb3385aacd3d70c46e056fa1551276134176aec090b22a55a79961ed24f937e573204c622c1792b11790f2f31b8917f666124bd9b92290967287895917f8860d20878fc5a597c3ef117892468ce865424f6e8fa022ebc72846b0becf9eeb4caaf8436bf617be7e3a2ad595b51bbc45abc81e49c91e4428cd3af0f91c483345cbef8375745accfff8786570f8dbd2ba2e0acdd5cb1d43c36b4ca387921c924a32d181e187f446ac71eaa370ecf587206439b42fb266c124bb0bbcc44bb938f4f6b7c34999787e0edc1691a156e430096a0a19f2be7ff115b1b32ac2442c0dffa56a9189a7dff18b3702dc55a388ea36e920c9cc8cd43e13a8dbf29c78f353384cd5ada679c05eb8e729e6450357b78e39622bd073d93fa5831ef8b1ad95681433efbd5134e03b8a8e66c4d1a579ba8732f83975021e1d4e711d1d71dbdd854ee191dc69e90e99ce1578987e74049063761a9135907d2169d69ca772f3851bdcf82f4a14f0f17e05d119f49766cc41bebe288bf1fbd589fb0aefc9b567c6776c720043f48bd907a8cc5d43e02ca26b04185efa4981e58819fefeecc3664ca588546e5edae510fb835aa91c3ffd76112a517054a744827cc36b4eb9d65818d537d185ed5c4579e65ca6fc11a8150aa97f68f389d7150fc3ac9d1985f00f1404bab5b8b6ccd8e23a85e0f180c6c672efd1ecf754b62c06a7870d6a9ca6e9a990cc595d1af495f087ce21b00ebe3f52c2285ddc84e6271a8474b50c0ff57ffed0b3f7a95b9f452e86b7b604952ca400366520c6ae8184963f82d44f66d32d21cb45c59493ca94d012918dfcb5b4563377132f4a7bf583b718fde3a9597db56aa7012ea9903c02cdfdf5d7dc0c58d815fb3f2e6ece0aa5a32bd3ad6a8bd1cc50042721de74ee1e13783b02abe2bcd0f0de7dd2845c1dbdbe69ae2b53d69cf825286824afeebfef19a9672b778133505eb1e7c7b2fdfefdc0d813ca1b57dbcee8b2bc22a4ec4acf0300a6fe40d47ef2145e80ffefcfb66a99a2a397a7f52df05840655eec790e31d20fcc25029a7ecbe1de32b5739e71ea1cb595d2947912d368bd22a36ee8ecba62b32971a0db899c70ca05060d8cdd5b672532d9de745a776857b8e011262e6e9529508b56ad66d9bff84ace01ac0a0f3634487ad0d6d958b20febcfb250566186117695a0a51a6c0768a4768f61209ec2f3cb7d80993ea7a97bb3e8dcf0f5c5e27ff027d9fe6cc57cf8d0634a7a141532637114c08db9fe302a3f2edbc002eae13dba3a624c315b86e7372f6b53870c3b51e948201dce9a563fc00faeee452c477c8f16b3c24aa198889e72b5e57f2d10837003d2fa84c86c2baa1701c7eee06bd6a93dbea2cea8109760d4ae96d82048fe0b86b7f63c356970c08143d45b8f72426ef0db8821d06b5c68c44935fae3b9ebfebb01c5f0cb716a22a1044e7382d590004eeec47698f4931e9308163d6f27261e683b8723a271a89b8af359c24731b3dc3eeb86995510d7c0bc79e83b3e3231b67a1146bc8aee7aae0374de74fc39bc2539fba7ad4c3883ece324687c6d091d1ed132579ec66d96bc6fe17ac14d4f5723fcd3b1f18183f7111691158b8c4ec88179d1c9807db318104a57250c27df7e5b9620e089ced9cf329bfa2985a9fd31ba24955af5dd6d54992a640209a135696316ccacdbb325e8572eccefe60de4640201795f1a8b9471fc45456038702187b558a9a74812e1f83d1b065b5c002bc2aac39b4a08e50c7d921c4f7403b9906f1eac47c94f499ca4fb987400b77964c73d03d74354ed518209f9106db2d7788046f8c37108a30925149d2117664c45164f7d6921d59ef33c445ae96a1ba6ca935f5ba0c5b37f52d5406fce145f4caa7937f0f2a88b4aa9c46be9e55b74241976e1957636ad25781a1d3dfe66c9148012ae5911202191f6b891b1df9eb9b30e8b06095b375bcc0112df10328ecfacbbf40f8df1e9cf8e6eef5e46596ae3ffd6b630e932b1dab69c11bd39aae27bb99ea93e43e0fef225d8e8f566d4650a6c7355f3ca00550d5623cedaaa9109b2aebba170cbcb433c3cd3c4bb5aea4a607f3c9c1d7db5522c1b816a547c456d3a36dcf6f4ae291cf1c226f72a909c2b2bd9ba19f2d4f2ba25c8e7f76edfc679e64feaebe5f5e36734a2c098e05d804c30c5380f2d6cd3e6f243328dd98678372185122a28df974636fe123645981d24ea50d10d827b277033ad8de3a81b041718ce6562a3f6cc75644a57731e3e7b400008c92"], &(0x7f0000004940)=""/88, 0x10a6, 0x58, 0x1}, 0x20) r7 = getpgrp(0x0) getgroups(0x6, &(0x7f0000004a00)=[0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01]) r9 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000004a40)='/proc/self/attr/exec\x00', 0x2, 0x0) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000004a80)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = accept4(0xffffffffffffff9c, &(0x7f0000004ac0)=@sco, &(0x7f0000004b40)=0x80, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000004b80)={0x0, 0x0, 0xffffffffffffffff}) r13 = syz_open_dev$sndctrl(&(0x7f0000004bc0)='/dev/snd/controlC#\x00', 0x7, 0x0) r14 = accept4$ax25(0xffffffffffffffff, &(0x7f0000004c80)={{0x3, @null}, [@null, @netrom, @remote, @default, @bcast, @null, @rose]}, &(0x7f0000004d00)=0x48, 0x80000) r15 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000004d40), &(0x7f0000004dc0)=0x60) r16 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/video35\x00', 0x2, 0x0) r17 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r18 = getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004ec0)=0x0) stat(&(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000050c0)=[{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000400)="3fbccfa71c542805fd4f75380816e990ce135667584985c8032f975538c91586dd4a960073", 0x25}, {&(0x7f0000000440)="e7dc9223128ada9b636d066ae2e388025f2ecbc14b7b8aaab7b3f4faaef7ba3c4514fdbea23be30534ed1f689c0b39874b52d6f0370470b0c9d8693f7a22d26ddb68af8f530641efa623f1c466d5318fdaab8df2f6b6728480cf6cbd4df9037f3d1b26e8c03f1e68fd2f6faa3d7531517c33a58f6f25b3291f7e5fb4078a9b3230bee87551f379a54ec22714db8b2e138e95e40b7b5a9185b296bac687eeada66f26050a2fa73d6f73a11fa19739bc7236a0bd9ab99fea8de2587ab24706e7e871450a48639794511c1c4ae2a69f1429a9b919ce3f8d931d4bc7c7c42b4dda11d34bc423229482c38e4bd4a33413e208396ebfd2d50106638bee220437a689ad86240186b1fd46adb9e023d072b5d57e0f3c90d966b9a9e0a70c3e7264e039ef6e16e504ecd341d850ab31517efef62fc7db98f05cfbdc08338a23694e009fe46e33723136609dac6712eddc214e1c6c177a164218dc5b72c31ca629d1e6468530881507ee5eaafa72a43db0646dbcbc611975bff01c6abf044d44ca0e3c093eb9b4b535ede2ef64ac1471d25518d091a920a99867ab5b5d0b2e92b37533a2a0f63f99d28a9a2fef64eae08aadc2436cb020d86ca6e9223fcb1017bef08801dfbd35d8470b2319dffbdbb01cbba5dce6f302ba27dc547c8ad5ce892f2dd712caac4985702edd6f541610cee9da1ecc8e7f70b88bcecad7346bd2d9cad97924a989258244e1569abbddea1116a655fa9d69ca6f4fb1cde8a03f6f0d2d3849ca413d8a2c7bd455846062eb9881deb7fc7890ab872bfcf1f8809420524da6a604f37e3c13a007458caa1b89f17bb3d3c9a3140589aafa4ce77af6fe13615737c60348a99d29cdf377bedfc986890d59e8a5b3fb4a6083780962ad669feca71eaa01d15fd818fad4219ead24b6e0d648c454908fa4ed3a5e92b93c1653ecf42885acf959affd9ea99a0281fcf3f889a6c27d4c84318f89fc1fafbfd0a72e83b1418188d60998abc452206f3aba553321d97e1363c5476cbf4c395e5b8fb7a657d80da5dc770b1a55faca4cfde364ba5beaa060915500cbc06321ebd0d656d888c53bb5857be7320c3a4ad68b73700495eb5b4a47bf3ce3cbe47d13589d591c8d3e6be27312d3e7451f05bd8a51b3cc4c7373fb56586b086773cf282aafc4ceb8c8d0c454cfaac07eb586cc69c3866188af3d613e0fe9a20da918993e8d29223c8050c7158c3aa741f9a05b1ace86172db6d540d88303e276d31ecb1e3ceb69464957bc99ff3734c4515a0ddfb81dea9d4e71dc694f3413d6dc5529d08d04e1752c328802c0da4ed80afacc2af2753a10949d27109bc8d9fa1b5e1e2826c4decf2cf306628b20ee34f69154fc800b9c406da39afd95fab51684576db304c9913d609232c998b32a5c23f94dcf2de5cf77e8822e4e75dfb775b305f9deb058985dfce1e0fa64df9afaafc70bcc5a84181bf4755c8df221d1554b055bed4964f80575a991228ecb60fdabdf58c37459fff974316e9d9aef2863d0f4d446b97f8bdf1720bc80c7874978bc89dff7138ae29a4748407cdf9d7597b32059a5339d0086323962e482f0403dc88702ab54337f1cd9ea1b37653e0890e13810684707cfe16ff35f6c54575967d7350964a01aa265bfd90243c5fc282d45e57a5f2d5ec4ee90cdaef009567aa081f8de1a4c41d8ab18413811adbb27365200f8df8b49ac0014dc47c53969bc50b9fb27a5b1331ec674dfef50c30f98f896a4f8f3e8282a46413e0272158fced7b5317b2494da115691f022d6b7d311bd16600fa1bb220d5523e2dbde4b138851773401edd639fe5bdb48651289eddbb9aa6e98b3fbde355a9c7c4b66269de62475ba4015427d86d284880c5669fb8aad360a3be87b1ab0d806190ee6a9b445222e1cf1b7ab74da768078b112809247ad9aa859b64deb12a7d6fccdbc6412a9afe289abcc153732ebe17c81212166bc24badcdfa00471c1bd88bc5d2d0a4d8427959ec3621c135342556a4ab8d85cbfcd36005fb9286ed26b35832dd1ee857bddb3114f3ee68ee7732bf20bbddaab6424b81a366c446f7d59fbe057c54c54fd20d7ae1ac765a27762d554b5cac81ce0906e841a63901b7a671d3079ee87f7d3e952a383b111d2c579b81ea751a62966aa2cde02092876503e891af3e3b106ab1bb8e28a0216f633a1f24bf277a6240da4b0965d28b1b5082b4ee1abf1327822d24bfe6b19bf981ea3fd377ae160dbb46a7be36e45ded4bae665b652a5099457aea683d968cd4b91985a356884c5602af92827fba10f44d2d757607216f11b8df675a675b43b6607061c3389c0dd3567f5b53d77f4310e3da895729f0fec8163670413a054f9046a35eff659f81d33b1541c6ae57ce1a7f26b6212eb113f22d57c5616f873430a0919b376000d6f631d2efe0db682dbe6141aac8dd78dad1ae92dacbbc58ba0c38b57431717bc0355e5de59e71761ce3584e65635c109212283b7c578e8ba7e3381394020743eebb02418cfcd02b110d5c05646660fb1a821c9e7a20bf84f4a0122687fc12ca09fd83cfe1bb1c1164cc3f6477d39102ce06374c69fd73b0e5bd07b7d0a3d316e00cb70b87744f25341eadf5fe2ffa98f712eb3699cf7070320ef2a4cd7888c09791b516d0eb624958bdaa0b57b3613b3974db2a22e2914d2db0e9fad20bd73fc04cdd537650d59709271c0a4836899af5ec45addb0f553b972b7e1c131a1c9090b772e99713ffb1b6eaadc714efedc03ad6255df710d2191f1bc1e72e314246ca486d06f24b0cd465f55b1df158132641f1912ffb8a9d9ccba0ed2f5962daff8f36a3ea3098c5bcafc61801313a1452209877c7b7d1c4a33752277d951a0ed9a66e1efbab825321028509eb7bd6ef262c3668ed8291e0be93ff748ec495124e95d0c458202d9773cbec85a1e49d68778f59cf813ad367827b9c326cc9c3303d949c0f3e34bb93bcc2ad53799ae832cb966d3b5c35bfbf603260663977e8a5150b9d7d9e0479e003079702db466ca6b3e1025360a5099b83b8bbe7b93006dadbad8a5f162388b52c687e439ed8fcbafa57426a02136d1261809b115bddbfe49fa8b122ed6c01e3a328e2c9e46788347d29d6225d51d4ba8c866004237a6b682a163d85b7d076caf31d5c39376d3562b1587317d4515996409ac665ccd129f41109a870ec83d2f9e0bdbf7b66768363d9c7a57d142b7aae054cf66966f0a6d9a6255badc98e563992bdb688edaeb3cb22dbd3b5d46d1b199761b316a522ebd7b61c5e0958ce5e0a1e7cf5311f57920dfd2034639f13dc8641700491f9e3560938acdda7b52fbc498475c3da97c015e3c25fbcd78b95c3474b900ab0f78b922c217698bec84905eac06d8e65da9fe8d3cf97183bf7ceb40ed4a319bd9ad76936b0b164c2352bb11af04fe8106f9cd109a8d1d4c6c913a749aae960361442ac139af71e4de176528246702e811f7bd858dbb293f7bcbcdc8215b21b97875ce058dc0eeefd0348b42e133a307b5be6db96a19ef167a8aa71c3f8a407471b33346522fe35d69e3526f0af77b6c0ae035ac4e9fd4f465bebe90e910c3bcb9e808313f4813a9f04382b2c54efeabd7e56ee67047c5ab9a4da607f48ae7f9da72ef0fa856b48dab81f79ff7f8cccc1180d361219b7ad8e04e36bfad5bf5a149a8232919d33c41ea437d98926178805d333f7a829d124a55f96e45f80d6ad417fa1deff9a207eb8731de8f459d0a9e63cce6ac85857ef86316a39c47ebfe21d3a6fa22769905b705c255637dab128cba2284fd0b60a70f60d089343969c7244ea32cd1e9e34e1030b84b7641c483ce9d10c8577aa08326a83a135c2c4a6e65808f820fd54793021fc369cdf89bcb4f6ddf403a439de524f920ce437d6cf21e9bb52b1b7342bfe178b315fae3c66e7a61007ee2ecc656837e9fb4788713a8902ae6de7fa7dab103ca26ddf9c2783d6103316b5004dcab397f0d8f2a7b2c4e41e37e9bf088d3202128a1b95538ca4e7a6faec81a25308731d2c11b5ba9a35e289a241f1471bb2389a11d7dd5ca8853ac08b1de60c5942a0d84a1ed5ded61c70ff067a0dadcd858eee33a5c0771d375f8af0337cf1db7de643159e2780560cf74f09189620d4b66148449f64484173f10164dc7daf479e03fa8428aba7a7df5322aef821888d93a23615c95217b95a671a14f0268f7e5b0c6c98decbf304170934757328a6fe42b6fab3899c0620431cb0f7e1cbe0847ca527f0a0457182a37a4fde372ab465aea0977b4327d477ceef91868c6c6a9908f2b72b328afa87acad0be8cc1b8925eab359be4c8d9e08afcb988e76b6c3ad0192dce97eeff54e431b6d7d236f910f2cc7b6e0a50705e1e3304ff5137050a77ea9aabd0bef8df783ec02ea3f41a4a098df11524302653240f6909d0d16eb346b089475fad67e68d450d9411e31ea9d93d1a510654b3acec0d9ff45f4e1022a283f33b8a41519259cd506a9e13e026d14489e629f9d970d12de0f4c4f2abfe88244662bb09a3a079b888b83a76e1ad30bbcb8226db1d1bf3fe53656a6905b59a24901cd0a28d2fe66abe6cbe3ffc0bfed038f8a81c325c3ae0d35f2d03b810eddc8f854fd5e1ac6025047109a193580efed014d46e81032ab6f1c781e07e0cee694bda00e86be60fa13c9c4539b0a9f7a1bfe4be2969742c4867e086e43c591585536faf40f4234ef07c480bf641b4cdd339f13865e79a1f349e96170d7996f617c59b3c4ecddc513dceba2b6cab48c958634ec0caa1bf4ef2a0c0ac86e1e0a08d0b90ca9db839fbb43950e7507848654a7aaf255870df23ef483e0061e8fa5413bd28e031cfdffb2ef11e904fd6e442c3ac94f5df7a1be0d33dfe32b93910ae03174a0185a27ccffac80514d864662211c564e090d42cf426c13a979a3c75d73e406d7084c97fe302efba054446de0e8908cb79d81361a5df19c2a38e5cb3e9620292da2021932cafd164e9901103770161d97c9459f8eb713c5239e4960c394ea7139f8fe8fff85ce0e04a9968584711cba76f2164018d80428c9fae31955abe6a4dd17e59abe4bf8fbf131153218484308b096fa2f95519fffb65c9ff897e205244f58f7d12d2c4318209c353d481ff8e7acdba9549cb4a553780f2153cd7f5cb167670721b8a1fb12d8265183f8bd529f059a37d4235b53d21bb548a49629319129e24ac5411dac61b74fa72dbc7d081c7785090ed13ff2e425595594dcedc6f7c53eebff359a102e0f34d04429e9f183c7a27d8c78b380398d6828caa16ab5924114777627101bbd21eb54415b3f29047c12330b68d83f74e081566e86101c5920dca6a6c2ff649b8d583b42df873492b8bb390f3c10ca49556948f9927bd641de22035d3b1742976c81a91c7c804d1ceeebcaadcfe4bc14a49504f037cd72e9c4afd514b6b4cec01cb9bb92f6593b6126903da948bb71fbdc2cb2141fd140a8061eb1b031f5a8b099cf8220e874f3527b27792a8c8c38bb36388d0413eccd98e6339a1a5ea08e79b71309c0ddd97d98a40e0e49e64f2003811bebe2dc4de45d8304ec7cc33b2fe4818fd08581c9b84517886becc88b070de28ee9168f28d6bbe15462de12be2b95aaf01de23a6312b2f47f4ae0ee6fa61ae67d42ea5d0aa2fe2da3361d47cc588ebe84ecbf2f5915a7e7c81279a51b93fbc3406b09828701b707890022ce47ea1879edef9a8ab0d96bb7187e54b406cf57c720e9462300fbe4ab02e2f5fed8911b86dbbfbb1abed2244aeb74c29fa73afc111048f", 0x1000}, {&(0x7f0000001440)="714152b83b8ddfee06", 0x9}], 0x3, 0x0, 0x0, 0x20000000}, {&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000001540)="a392682590328b9706445d1c084ed3cf98435fed8614bae407745cacc4ed33055b5c2f62d4b69b778b05a9a4d64dcce01753097449b0c83a2e252d948649a2c6f6cc48e4ab089a8cc85ef4b11349", 0x4e}, {&(0x7f00000015c0)="b2f56a4f48d3471ce532ad6412188687796fdf7ae1f5989190ba327aa27bc2126880073978ab90f92b81193a4cc53db6197248a2a0b90f392d9727e3147f14ba7af99a", 0x43}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="ea4f8e22943d5eaa2775e65942c3eb483bb9b677", 0x14}, {&(0x7f0000003680)="5ed268b5456be11cbbf3abc535a8ec4a61d9059e846eae89bcd13bdcd7f44c046f9378", 0x23}, {&(0x7f00000036c0)="bbd351df926eaa06ff4b7c519e788c511a5ce6a2ac25211f948ef8e42a2e562827efb30f08883a7344592ca6f85a3e79620d86b0c91500ac33315f2356d7ea40e438883091c58c0c6df861fbfc966a5eec37a3b6e70be20c89fbc180a677611845167338b2ffe2c4f5", 0x69}], 0x7, &(0x7f0000004fc0)=[@cred={0x20, 0x1, 0x2, r3, r1, r4}, @rights={0x18, 0x1, 0x1, [r5]}, @rights={0x18, 0x1, 0x1, [r6]}, @cred={0x20, 0x1, 0x2, r7, r1, r8}, @rights={0x28, 0x1, 0x1, [r9, r10, r11, r12, r13]}, @rights={0x20, 0x1, 0x1, [r14, r15, r16, r17]}, @cred={0x20, 0x1, 0x2, r18, r1, r19}, @cred={0x20, 0x1, 0x2, r20, r1, r21}], 0xf8, 0x404c0c4}], 0x2, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000200)=[0xee01]) r25 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0xffffffffffff8000, r1, r22, r23, r24, 0x1ce, 0x1f}, 0x1, 0x2, 0x40, 0x3, r25, r26, 0x7}) r27 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r27, 0x0, 0x486, 0x0, 0x0) r28 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$llc_int(r28, 0x10c, 0x0, &(0x7f0000000080)=0x1, 0x4) ioctl$VT_ACTIVATE(r28, 0x5606, 0x20000000000) setsockopt$llc_int(r28, 0x10c, 0x3, &(0x7f0000000040)=0x1f, 0x4) write$FUSE_OPEN(r28, &(0x7f0000000300)={0x20, 0x0, 0x5, {0x0, 0x2}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 03:38:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 03:38:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000001600)='/dev/amidi#\x00', 0x8, 0x408000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r2, 0xd01, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) [ 1325.022786][ T9722] binder: 9715:9722 ioctl c0306201 20008000 returned -14 03:38:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7a000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c2, 0x281) 03:38:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair(0x10, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) uselib(&(0x7f0000000000)='./file0\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = shmget(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) r2 = getpgid(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='memory.stat\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="f1e3e82361786ee4d91799e983310b14284d4e3891acbc2521d3ec0af2c403ba6af495c07a001341f26fb24adb756b4051d328221bde42b86ec6384a7082ad418cc536c69ed51852b43603e60db75af1cd2bf4568000", 0x56}], 0x1, 0x0) setpriority(0x2, r2, 0x6) shmctl$SHM_UNLOCK(r1, 0xc) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x14}, @rand_addr="a37f6428e6aba2d288add4bb46d052d1", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x37f3, 0x4, 0x3, 0x400, 0x1, 0x4000000, r5}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000017c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000018c0)=0xe8) r7 = geteuid() syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f00000001c0)='./file0\x00', 0x80000001, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000200)="b4a11074b0e6582a9b5384ae", 0xc, 0x6}, {&(0x7f0000000240)="7f77dd401f2b3790fc446884271b428b0aaf", 0x12, 0xaf}, {&(0x7f0000000280)="8c32c6c9abad4fbe164a1802ceec7ee87a9fff096e9c2f9f5328a7c8b180add13f40d649c8a8d9a085d6106283a3eef441bbd0d06b03a58d39b24603729add574dbedf237674b3ac424ab04892b40ef857c6002b083cd2b146b932a54cca800ea557c738b0eb230487007b1fd2ae9b0d2c78aa06ddbe7e11b11b77466f8ff0c47ecc5d20a3e4cf96", 0x88, 0x3}, {&(0x7f0000000340)="394b6b69bc11059cba49d218f27505d9fca391e371a89e22a766739513e8e2ef7be4038bc3b62a35b09daca71330f0f15075410f35ae6a44c52f6d7fe40a235740de90405879720b92b4a872f1f7d50e5bd3ddcd70da9e5945ca4bfa4b662a092e72a7d1b2ac5d54d48c598c3a044b56fbbb613855c9d886a5f9ca21f32fadf6005dacefcf4053bd4da49b26d496c038c9d646a88cdef60cccd5745e243decbdcfcbb0605fcfae94935bc6a6efe3e8fa5e7779843d2e2fbfdc554fdd899b2e4b777d12973044b7e4b437972c", 0xcc, 0xb56}, {&(0x7f0000000440)="e40c882d7713b7c282deda1e4d5bc86d7365014a57781cb28a562b250af26b2c5762fd75da0223e941179e983a122d727402e34a11ba2517659e5676fa6afafefd519d08f0b1044c748b118031f7c1b1", 0x50, 0x6}, {&(0x7f00000004c0)="eb5e4cbb1b59687d4acde8200df0f86bbbc097471df12839323f8d70cbe3a86f8b9f4564ae8932eb58bea914066b9489df84c7e3a7b06943f89895d2b99c13efb03a2ca3f3c32cd914791868b78c2a1f6c63e130a13092d43c7d28a91f81a8b4faea514185e1941bca072369fad333", 0x6f, 0x9}, {&(0x7f0000000540)="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", 0x1000, 0x8}, {&(0x7f0000001540)="2af837aa1929d978f44e33d1ff183fe774fd15ffe77702273cfd2a25ab8dd3eddf61c8c431215035e3859bf1142266a27e195157e8fea112cd3dac4eaad8e992250e28d14e4afb098b3f0bdb857310e1a418cf637b", 0x55, 0x5}, {&(0x7f00000015c0)="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", 0xfb, 0x2}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="0000000001000000617474722c66617540745f696e6a656374696f6e3d3078303030303030303030303030303766662c7569643e", @ANYRESDEC=r6, @ANYBLOB="2c736d61636b66737472616e7359614c7bf860e8396c696e75782f6176632f63616368655b7468726573686f6c64002c666f776e25723d", @ANYRESDEC=r7, @ANYBLOB=',audit,\x00']) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) close(r4) [ 1325.159583][ T9745] binder: 9742:9745 transaction failed 29189/-22, size 40-8 line 2994 [ 1325.193218][ T9745] binder: 9742:9745 ioctl c0306201 20008000 returned -14 03:38:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r3, 0x2}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x3f, 0x37, 0x1, {0x3, 0xb46f, 0x4, r4, 0x21, '/proc/sys/net/ipv4/vs/drop_entry\x00'}}, 0x3f) 03:38:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x100000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x12, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c3, 0x281) [ 1325.341977][ T9752] erofs: read_super, device -> /dev/loop5 [ 1325.378217][ T9761] binder: 9758:9761 transaction failed 29189/-22, size 40-8 line 2994 [ 1325.393731][ T9752] erofs: options -> [ 1325.400521][ T9761] binder: 9758:9761 ioctl c0306201 20008000 returned -14 [ 1325.421447][ T9752] erofs: cannot find valid erofs superblock 03:38:18 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x15c}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4(r2, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) fdatasync(r2) [ 1325.439426][ T9761] binder: 9758:9761 transaction failed 29189/-22, size 40-8 line 2994 03:38:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xbf}, 0x1) [ 1325.491135][ T9761] binder: 9758:9761 ioctl c0306201 20008000 returned -14 [ 1325.509315][ T9763] erofs: read_super, device -> /dev/loop5 03:38:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 03:38:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x200000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c4, 0x281) [ 1325.554837][ T9763] erofs: options -> 03:38:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x10000) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'ipddp0\x00', 0x272}) [ 1325.592841][ T9763] erofs: cannot find valid erofs superblock [ 1325.619153][ T9778] binder: 9776:9778 transaction failed 29189/-22, size 40-8 line 2994 [ 1325.632843][ T9778] binder: 9776:9778 ioctl c0306201 20008000 returned -14 03:38:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x2080) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="070000008100393b8796b071ecc549e630f2a47bc8f8a2f1043c98d5149cf1e2d3b1dc3ac62ed9650f5a4ecdae61661ccb587696ded849a7ce9dfe434e16af773da97ab81e2e272aa17f701183cfddc7e1cd899f7c3b3415dbab7a633d50"]) 03:38:18 executing program 4: 03:38:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x300000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0x6, 0x5, 0x80000000}, 0x10) 03:38:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c5, 0x281) 03:38:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200840, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x40000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r2, 0x30, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x277140e88000000, @remote, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'\x00', 0x3}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8000, 0x0) fsync(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)=0xffff) getsockname(r0, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) [ 1325.870625][ T9796] binder: 9793:9796 transaction failed 29189/-22, size 40-8 line 2994 03:38:18 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x1, 0x387d735f, 0x2, @discrete={0x4, 0x80000001}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x80000) [ 1325.932924][ T9796] binder: 9793:9796 ioctl c0306201 20008000 returned -14 03:38:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c6, 0x281) 03:38:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbf, 0x400040) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0xa9) 03:38:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x400000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:38:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x16200, 0x0) gettid() ioctl$RTC_UIE_OFF(r1, 0x7004) prctl$PR_GET_THP_DISABLE(0x2a) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r2, 0x332d}, &(0x7f00000002c0)=0x8) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000300)={@rand_addr, @broadcast}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x25}, 0x4}}, 0x100, 0x900000}, 0x90) 03:38:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) [ 1326.074775][ T9815] binder: 9811:9815 transaction failed 29189/-22, size 40-8 line 2994 [ 1326.111739][ T9815] binder: 9811:9815 ioctl c0306201 20008000 returned -14 03:38:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x500000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 03:38:19 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000340)=""/137, 0x89}], 0x5, &(0x7f0000000480)=""/56, 0x38}, 0x3}, {{&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/242, 0xf2}], 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/149, 0x95}, {&(0x7f0000001bc0)=""/83, 0x53}, {&(0x7f0000001c40)=""/138, 0x8a}, {&(0x7f0000001d00)=""/173, 0xad}, {&(0x7f0000001dc0)=""/215, 0xd7}, {&(0x7f0000001ec0)=""/219, 0xdb}], 0xa, &(0x7f0000002080)=""/224, 0xe0}, 0x4}, {{&(0x7f0000002180)=@generic, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002200)=""/192, 0xc0}], 0x1, &(0x7f0000002300)=""/231, 0xe7}, 0xc7}], 0x4, 0x60, &(0x7f0000002500)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)=0x100, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c7, 0x281) 03:38:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x82440, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0xad, @mcast1, 0x8}}}, 0x84) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2100) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50810, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e630c4002000000040000000000000003630840", @ANYRES64=r4, @ANYBLOB="0b6300000d63000091e1cc14cab768cb56f2b906d2c6"], 0x2b, 0x0, &(0x7f00000000c0)="29eb9313164c78fe93cc4be66bae750cabc6bd859c189b4625d74fcb19261cd51dae16ae0d47b989a2ee29"}) 03:38:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1326.292114][ T9834] binder: 9828:9834 transaction failed 29189/-22, size 40-8 line 2994 [ 1326.330516][ T9834] binder: 9828:9834 ioctl c0306201 20008000 returned -14 03:38:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8080}, {r0, 0x280}, {r0, 0x1000}, {r0, 0x8}, {r0, 0x40}, {r0, 0x84}, {r0, 0x8}, {r0, 0x1000}, {r0, 0x200}], 0x9, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/4096) 03:38:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x9, 0x922, 0x3, 0x400, 0x8000, 0x2000001, r2}) 03:38:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c8, 0x281) 03:38:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x600000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:19 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffe00, 0x8000102) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getgroups(0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00, 0x0]) r3 = geteuid() r4 = getgid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() linkat(r0, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000780)='./file0\x00', 0x1000) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getgroups(0x5, &(0x7f0000000540)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) r17 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000bc0)=0xe8) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="48060000daffffff06000000000000000400000000000000020000000000000004000000000000009d00000000000000faffffff090000000000000000000000ffffffff00000000030000000000000000800000000000000200000000000000060000000000000006000000070000009f0000000200000006000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1502000000800000000000000500000000000000ffffff7f0000000008000000030000002621406e6f6465760300000000000000000000000000000000040000000000000400000000000000060000000800000000000000000000000400000000000000200000000000000000000000000000000400000000000000cc0000000000000080000000b20400002000000081000000ffffff7f", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000003000000000000000500000000000000020000000000000000000000e20000000000000000000000030000000000000000020000000000000180000000000000030000003f0000000500000000000000060000000000000005000000000000000000008000000000020000000000000081000000000000000901000004000000ffffff7ffcffffff01800000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="f90000000100000000000000010000000000000009000000000000000f0000000600000076626f786e6574315c6574683008f8000000000000000000020000000000000000000000000000008409000000000000010000000400000001000000000000000500000000000000430000000000000005000000000000000700000000000000000000040000000054160000010000000300000002000000ffffffff", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="09000000da01000000000000030000000000000080000000000000000000000003000000010000000000000001000000000000000700000000000000070000000000000080250100000000000300000000000000000000000000000000000080000000000700000000000000090000000000000002000000000000000400000000000000040000000600000000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="c1fffffff7ffffff000000000500000000000000000100000000000005000000090000002f2427212e000000050000000000000001000000000000000600000000000000010100000000000002000000e30000000600000000000000000000001c0000000000000000000000060000000000000004000000000000000000000000000000f804000002000000ff01000009000000e2070000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0800000000000000000000000300000000000000080000000000000000000000f7ffffff030000000000000003000000000000000400000000000000090000000000000040000000030000000600000000000000090000000000000000ffffffffffffff3f0000000000000009000000000000000100010000000000000400000001000040000000ed0c000009000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000300000000000000080000000000000008000000010000807d65746830656d300000000000000000030000000000000003000000000000000600000000000000fdffffff0700000006000000000000000000000000009d0500000000000020002f000000000000000600000000000000030000000000000000000000870000000400000044e2000001000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="00080000010000000000000001000000000000008100000000000000180000000080000076626f786e6574316d643573756d6574683063707573657401000000000000000300000000000000ff00000000000000070000000000000000000000030000000000000000000000efff000000000000030000000000000006000000000000000500000000000000030000000000000007000000ff030000000001000200000001000080", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="e70500000300000000000000040000000000000001000000000000000600000080000000766d6e657431000006000000000000000200000000000000ff7f00000000000004000000000000000000010001000000040000000000000000800000000000000200000000000000ff00000000000000ff0000000000000001000000000000000300000009000000ff0700000500000005000000", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="72000000b000000000000000060000000000000002000000000000000000000001000000"], 0x648) r20 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r20, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x8000, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x30000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x4, 0x7, 0x600000000, 0x0, 0xf}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x82) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x40, 0xffffffffffffffff, 0x7ff, 0x401, 0x45e5c01a, 0x18, 0x0, "9773e3346e11ebaf8b86b51e80f668c2c27f67c3", "d37b3e5f68b4cee0c79d548e67247dcb7b7c3e6c"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1c9, 0x281) 03:38:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1326.567571][ T9857] binder: 9851:9857 transaction failed 29189/-22, size 40-8 line 2994 [ 1326.635341][ T9857] binder: 9851:9857 ioctl c0306201 20008000 returned -14 [ 1326.669961][ T9857] binder: 9851:9857 transaction failed 29189/-22, size 40-8 line 2994 03:38:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff, 0x40043) getsockname(r0, &(0x7f0000000180)=@un=@abs, &(0x7f0000000100)=0x80) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x20, 0x4) getpeername$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0xffffffffffffffe2) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1326.700663][ T9857] binder: 9851:9857 ioctl c0306201 20008000 returned -14 03:38:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ca, 0x281) 03:38:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) 03:38:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xbb}, 0x8) 03:38:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x700000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8200, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req={0x7fff, 0x8, 0x10000, 0x2}, 0x10) 03:38:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1326.906469][ T9887] binder: 9878:9887 ioctl c0306201 20008000 returned -14 03:38:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x41, 0x4) 03:38:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x108010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001180)={0x80, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x1, 0x3}, @acquire_done={0x40106309, r2, 0x1}, @enter_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000080)=[@flat={0x73682a85, 0x100, r3}], &(0x7f00000000c0)=[0x38, 0x68, 0x78, 0x20]}, 0x6}}, @exit_looper, @acquire={0x40046305, 0x2}], 0x1000, 0x0, &(0x7f0000000180)="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"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1cb, 0x281) 03:38:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x1200000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = socket(0x1f, 0x800, 0x3235) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r2 = semget(0x0, 0x1, 0x352) semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f0000000000)=""/254) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000100)=0x101, 0x4) [ 1327.106377][ T26] audit: type=1400 audit(2000000300.040:372): avc: denied { map } for pid=9895 comm="syz-executor.4" path="pipe:[199148]" dev="pipefs" ino=199148 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 [ 1327.141817][ T9905] binder: 9898:9905 ioctl c0306201 20008000 returned -14 [ 1327.154775][ T9907] sock: process `syz-executor.2' is using obsolete setsockopt SO_BSDCOMPAT 03:38:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x42001, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x8, 0x5, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x7) r2 = semget$private(0x0, 0x1, 0x88) r3 = geteuid() r4 = getgid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) accept4$nfc_llcp(r1, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x800) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000300)={{0x8, r3, r4, r5, r6, 0x40, 0x8}, 0x100000000, 0x7, 0x2}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @remote}}}, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x2000000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1cc, 0x281) 03:38:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timers\x00') ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'bond_slave_0\x00', 0x4}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="75d4c739b288ad123311a46ccd2bc9181ed3425406", @ANYRES16=r2, @ANYBLOB="00002dbd7000fbdbdf25090000009800050008000100696200000c00020008000300ff0300005400020008000400f8ffffff08000400010000000800030001000000080001000b00000008000200f7ffffff08000400070000000800020000800000080001000800000008000300000000000800040001000080080001006962000008000100696200001c0002000800020005000000080004000900000008000300460900002400070008000100430000000c00040081000000000000000c000300faffffffffffffff"], 0xd0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8800) 03:38:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0xffff, 0x2, 0x1, 0x2, 0x44, 0x7}, 0x78}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'hwsim0\x00', {0x2, 0x4e20, @empty}}) [ 1327.366935][ T9921] binder: 9915:9921 ioctl c0306201 20008000 returned -14 [ 1327.381272][ T9921] binder: 9915:9921 ioctl c0306201 20008000 returned -14 03:38:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1cd, 0x281) 03:38:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101c00, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getpeername$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@null, @remote, @null, @default, @default, @default, @default, @netrom]}, &(0x7f00000000c0)=0x48) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @multicast2, 0x0}, &(0x7f0000000380)=0xc) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5c93d2fb}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x0) 03:38:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/enforce\x00', 0x400, 0x0) sendmsg$unix(r2, &(0x7f0000001740)={&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0xffffffffffffffc0}], 0x1, 0x0, 0x0, 0x20000800}, 0x4000041) 03:38:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x20340) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0x6, 0xfffffffffffffffa}, 0x2) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/225) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200)={0x77359400}, 0xb0c8f17aa047591f) 03:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4800000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="4b2211565648da88532c0fb4e0de675b"}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x88c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="2fc1bab638c2f8bfbc71da6c82f16718"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff2cba}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x801) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100000000, @dev={0xfe, 0x80, [], 0x15}, 0x80000000}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75f20000", @ANYRES16=r3, @ANYBLOB="140428bd7000fcdbdf250200000030000300080007004e20000008000300010000001400060000000000000000000000000000000001080007004e23000058000300080007004e23000008000500ac1e010114000600ff010000000000000000000000000001140002006e723000000000000000000000000000140002006c6f0000000000000000000000000000080005000000000008000400f7ffffff0800040000010000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4040810) 03:38:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x8, 0x2017}) 03:38:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ce, 0x281) 03:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x4c00000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1327.634105][ T9948] binder: 9940:9948 ioctl c0306201 20008000 returned -14 03:38:20 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101002, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'erspan0\x00'}) 03:38:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e80)={0x0}, &(0x7f0000002ec0)=0xc) r6 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0, 0x0}, &(0x7f0000002f40)=0xc) r8 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002f80)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000003080)=0xe8) getgroups(0x1, &(0x7f00000030c0)=[0x0]) r11 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003100)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000003200)=0xe8) fstat(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000032c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000033c0)=0xe8) r16 = getgid() r17 = getpgrp(0x0) getresuid(&(0x7f0000003400), &(0x7f0000003440), &(0x7f0000003480)=0x0) getresgid(&(0x7f00000034c0)=0x0, &(0x7f0000003500), &(0x7f0000003540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003580)=0x0) fstat(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003700)={0x0}, &(0x7f0000003740)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003780)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000003880)=0xe8) r25 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003fc0)={0x0}, &(0x7f0000004000)=0xc) fstat(r0, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000040c0)=[0xffffffffffffffff]) r29 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004100)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000004200)=0xe8) r31 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004240)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004280)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000004380)=0xe8) getresgid(&(0x7f00000043c0)=0x0, &(0x7f0000004400), &(0x7f0000004440)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000004480)=0x0) r36 = geteuid() getresgid(&(0x7f00000044c0), &(0x7f0000004500)=0x0, &(0x7f0000004540)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000004b00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004b40)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000004c40)=0xe8) getresgid(&(0x7f0000004c80), &(0x7f0000004cc0), &(0x7f0000004d00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004d40)={0x0}, &(0x7f0000004d80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000004ec0)=0xe8) lstat(&(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r44 = fcntl$getown(r0, 0x9) r45 = geteuid() getresgid(&(0x7f0000006100), &(0x7f0000006140), &(0x7f0000006180)=0x0) fcntl$getownex(r0, 0x10, &(0x7f00000061c0)={0x0, 0x0}) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)={0x0, 0x0, 0x0, 0x0, 0x0}) r49 = getgid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000006500)=0x0) r51 = geteuid() lstat(&(0x7f0000006540)='./file0\x00', &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r53 = fcntl$getown(r0, 0x9) fstat(r0, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006680)='./file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000006b40)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="fa198244ef1d68ca551c15232e4785e700529ea0f9e4cfa3d7e8b75216dfb77e98beedf59f66185a1493e494913b16bcbf69f09f03ff03ea63980fe71a28b1e03ffbaabe60d6ff192469bf", 0x4b}], 0x1, &(0x7f0000000300)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x10}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x100, 0x80}, {&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000480)="faccd2bf9c8f8d90d846b72ce91d3ac8dff8f7be77713deea28ff3779c3c68b61df0c83fb09b546867a974cbf70d2f7644969939e551f99b7dafd786bc34f3ac91fe9aab6bf4bd6b9b9b250316b6799a4f80e088d292289299e529dd0b6b7df94aecb11b9d05ae2c39298ff2bbe89362f4e3e80235e6", 0x76}, {&(0x7f0000000500)="54b834d777f0e641456dab11f5a46ce4fe5dd6ae227164adc9f153924c0e7482f3e4798e170049c7a69563fb7e977745d833bf0fa8f0f03e91d57882f2883159efd5adbc4749f92b347a3cf7a161303c88ec042c6ff24be606a7d20dce1f60ff1be3e41ee6f889300620d0e2d779676a7e05dc1e3db82c320b9103a2c617a2c824badc6bd07812e67a7ebe59b42b0ba3c511bcfac2465915c37921166c935eaa6b20c7086fb03e83f8910e3006ac5e8a3c84f64cd58d469ae668db5c6702e04be3ce8e1de3c2fa33519dfec27b347d214cd4244ab08de7773356187e836bb7832c865e1b0c4300062c672d", 0xeb}, {&(0x7f0000000600)="15f54b85f398e52a55255960c4d3406d9389c038d3dcb36d194e186cb204d6a6e034b1a212baa2a5cc3b31db9f21c93d16b7de18df1b9e3fd92e02e60677c193945c8246821987fbcfed9f8e4db6125e4ff6dd9620b4ae0f094a5325ba0d142d9eed1858c64cc0464de48fcd8a2412ca13107b8397c28d46f2640b7066306f83a970da1707b109a3a2352314d719e315c37124a2b2526eeb365ec4dcd9f00214dad94a8153d390ccb16c4f9931a7db9da640211600f7", 0xb6}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="2bdbe68a49ada48593f4ffe2f8e7d20c4579b89f59d0b86cb05a36db0e227fd3b34aabca098cec2cad3d607b22036e1b96fd96e510d4e52e6f760edc8ea44e9f842610320b43a1c38cad4be5f0b641826c287611fd1c83bc3d195f2277c729498344847f8306a6f32e5a7a20cde1a25bf64b4a4fd96b35cc97fc73d0e8208abf9e130c5bb11aecd12c512a7bc6afabb2ffb6c534d27beb188b6fad98b19bc10e96b6ad6a558a399e8edf41770f4d31258061d665c2bcbff8322a0f8fa829c60be9a8cc430f6c1152ff7779ce47faf5990f861bc9bf3160842b9b", 0xda}], 0x5, 0x0, 0x0, 0x40000}, {&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f00000018c0)="f382df2a5a48c9e3ceda88d28c0a8d71634da58e2d3ed73e43ca374fec3bf45f2b9c36de2d0e400c9cf2ce4d7e63e6df895691d1174b2b8473c2d3cacea49f7d8a72930bd0b7efda9f42d5ad9b86d8564882fcdd40e24c46ec94f120e30c27569a142ca114979977bf767a2db20b88f2d28ceaa1b9e0b7e3b5daf597dd4f7ab5067739275b23f83c63df5a8c1cb1f1a4190f4cf3588ab731aa654e0461744fc48be27bd6d4d22e79f9c06fbf74b1199599249d14d4fa5f3c08d03d1949e538c441dd05b1d3a06f36c10af4c390421bb58817c25627e1e7b4655985a0118dcb777f25133daa7df86f43e53928382576de484a94a83053", 0xf6}, {&(0x7f00000019c0)="ecc2c4b1f78146bea2f6ec8e299125ea5887aca0e228975b8e18c411a580eb760cb8caea2a2d914fd6a1ebf3f49f366160d388978dbd9e7d7a94fcc77d9c7ae1f84d4b89bb80af1dab2bcc1738531a090c11eaa9b74b835626d84ddc65de77042eda4854d46fb41dd72fe08484be340bf3656474fb46bd31c5f0132b5e453efc536b79", 0x83}, {&(0x7f0000001a80)="5bfe1705a34113b16f5065342c72ec71f989bac2e5f164afe569101cba083eb560bfaf0de3d9695f9c5f19db5de1f0189d630f098b09df15cf3c856dbaa564675b17064c1325d217e3f946ea9d3bc1ac610dc421893157a71629f0646fe35e23bd107f630ca6004c1c80fd56f870faae55371d3820995b98e4406f3764a4ffd42291480159dd03cf39b70f5b705d639343545558a356e3b3cac47838c924af305abcdcefef2ad46240e3a937c7599354f49c397e6d2e0360b08960d74d57df87b2378c00afc586aefcff0d948cd4807495fb262097fc885170198bdc6ffcfaae3e0535513296a649ad518c006652e145d301c2", 0xf3}, {&(0x7f0000001b80)="5bc201ff4243519f695a715968a31d216b6ae230cba1e9ddf68a7cb18fe91c", 0x1f}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="9d7c13ec941324baf7d65dc5a4222a014f17e587226e8def126098eaa64a74c7235ba3535f9cf8febb92fa53ca366930a3a308f9d59215efd634ab1972e20f947e2b200d27d3d0b39fb2c61ef99f8022cba64c05abf06cafcfa8", 0x5a}, {&(0x7f0000002c40)="b962524ec73ea3ee4eef0d8e3ec7e0ae3562dbe5a6182911129adab729e3f5a9a72d1b4ad699adf759e1e99ee4145004c40ef86f32879500476b6ca321f3d6222e98dd1a7d13bdfb04275d7cd9c9f22153a9784cc383e9957ce2c4ec6c34886e8f6e04644b2e59ab44d98983f5e7c48c9c1d7d26ecfe05f585429febc1d07812b7a248424c2220ab750243283950540cff58ba", 0x93}, {&(0x7f0000002d00)="6413c4a5d2ef9854f2db0dcecf716ff9c9f18efff2845eb2a944975d404cdf4943425de3fa1dde3e45611155bf1538574983f0eb41307b5d89b4bc65127dd0f103e43b04e81cb0b519444aee3024e3512319c9726ec950a8999c142f112542d5e24f24cd72c026e6c73bc65f12a7acbd5d288c27c4c61ccfc88af39ff5a79652b5d2fed6ae95e8f223c1ac7ffd5ac254f1ff2ff58a3d58801ff95eb3e1c3f6500506fcc974caaa19fd5cb029361064465d521f03f25fb1e2f06eaeb792b45b329e3a5607396459b3fe8e138d9c07e1eb04f56868185966c6120683d0b3f986cf8d4bd32a6003ed15a717abb05c2399e900f8760a", 0xf4}], 0x8, &(0x7f00000038c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}], 0x148, 0x40}, {&(0x7f0000003a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003ac0)="ab2fe94864e3ae1a2d5bd3978f7a84cdeb56f62c2135eccfd20e98a330ea66a409849b517b445b4614640ed8d00d55bca37e8ce6bf11c775fc5c337062fdccf92d2586d91dc5c022ca583f80eb236e5defd60787e32d7b428f0fece40c27ead182f114bacca73b012e5e14b53cab25e6231dea088cf2265ca0d0d17770b9bbacd87c71c6d86ffca387634d9c3f25dd", 0x8f}, {&(0x7f0000003b80)="b7d0b7f8acb581e8ba3277123893434ecfed56b41942f6a97f06485b0106f286d5f4f683e71b67810e07311a1875e3c6539da749708f0d5905dafcef79a199b9927f758295ee6af4b86949c6a89caba8d11fc3d9f97e694ffb0fb3ee493698110b2c0c1a8078c25b56ce6d156311da9939c3b0a187735e159aca955bb385d60981094b57435ffd1dc9814e212ee0008a914c345a9a4582d19cab31cdf248900d7a03ba949ec20c266b92a88407db8c30ca5f101f15b48ba373de21be2165e32d1efde317ff45d3324fdbea3afb075817cfe0f8d93797", 0xd6}, {&(0x7f0000003c80)="5efeeeac85d7578a9529a68717a077bf1da6ae204ac6c504724c0d07be037515511d7de9db3c2c57989b3a69dcd050ab28c850f2934493b8a223c1376794679d27a3629fc5943975a439bf8e847b9e175bbabe8556ff6d14d695f4720ea847948777fea851a44cbcc87b6c928e7b99436ba3ab1906d5798549fbafa6f5f5e006b7230d18f3865dfa9c1c551a89b925a826ecd68fadf2", 0x96}, {&(0x7f0000003d40)="4bd7d968eab55d5ec1a0234615537210721ac8193c72b2779d8a3810efc85740", 0x20}, {&(0x7f0000003d80)="6f8c73c79982547b22de2276bbb1cad1c67fe5048e9aa41113548d240a46dad6da1e7ce09f31c30f9a0f5317f61cd9642df2a60e9981424dcc94cd7683e091322da0a7cade556e08e65e4e44f016e4a80aa55283c6496592b50a72a905da84ec9c7caf50902afb6ac4c953acc3841483031b36e5774fe9771601c205755e5c5d33350fd1974b36aee1694c1a9bd09e04c776814baa4e8e3321b7a9f3414c75c0bde28f545407dfa4a974ea76a1c9bc5013de7abf044132aa80cd15139537780f1af1c835839080929bdd8c493d41a86428deb0127eca5ca05b42564b505036971033392cf182eedd8234c8b68aa333f340e9", 0xf2}, {&(0x7f0000003e80)="78d915060d69f0195ae2aad672424dae67162bd2ca8247ccc26e0d5d6344dd11602af126caaf423a94aa483b167af4b77ce4dba9245fb93125c6539936754a4eb594d4ea334917c798a44cc3428d71a3f535c723d516d7c2da23f1304b6a281900844e0971ef9b784bb02a2bdb42fdb4943cae22c38475649a7847f9c3e741f81431d7f7f593b3bce299c80ea78f", 0x8e}], 0x6, &(0x7f0000004580)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}], 0x110, 0x40000}, {&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004740)="7f0409ff2f3e4f93d30cefd8dbe93da65a89e160bd8936f4040e2e2d46b6eb2c56b0e0cd937da41204aa6d7ba62d2be7ab4c421d77a910dfd09859a54f02b0e88fbc3f70526675a48673bc24cce74a0c8acf9647c6bbb4b5289649833ce328bba3a07bbf8b42d83064412bda2d9c553d2a43f71d11db102ad329af2ab11d7d234718a1d47009108533d7f66eedf4bf1a3be1d631d4968a6e6b1bc7f9410faab29b0c0b2cd38af03d353c3482647d234a31ff0b0240867adb25", 0xb9}, {&(0x7f0000004800)="8bd9df88f946fad09c9da2049f9dc655b1b8c865", 0x14}], 0x2, 0x0, 0x0, 0x48000}, {&(0x7f0000004880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000004900)="968d0cebe09242b250e8c65dbfd360cecf159c9528c0673c8db023d06c8ec69622442337fc3f19380d224ce605dfe8532dc0b46c8b362fcc83a36c255a00103833f9191eed2af6c2812464d55ea271dd6d2240f78b588d2405974d7c344e7361691ab483930a88dbc0f33c07900e003061d42274e30a084826591dcc10a712f9ff7d7ec46cf0d6ac014964c57ae3", 0x8e}, {&(0x7f00000049c0)="b575f42248ec1e0ede67655e4d75a2f387e190e9cd34f0517e4809ce65e28772d71e7a9f407b259e75a18b1654852f6a9b286aad5d3910dbf9078372895db64f5ca60641c0e7935a25be21581f051a1da5e21a8730d2404effa2c5f0c12031252898388323b214e32405ec761e4e1e7e172d0839767301dfa30cc184c34c90bd038c85fbd921bd8906c9307ff56818c854257c4f3a70b2d174602c15497e10356ec3397998c797b842af6d11bf32b2849946a1deb1a5e57974fced425b4c610376758382f06861be8242dcf3d6263629ccb2ef2b8dba4cc5e725590f03ba2de06e23b3b2d1591caecce214e37a4ba78b", 0xf0}], 0x2, &(0x7f0000004fc0)=[@cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x80, 0x20000000}, {&(0x7f0000005040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000060c0)=[{&(0x7f00000050c0)="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", 0x1000}], 0x1, &(0x7f0000006d40)=ANY=[@ANYBLOB="200000000000002001000000493502000000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x800}, {&(0x7f0000006340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000064c0)=[{&(0x7f00000063c0)="bbec0c3163689ef9d6d492a0f970fcf9b6fa47eb9e2252bc12be0baaf43da579c07116d23e43276f16f7c166736bc771aff15e81d84480921b3ce18b0571f99f06fdb1a36ec79f06505ef3ffd8e7d4acf25a51f619c2dbf5f7af91996f07b7bb1d7d72d7e6cd7411245d96f33d6c9e54f6de12fd74c8d49125857cf9c9fa2223df7f6c632cdab38332a70826c5cbb85255c3709218c454cc76c4b49639358f1abd1c87947a8e5a4112f5cfddcf7b2b840f4a9602946b44ff7ac80a40c1c1665675477690ecc030a1e5c48395fc9704", 0xcf}], 0x1, &(0x7f0000006740)=[@cred={0x20, 0x1, 0x2, r50, r51, r52}, @cred={0x20, 0x1, 0x2, r53, r54, r55}], 0x40, 0x4040000}, {&(0x7f0000006780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006a80)=[{&(0x7f0000006800)="2e3dd6cc350858da195f45fc255c6e00471e6816179cd8791583758227c9ae6d2f6e35bf8b9b7afcaba2c58b9e3159656089d2813617b07fe78745d8a77aba600f8c3a2a24d395ec23bc7b4a809de3677bde3b86744c53efed3f6866d194882a0786739e91f3acc7b0c8aea52712c5d9393a8d4e0a745ecaf4a6d7d97cf09b3eb724856b1354dedf5d508eea841028a7a703a81b636978110288035084fdb20c3e324222fe06724147362d82", 0xac}, {&(0x7f00000068c0)="ea5b3b99afb3f7617fda435e63fd156a22b7574dd7cba8a6df13826ac05c739c2e3ed45186aed7ba4765fb96229b71f19203a85a9770ca4f223ffdc6b116b4345fbbb5d2a437fd689f2b2899c2efe36e1ae0427dbbbe0c65d8bacf3ea013a08a8e929e3cc81e74ef21090b3cfe38ec8a7409583ca8f69ced2a98d85938cc977f5ee73efc9bdd5cb17f9df625f422fcf9cd341b75deb39a804e79bd5cd778a1eab659c5868215c3f6e7a9357a86f574db88e03b505258b28f7b5f043729cd44004f9cb677d22069372c5acb048f302d83be793f373ef2793c", 0xd8}, {&(0x7f00000069c0)="05cbd954d770eba97ed7612c16b9d554ff1f84f317e062c4801af34a36ec2226e69a43c16a50613411541f73cf47d36dbca97c3090fa0e3abb0612dfd115020cea6689c3", 0x44}, {&(0x7f0000006a40)}], 0x4, &(0x7f0000006ac0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x10}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x68, 0x40000}], 0x9, 0x4044) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x68a, 0x6, '9P2000'}, 0x13) 03:38:20 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') [ 1327.832366][ T9961] binder: 9956:9961 ioctl c0306201 20008000 returned -14 03:38:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1cf, 0x281) 03:38:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x42, &(0x7f0000ffb000/0x4000)=nil) sync() shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x31a7b162faa749c0) 03:38:20 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x410900, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x100000000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x830005}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x300, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x28}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x8001}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x10001}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc21c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffb2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3865127}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x300}}, 0x40000) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c009460567400005b04eb09955af154d83b91473b11f8aa418cdaf2b4f1b6cdf8b4981078c9be86962f9e89e4f2b188ce9162914455b24e3db1b2d3508ae3152e2c9fa8b264c58999fedfb5c703e244329ed89f3242e77fed7cbfc0b6f87428e22f125fc488c1b17231e69316a41f07cc10177bbd3b5e2f5dbde18f8ca7f8198af89f6dae89eee34ac13e7cf118e863cb22ff5470464c76d29d61832531c9a0d6dc422fb92980c4d4268fe56c1564ce00000000000000000000"], 0xfe08) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x9, 0xa}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r4, 0x54, 0x2, 0x6, 0x200, 0x1}, &(0x7f0000000300)=0x14) 03:38:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000040)="38ca16679f49ba219faf75adbabe45b600d968d83167beab289aa37f3f6d75d9e6fe95e9b1a0d2c3b51f6e4ced39b30dda73c92e94f735eb57f898c6887aa74645a4ebce7b9c5cff86b4c2a433d3a3d92d21f2a57a5e662463ad479564667c56f5879ac3a8c106d1d92f54eddf227a9e72d2b3f12582a5dfff61c0c65d5e488e5412e1e4ca484715640dc3918f571fa2e6db26e5812c4623e46c8a4bca2110ced988d5e6d4f6f40ecf23e8a271c301c01be3660b7e6143d805781bc93c789d36c4bc2690b6a541b624cc4e7e3df22dd680", 0xd1, 0x84, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x24) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6000000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:21 executing program 5: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2) getpeername(r0, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80) [ 1328.136169][ T9988] binder: 9979:9988 ioctl c0306201 20008000 returned -14 [ 1328.170560][ T9988] binder: 9979:9988 ioctl c0306201 20008000 returned -14 03:38:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa438, 0x20480) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 03:38:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d0, 0x281) 03:38:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = dup2(r0, r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)={0x0, 0x0, @ioapic}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000200)={0x80000001, 0xffffffffffffff00, 0x0, 0xef, &(0x7f0000000000)=""/239, 0x39, &(0x7f0000000100)=""/57, 0x8e, &(0x7f0000000140)=""/142}) 03:38:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6800000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3fffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x129, 0x100, 0x8000000001}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r2 = bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r1}, 0x2b) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='userbdev2\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x6, &(0x7f0000000500)=""/143) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000040)=""/243) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x41, 0x2, 0x5, 0x20003, 0x20000c, 0x100, 0x9, 0x2, 0x100000000, 0x4, 0xc8, 0xfff}) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, {0x2, 0x3, 0x8, 0x100000000, 0x5, 0xec7}, 0x1b}, 0xa) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0xfff, 0x4e7}) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000280)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000400)={r7, &(0x7f0000000340)=""/191}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x699, 0x41f14002b4ff5513) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000240)=0x7) 03:38:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) socketpair(0x0, 0x800, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x8c, "9729e29c49e55bd084d5eddb4ca9012f19b7ee8a527ac4c0535a23bd74455e3ad2688e684d754e591588ee089ea233569adf65cef1bf9c6e3c408844deadba1531c1fdbe05b31583ac7b0ddf138fcff94294f75d5c5176cc63bb411b30001538bb2feb4be3fec5ea1b1e9563f0a4564ff8246eb7885d98d8957c5c85f3d08d0a8d1493c8994d2101d5dc15bc"}, &(0x7f0000000140)=0x94) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid\x00') 03:38:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d1, 0x281) 03:38:21 executing program 4: memfd_create(&(0x7f0000000000)='\x00 ', 0x0) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0x0, 0x200000, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000000080)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x9) pkey_alloc(0x0, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1328.393694][T10006] binder: 10005:10006 ioctl c0306201 20008000 returned -14 03:38:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x6c00000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x11, 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0xcaaa, 0x3, 0x8}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xc0000000, 0x400, 0x20, 0x8000, 0x8, 0x0, 0x8000, 0x2, 0x4, 0x401, 0x90000000000, 0x0, 0x32, 0x5, 0x8]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x401, 0x5, 0x1, 0x7f, 0xde2, 0xfff, 0x7, 0x8, r2}, 0x20) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x4, 0x9f) 03:38:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20401) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x200, 0x4) 03:38:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d2, 0x281) [ 1328.622918][T10028] binder: 10027:10028 ioctl c0306201 20008000 returned -14 03:38:21 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x8000040400007, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xbf8438f5eca45a4c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:38:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7400000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d3, 0x281) 03:38:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1328.907819][T10050] binder: 10049:10050 ioctl c0306201 20008000 returned -14 03:38:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x801, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x103801, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="f70d6c3893e42ba35008210e7e7145d1", 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)=0x7a00000000000000, 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x1, 0x3, 0x7}}, 0x14) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000080)) fcntl$dupfd(r0, 0x0, r2) 03:38:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_bridge\x00'}) 03:38:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d4, 0x281) [ 1329.198582][T10066] binder: 10060:10066 ioctl c0306201 20008000 returned -14 03:38:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 03:38:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d5, 0x281) 03:38:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x2}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:22 executing program 1: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) prctl$PR_MCE_KILL_GET(0x22) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', r1}) fchmod(r0, 0x80) recvfrom(r0, &(0x7f00000000c0)=""/45, 0x2d, 0x10000, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80) socketpair(0x0, 0x801, 0x664, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000001c0)={r0, 0x8, 0x400, "01d11fb037d168c252c0b05257a72f30034a6b1474c6109d763685f4ab682854250e751a359176ae417ef5fbeccb6748109688d3b3e329254ae78bba9feff050927181217cb266e51a6b0f5e268b2468aaa30af85382f8110222786d5f741c916858873879191dcedd44615aec130199cf94d1b597d150e5a883fad78a3de27d296ad28af00b4edc48f21a7c08528005d2ea2d956f610402add8fd034cf9ddf63f46c1d674037ffc8cc25c6d69cdc3eddbdc00dbf2b1da5e28fc7b4ef6"}) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)=""/165, 0xa5) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fff, 0x80200) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x8b5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='/dev/audio#\x00', r1}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x10000) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x8, 0x39, 0x3004, 0x8, 0x3, 0x0, 0x1, 0x7}}) 03:38:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)=',user+eth1\x00', 0xb, 0x2) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x1) [ 1329.384199][T10086] binder: 10082:10086 ioctl c0306201 20008000 returned -14 03:38:22 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x511000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x7d, 0x2, 0x400, 0xfffffffffffff001, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @broadcast}}, 0x800, 0x3f, 0x6, 0x1, 0x81}, 0x98) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d6, 0x281) 03:38:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x4}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:22 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) setpriority(0x0, r0, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x4}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r0) [ 1329.477125][ T26] audit: type=1400 audit(2000000302.410:373): avc: denied { relabelto } for pid=10093 comm="syz-executor.2" name="L2CAP" dev="sockfs" ino=199465 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:faillog_t:s0 tclass=socket permissive=1 03:38:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000280)={0x8, 0x6, 0x400, 0xc4, &(0x7f0000000040)=""/196, 0xa5, &(0x7f0000000140)=""/165, 0x43, &(0x7f0000000200)=""/67}) 03:38:22 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$sock_proto_private(r0, 0x89e4, &(0x7f0000000040)="bca6c7832ef5") setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x1, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/27) [ 1329.610107][T10108] binder: 10105:10108 ioctl c0306201 20008000 returned -14 03:38:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x2002) mq_unlink(&(0x7f0000000100)='securitymd5sumppp0wlan1ppp0)mime_type.\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x100000000, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xfd}, 0x8) 03:38:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d7, 0x281) 03:38:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x93af, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000005c0)={{0x8, 0x10001}, {0x0, 0xec6}, 0xe000, 0x2, 0x7ee}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x20000) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000440)) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000040)={"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"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa000, 0x0) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x800) r2 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000140)={0x8, 0x1, 0x7}, 0x150) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x1, &(0x7f0000000100), 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x20, 0x69ec}, {0x1, 0x3ff}, {0x20, 0x58}, {0x3, 0x1}, {0x100}]}) 03:38:23 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x5}, 0xf) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0xa}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x1, 0x6ec640) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x3, 0x8001, 0x7, 0x1, 0x10}, &(0x7f00000005c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000600)={r2, 0x4}, 0x8) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="dd52dec2437b6172e862027384066dfa60e7f07570db21e6c8dfc56b1f8423382c49abcef3ad06166b5566ccefbf46e86850f64bb718c2fa04b410acec081269ebc10031c7b558fa6b944ab1a05e59bafee2c1bc1856fab40eb66910e2052e7debbc9348115060733eb67f788a2918274068f183b01dfd5b167f179652a518e039eb1f353de140", 0x87}, {&(0x7f00000003c0)="6409a1e0c27466f4a74e20a96cd4702119470f300b5da34b818410437b89106afc787e1933defb321165dc72008e5961382eafb4de3d7cd067da9456f6370c35acd47bc3c6464df0c6d67cd49c76b20f8d407862828cbaf48b", 0x59}, {&(0x7f0000000440)="0ac772fe94461c7b81a506d276c6", 0xe}], 0x3, 0x9) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r4, 0x2}}, 0x18) 03:38:23 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d8, 0x281) 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) listen(r0, 0x4) [ 1330.362848][T10139] binder_transaction: 14 callbacks suppressed [ 1330.362868][T10139] binder: 10138:10139 transaction failed 29189/-22, size 40-8 line 2994 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xf, {0x1000, 0x6, 0x100, 0x4}, {0x2, 0x9, 0x7, 0x3}, {0x1, 0x1ff}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/dev/audio#\x00', 0xc) 03:38:23 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1d9, 0x281) 03:38:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0x430041) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1330.432971][T10139] binder: 10138:10139 ioctl c0306201 20008000 returned -14 03:38:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x25}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/70) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1ff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x7, 0xffffffffffffffff}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1da, 0x281) 03:38:23 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x102) creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = getpgid(0x0) wait4(r1, &(0x7f0000000080), 0x20000008, 0x0) 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x7, 0x1}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x9, 0x8001}, 0x8) 03:38:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000000000000005, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x696ad2ba88e54d42) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x7f, @ipv4={[], [], @multicast2}, 0x6}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0xcca, @empty, 0x35}, @in6={0xa, 0x4e21, 0x10001, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @broadcast}, 0x7fffffff}, @in={0x2, 0x4e24, @loopback}], 0xd0) [ 1330.636110][T10167] binder: 10165:10167 transaction failed 29189/-22, size 40-8 line 2994 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000280)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x307}, 0x8, {0x2, 0x4e21, @multicast2}, 'rose0\x00'}) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x6d0001, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = socket$inet(0x2, 0x3, 0x100) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="e8d61695d551"}, 0x10, {0x2, 0x4e24, @multicast2}, 'syzkaller1\x00'}) r3 = add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='big_key\x00', &(0x7f0000000140)=@builtin='builtin_trusted\x00') [ 1330.686497][T10167] binder: 10165:10167 ioctl c0306201 20008000 returned -14 03:38:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x50}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:23 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1db, 0x281) 03:38:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup3(r0, r0, 0x800000000080001) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x1, 0x7, 0xf2a, 0xfff}, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x681, 0x2, 0xffffffffffffe74e, 0x4}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x6001, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000440)) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c65302049506c53000a2e5b653c55e174dcb47e945bdfecfeecaa215b1bd240b5c4ead958c8a0ae6631dabceadd0fbeb5f000c9d8e606fdd9d9feacd5285a226384a2f53c13b63f11d84e19adce0bbff500c70630165f3ec76f8302c08a02741844c53b72f707ddf1dba27ff82fb42ada34be45cd0998abca46e16731fb2de782b19dfdaec1b9b567fe66e033ee5f6e7328cc1fb13a54b2ed59efe1f2310ee1af542a4a22d40be36c0000000000000000000000"], 0xbb) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x143200, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000003c0)={0xa, &(0x7f0000000380)="a50afaf4fbc74b6e2ef8"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x144, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0xe}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x397520db}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x3}, @sack_perm, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x7f}, @sack_perm], 0x9) 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1330.880430][T10190] binder: 10187:10190 transaction failed 29189/-22, size 40-8 line 2994 03:38:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:23 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1dc, 0x281) 03:38:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x7}}, 0x18) [ 1330.965713][T10190] binder: 10187:10190 ioctl c0306201 20008000 returned -14 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x5d}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20081) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x7, 0xffffffffffffffff, 0x869}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x200000d0) 03:38:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1dd, 0x281) [ 1331.136922][T10212] binder: 10209:10212 transaction failed 29189/-22, size 40-8 line 2994 [ 1331.176161][T10212] binder: 10209:10212 ioctl c0306201 20008000 returned -14 03:38:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40800) getuid() ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 03:38:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x42400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x3d, 0x7}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4003, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/69, &(0x7f0000000080)=0x45) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='cgroup.stat\x00', 0x0, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x21000000) inotify_rm_watch(r1, r2) r3 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='md5sumwlan0bdev+\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r3, 0x2, 0x6}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'rmd256-generic\x00'}}, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/236) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1f, 0x4}, 0x5}, 0x20, 0x0, 0x0) 03:38:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x1}, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x9, 0x35}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00', r3}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x10001}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000480)={r4, 0xad, "2c26b77b5b33fbd066e6f596ab248001c1be4ba4dbca99bc51b4c37769a6e3a895db9507df362da6f5df4195958203dd6ed29fa1b63951f20c6670c3082bf5a068c34f1c93a00ccc33c2e55a8619cc2001d6558ebb19e6937fa03a03fccbc52452de9382505405ecf11b7299a07c95020622afee7c9217d55bdd2d4380a125baf6bed7870e76892f759bfffa65fe17f50dbe2939b046c193d77af3638e487e00a4865f678ba8154a2b35be1b10"}, &(0x7f0000000540)=0xb5) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000380)=""/49, &(0x7f00000003c0)=0x3b8) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$binfmt_misc(r0, &(0x7f0000000580)={'syz1', "65dda4e624cfe3bd529eb9ca5e0f5b24a0203a7b6a855c31"}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000340)={r5, r6/1000+30000}, 0x10) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x200, &(0x7f0000000100)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1de, 0x281) 03:38:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x300}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:24 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:38:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8c3, 0x4000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={[], 0x17}}}, 0x1e) 03:38:24 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x36) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1df, 0x281) 03:38:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xd0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0xa92, 0xffffffff}, {0x7, 0x331d}, 0x8, 0x4, 0xfde}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0xffffffff00000000, 0x6, 0x8, 0x8001, 0x8, 0x6, 0x3c7, 0x3ca1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x2, 0x2, [0x101, 0xfffffffffffffffc]}, 0xc) [ 1331.435184][T10238] binder: 10235:10238 transaction failed 29189/-22, size 40-8 line 2994 [ 1331.474221][T10238] binder: 10235:10238 ioctl c0306201 20008000 returned -14 03:38:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x389}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x400003, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa, "ca776a10a24d643fef4a"}, &(0x7f00000000c0)=0x12) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r2, 0x8001}, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='hsr0\x00') 03:38:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) 03:38:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e0, 0x281) [ 1331.668418][T10256] binder: 10253:10256 transaction failed 29189/-22, size 40-8 line 2994 [ 1331.692835][T10256] binder: 10253:10256 ioctl c0306201 20008000 returned -14 03:38:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x0, 0x1, 0x1f, 0xc33, 0x73, 0x7ff, 0xff}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x109080) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r1}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7f, {0x7f, 0x51a, 0x3, 0x0, 0x7, 0x101}, 0xffffffff, 0x5}, 0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x9, 0x2, 0x4, 0x3, 'syz0\x00', 0x1}, 0x1, [0x8001, 0x4, 0xffffffffffffffff, 0x9, 0x8001, 0x6, 0x2, 0x100000001, 0x3f, 0x7f, 0x3f000000000000, 0x7ff, 0xffff, 0x200000000, 0xdd5, 0x1000, 0xbb7, 0x4, 0x8, 0x1, 0x2, 0x101, 0xfffffffe000, 0x4, 0x9, 0x6, 0x5, 0x56, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffa, 0x9, 0x10001, 0x0, 0x0, 0x7fffffff, 0x4, 0x2, 0x1ff, 0x9, 0x1, 0x7, 0x6, 0x200, 0x3, 0x4, 0xfffffffffffff007, 0xe4, 0x7, 0xfffffffffffffff9, 0x8, 0x395400000000000, 0x9, 0x7, 0x2, 0x101, 0xa67, 0x4, 0x0, 0x2, 0x2, 0x6, 0x10000, 0x5, 0x3, 0x2, 0x1ef, 0x100000001, 0x1ff, 0x200, 0x1f, 0x7, 0xb54, 0x9d34, 0x1, 0x3ff, 0x100, 0x3, 0x1, 0x6, 0x5, 0x1, 0x2, 0x80, 0x3, 0x0, 0x1, 0xba1c, 0x8, 0xc3, 0x100, 0x6d9, 0x6, 0x2, 0x3, 0x100, 0xd463, 0x2, 0x8001, 0x8000, 0x9c76, 0x4, 0x9, 0x133, 0x0, 0x78, 0x7, 0xffff, 0x3, 0xdd, 0xff, 0x6, 0x7, 0x98, 0x4, 0xfff, 0x9, 0x4, 0x7, 0x0, 0x7fffffff, 0x5, 0x9, 0x80000001, 0x56f, 0xfb], {0x0, 0x1c9c380}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f0000000700)="36400f09b934020000b800000000ba000000000f30c74424001c010000c744240200100000ff2c24c744240096000000c744240200000000ff2c240f20d835200000000f22d80f01df640f01cb470f01cac463754b14790f66b8c4008ec8", 0x5e}], 0x1, 0xc, &(0x7f00000007c0), 0x0) 03:38:25 executing program 4: r0 = gettid() r1 = getpid() r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x31d, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000001c0)={r3, r4}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r7, 0xb37, 0x1000}) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:38:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e1, 0x281) 03:38:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x395}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x80) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0xa, @sdr={0x34324142, 0x2}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1332.244198][T10270] binder: 10269:10270 transaction failed 29189/-22, size 40-8 line 2994 [ 1332.276318][T10273] QAT: Invalid ioctl 03:38:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x541100, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0xa, 0x2, {0x56, 0xffffffff00000000, 0x0, {0xffffffff, 0x7}, {0xffff, 0x3}, @period={0x5a, 0x42e, 0xffffffff, 0x2, 0x7, {0x8, 0x8, 0x1, 0x81}, 0x8, &(0x7f0000000040)=[0x40, 0xffffffffffffffe1, 0x4, 0x8, 0x5, 0x9, 0x80000001, 0x6]}}, {0x55, 0x1, 0x7, {0x7fffffff, 0x5}, {0x4a3, 0x9}, @ramp={0x0, 0x3, {0x6, 0x92, 0x4, 0x1ff}}}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1332.289391][T10270] binder: 10269:10270 ioctl c0306201 20008000 returned -14 [ 1332.304558][T10281] QAT: Invalid ioctl 03:38:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e2, 0x281) 03:38:25 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x1004, 0x7000, 0x0, 0x81, 0xff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x396}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0xc0002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x1}, 0x2) 03:38:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x9d, 0x8, @buffer={0x0, 0xdc, &(0x7f0000000040)=""/220}, &(0x7f0000000140)="3220ebe862695e5baeaedcbe452bd074268d6818bcc4bf527ad1c8ef9c3b3367373725ebe468b4dac212da687e214356a31a213aa1ff62b79d764a0f53c988ce8f961d2502a2549329a9de24f33eff1bc1f3bd9d20d4c6b99021d177689b360275b6cdcccfa32fad911c713e70fb63fca58522d2a7db892405aa04e50f3446f0d66c233626774f903bdeddd226dd7b41352b317c85892d2e577f33237a", &(0x7f0000000200)=""/102, 0x2, 0x4, 0x0, &(0x7f0000000280)}) [ 1332.469167][T10292] binder: 10288:10292 transaction failed 29189/-22, size 40-8 line 2994 [ 1332.502780][T10292] binder: 10288:10292 ioctl c0306201 20008000 returned -14 03:38:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x3a2}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:25 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200200, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x10, 0x2, 0x5, 0x10, 0xa, 0x449d128f, 0x1, 0x18}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) kcmp(r1, r2, 0x7, r3, r4) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0)={r5, r6/1000+30000}, 0x10) 03:38:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e3, 0x281) 03:38:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000840), &(0x7f0000000880)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000240)) 03:38:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0xf, 0x7bfcab62, {0x52, 0xffffffff80000000, 0x8000, {0x100000001, 0x4}, {0x7, 0x80000001}, @rumble={0x1e, 0x4}}, {0x51, 0x7ff, 0x7, {0x7, 0x6}, {0x9, 0x8}, @ramp={0x1fa, 0x3, {0x1, 0xfffffffffffffffb, 0x8e07, 0x7}}}}) [ 1332.659467][T10305] binder: 10304:10305 transaction failed 29189/-22, size 40-8 line 2994 [ 1332.684736][T10305] binder: 10304:10305 ioctl c0306201 20008000 returned -14 03:38:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f00000022c0)='/dev/audio#\x00', 0x6, 0x4000) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000002300)=""/254, &(0x7f0000002400)=0xfe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x1e, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9a, 0x2000) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x3ac}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr="9670966ae0c458acab60202658b87ee5", 0x1}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x412002, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) 03:38:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e4, 0x281) 03:38:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x418200) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x306, @broadcast}, 0x6e, {0x2, 0x4e24, @local}, 'vxcan1\x00'}) semget(0x3, 0x1, 0x2a1) 03:38:25 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1332.888607][T10324] binder: 10323:10324 transaction failed 29189/-22, size 40-8 line 2994 03:38:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x81, 0xffffffffffffff34) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) r4 = dup3(r2, r2, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000100)) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)={0x0, 0x2000000001, 0x2, &(0x7f0000000180)=0x80ffff}) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x80080) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000040)=0x8001) 03:38:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e5, 0x281) [ 1332.954446][T10324] binder: 10323:10324 ioctl c0306201 20008000 returned -14 03:38:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x680000, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/222) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000080)=ANY=[], 0x24) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000), 0x6, 0x0) 03:38:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x3c1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x802, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d90}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="d49d5ae3177d2d211bfd3ded5269c567"}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x684}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffe554}]}, 0x7c}, 0x1, 0x0, 0x0, 0xba888cda33499097}, 0x41) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) 03:38:26 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x20000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x12, "48a4dd8402dc0fd1cc61d58fa634077ea066"}, &(0x7f0000000100)=0x1a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x2, 0x0, 0x7782d9cd, 0x1f, 0x40}, 0x98) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x7, 0x3, 0x100000001, 0x0, 0x200, 0x4, 0x80}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x80000000, 0xa000000000000000, 0x1ff, 0x400}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 1333.134924][T10347] binder: 10345:10347 ioctl c0306201 20008000 returned -14 03:38:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e6, 0x281) 03:38:26 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4080, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x4) 03:38:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x80000080006, 0x0) ftruncate(r0, 0xfffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x919, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) 03:38:26 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x101001) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x11, @multicast1, 0x4e24, 0x1, 'nq\x00', 0x30, 0xffff, 0xd}, 0x2c) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={r1, 0x12}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x7ffffff2}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/20) dup2(r1, r0) 03:38:26 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) pipe(&(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e7, 0x281) 03:38:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x10000400000003, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/rt6_stats\x00') setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) finit_module(r0, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r3, 0x401, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9901}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffffef3fac3b}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x4000) 03:38:26 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x800) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1333.399081][T10370] binder: 10366:10370 ioctl c0306201 20008000 returned -14 [ 1333.433194][T10370] binder: 10366:10370 ioctl c0306201 20008000 returned -14 03:38:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x7ffffff8}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xac16, 0x8c000) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e8, 0x281) 03:38:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') recvfrom$inet(r1, &(0x7f0000000100)=""/100, 0x64, 0x100, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @rand_addr=0x4}}, 0x1e) io_setup(0x7f, &(0x7f00000001c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8f9, r1, &(0x7f0000000200)="9658d6d7c64c25fe240773b4d75019bcb1e13064d5063f30887d10356bd7f47c4803cee4a1463b9314bb37be8919e5f17ae9429a29f829220b3dd0be4dba40ee", 0x40, 0x4000000000000, 0x0, 0x3, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000280)="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", 0xfd, 0x6, 0x0, 0x0, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f00000003c0)="5005d159a71b05ce884eafe6dcc5702801070401f943b32562bc274d387b3de0dae9a4c1d87544d1a9779d0605e8e9c5b1a66d5c8189465287bb5361c77446579ea92748330ba1b23afde1d8f4f5ae74ee46716b5c8d22d32c4044a666490938998c674490335d6410fc71e3286e0434c2f7b4775e2188b631963b81d8c3d1bfb42610fe3e0d3f111a6f0e3a34cf966e30878cd466dfec4b28bfe5ea0d35db05b8e7b37211e3cc6e9b8ff343dd17a4201cbae43ae8c1f6fdc5376981875dc8002420fa2ad946335ee9f0cc51665028f0244da33f86dff3b2b16c09aba0c97c0486ea098d899e5e4069ddf095", 0xec, 0xfffffffffffffffa, 0x0, 0x3, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xffffffff, r0, &(0x7f0000000500)="b10c9e673a", 0x5, 0x1000, 0x0, 0x2, r1}]) 03:38:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000009}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x8, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001580)={0x0, 0x0}) getpgid(r3) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000016c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000005780)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x5}}) r6 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003e00)={0x0, 0x0, 0x0}, &(0x7f0000003e40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000003e80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003ec0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000003fc0)=0xe8) getgroups(0x1, &(0x7f0000004000)=[0xee00]) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004040)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000004140)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004180)={0x0, 0x0, 0x0}, &(0x7f00000041c0)=0xc) sendmmsg$unix(r1, &(0x7f00000056c0)=[{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001780)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x50, 0x4000}, {&(0x7f0000001800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001880)="d8d1f3034e4058ce02e706cf87055cf0b7f4a97152cd986538920c644eaed336fb674cf5ab93bb3b1820a08ffcdba85faecfb9d7df46cf9029ca5e2a5e0eca267dfeffb700329806c2b9b89a40a6be0a5791e7e1456673dc661b09d16fb8908a67b39d6c3343f0682d3b349ffe1e195c5ffde99cbe0216f95c4647b54c23309788f6f3fd95c43901e24a3bab71a18539d5693843c9626a433b9daa3770b26c9154cf96ceab7480653a28e256b68e8ef43c1df18e1e8bdbe17069994b1b8b3b43bc20ddb70bbaff8d712ef3c297d8c07bc2d0364f738ea8fafa", 0xd9}, {&(0x7f0000001980)="26f54aa93daffa7d2bd35da6b9673781625aa1168152b92162305c98bb9d7a1442277ff33f4b0bd55030413e325a0aff7d1f71d4d3897ffc539f139a87180651da7557b3f540d86746dca5e64d7d4f2ec042057c4eb127fba9a801dd50116d0cccbc522ed7561e5849871c4fbe8e58f9d031ac2369e6070be17cd5389b4d0d7cc6eaad9bcbacfe437a492f4ec07c54e18becce55fb1190a0278ac545b869f871ee5475fa013cf327c7c7622c67671372b2fe861a8da638d6ba369a1bf6026936584b0b04ce50d7e00800e68cde83a284ed99ccda1117503bbf5d73773e1ef2154b78b14a21edc94258e495ffd6de0e3eb53cd416a74a0166cce2a96dc192d58fc9b467704489cc4bdcf36a4a1a5b51b290711ea5c589fb9f235674ee2ed15d247ff21305844a482824cba6191c1212b6bdfa4cf75b4cd7640cedd10afe2a82b2e10b61194137ddfedd221bf0b22a25ec1ec720384ab32dcc4bfe19cb70d37a01bb71c0f6e8a20d933d052026ffafb5140e2dfbd68168c7e49a2efc996be018bfeb3a0b84f55ce9564b3a4bd720a21d958122da6490741d511113ae68e1cce0a28f5e23c9bc48073b33e3c5de6559f9f54d97b423cabb13d36d96578cf7c69171817c2403198c5e3808533c5cd5af9da9dd16566396b6321d467cdc4ca8e855113c7e23348dae83837eafc6a1b373bef13364d510480a8a88446fdef1451e945b61e6d35c0c9a47962a06e48cb7fd3d46314fee3dd97dcd96ae4637a6e7c592c164fc0273745c58a714a3bcae17102813b30ee74f2376d966b4ffad1682b65e2e41f93d08183804e31f0b7b4339f2ec198ba18724e97786518d851c16b9c5a84be269705ee7443158a0a8a4d233a854dd5b5c874148a1c470c39a9edcc37ac4f83b8e213b218d3e1714dc6d2ef375e095de5c0ede0d75593cf55fd4d2f027f3f70bd8d6d0a568db642db6f9fce631fba1e595db727ae443b0e434c016efd366c5b29fc58c7ae8135c5a8ae6151a50bf62a32da08de920983fb5dd8cd7aae32b64948ab2211094faad6676ca9dc9fcc9e1fe0bd31f461e4faa0e44f57f0bace5ac46a85ed74c3c32514fa79c465858914659e8006002457002cdc422db8f203396923d53bd8db05dd59695d316298a49805a31d7148ac4971704881bfbcd0926738c6459083dedb8324b49ff83f591f4136a160fe453199ed1c5c8783cd50e82b5cef211ccaeb6c36345f8cf37710a7739bd010e36e7e3e454ae1497d2a490cdd4d06f620c8b90cae83b69b3baefd63082f288857c88f9f14a05e6e66c597628c1a140755016eb74365e115087fd151412be2c112084d235266347826acf6132b613a58bc314887781b6045bc0c6a5e775f3ad7546f541cdad8b572351f6330fab9caeb296ead276e37900b5ad79c778ac876eef43962ee60bc014dfac6aa99f593f21d490684d59828ed4235ad804a13243facb28925f0fa0e7a733930ceac912c27deb19ed607d78550920f88a2cca11ade8a0e973c0cea45173e27bfe7f9c86fe7e6665c30d4816c7cb29cf6e8bfb59d76175a113c776fda12a3b44a289ec56f93e721c7f9bb0c8d7a9552f391355b304bc2fea497b4c71aa7c9eb7fd04ccdc36bf7483923f8af8f86ac2aee3cca480e2b7be868265f77ee8e88036704d04727b30919eb58cdc1155802a1f5e458fb36228655fc79d3c01bb7b28094ca561f77b2f8af864b52ad5cf071ab512243f8e139be6d465d8f83a1b54e01e3b8b9e230314e997d33359e28af98617c7d6c8ee07ab8dc00b430f6c434dd3a5d46cbf84855d3f94ab719214c2b910c6de654b85ee1a934f74abfe3eb74fea132e3eca53d108874511a6bc6a2acebd4ee3cc4c6d40630bd43a85a03356e1e0cadbb5915e9b5f09b07e6e6d341b1c11ab78c7609a91d29eac8312b8565bbd4a347b533741023638c2dd4519c5a43e70939c33cf453efa9e7561f09d7e8dfa84e4506da9e7f05879bd9ba751e3077e93c8414785270d0dd4fe482a578f80136690b8094030e53cc0fc733a9743c8e76c75c764606e888a15e5b8545ea1dacebd002ee0fb5da673f513168a0081fa8bb29a14c4de1ef88a6571dc4809d9ea67dabe46e0f90ffd75a772642fc134a4cf0ecff46c0d91ac89917190c57e5ec87065df8def976a2f7dfba3ab7f796e7e93d4d0bbe87e7eb0967dc366e198f55b4424e027101c5e2a7adea7d7eb2cb442120fb1b816b3be01474f7c87de5448c24e1fb381f377e91bf2f9f6a7b16919340b8e5992546218cd8aa3a0de657a2e48fac97b5518219fbb666206fadd95462b7e1822391d867a3cce5fcb21ede5006cd7d17d7e664692c32a138cd6df69f387adf20e111b7e56cf9042ed7d694ba357e9f99147decd84a57472970b91411f5aaae2d41bb46318925addd3c4e937396d032b0effb3bb59acfba69580681d354b2ffef7138393001ad55e3e8f62fcabfe9843af9ee0a014de6c0ef8b166410144ac15be8bea60dcc7bcfb2ad75baea91c25057e1cf8de88c13e2747fe6cd7d4dff390c4251ca3fa9294dcc341e88135e9a69d21751ce0faad3a8fe17891b668fd75f93604669f2ffa114e4380d026480823314a3c5739b6d2eadf23b0e0c0de424865e78a4ae17f94a8b30539b71dad6607b163c651d8e7750c1f4e1271793ce859c0a7e1a09d10ba4eb5d6b2f81b4c951592466103705783c3137071de5810cf2926b54acad386f5cffe4e127612bfd56778cdc4a2791ab6d941c15beb9e66bf69947259a7785f564420f5a9c3e89ddca4df5d2853f5654ecb1cbb19ddafdc77de97c841cef9fa544b7107851ee6aa2fd0134f64bc6a84589493fae5e0460329916185f72407ae22b26a562309f6c115aa3dcec8cb1a461887b86f656e9f7691899bcce37d676713d723df9b5c0eb1a29cf3bfa5207a496e87a8f24d42697bc19c40b1e5543bd88413ac6b2a826aa0cfd8344017fe759ca5a183b3734105ca1817f326b64ae8e640645c70e92e3f894fa828f2d621b410fc904c5e84b3259b403bd76c4c45cf897ef3d0852faa67d4800c3ae8b8fdffc78a99f68dc2dead5d5fa4c74b5c15c1729fd3409b4fc5271a5eefdda7a8c2b3ef79efc5a6ff7b8f46cb63c10b2226ba47a459792026d51ae76189e4e98a7a4733c6b94b1bd23e0a131cf5c7187aaecd3233ae963ea8ffde1cb4485c152e8760bc2467d847e6ee116e5822df246ae3133a149b81106431839eed2322a863c4a8ad22944976e86429506cf77f58822be3ada1f55b7c589ca70d79bd979a809fd71463b96ca348b9925ae0a19306423821941fccc637554aed6714054cdf9186691a44920c5dd26b84af4de596bf2a78da3c59a0cb5b0f21ea22ef1d96101f95d2aa2467ac5addc0021e7ce06c4e0f7a1c46a5d9538d4706e90e42dd5d4d892c3f7dc30dd54916e613644a7a433e4e572df9d9d9dd765ee826b68190ef04a296cc945d7ff7f17b0fa46a63c4d667f1894148982cf4ff5d1d29f64d7cc7885cfa0e3053c3a88b919f1202402230c58a278a02827c90fd14ee8b9f29ae3b291ceb0651f5471f081d000fad46dafea6e0020e568b23b6eabef9aee6d5d0efa4c6e4fdc913565cddfc0298430781957c50db24fff14389f339d00106f54b55a7ab78913278beb0745a08791feb1085d96879992b60d4c1f1c12f63c12bf4f0f8c3adbc7a28b2c7ac179c4e16f9758a430398358bccaee92f67c82d99598ab35f8a45bef2c4121030c9ae987cab8bea798d86fde681474648b7ec72a5bb709f126f8ac48ace4dcca1cfb081aaaa828e42a1c404c4907079ffcc8187e23c7eba5a3dc4f4d29b5c8d50b763b33fcd74b6a64e8a7c0cf9b9efe01fbb99f3128bb6ad89a59a3ed8e48b79b282b9693225e813cd2c848c232449d836f873920e7a0ae8c389ef159b780a52dcc14cea44f0f9983edd5ea52536e26ece451b6e9c2481a66993f1884551c9b5664d3f794a97dc11ca812ba2238c7683b316e9f9ccec6b1ff7970febb83d5e5c3144e31dfbbd63d05579aac5e10efd597438252d674725b461c936bd93381ca7e0d39dbce40b185adbd7e7d115aac32bdd9a3a3b3a1c1ded08ac45581f1624d19490199991d8e3368b6ef35fe81f8f69cd71bb113943256b19659b609fedea8e01494652464f76e24a901fe356948422ebbc1895b0f66220c90bde48569dce4b6b5030d5c7d33de5d217014d7366b89c72a186a35d6384d53b2134a173a514cca122d915d37fdac627a6ec3f182c71d27f9b91fb478f72713f0daa489af86d60bf495dbe0d52b95940f083c8ef79ee693b0377cd7b33f49b2f0a72bb251c275e7e72af7e32728c7330aadc89b5395027d28f448df5111f380cd8b17f66cb180822c5182a1bfcb2f647829a9167483a724abde30ccc37e67fbc5ccb9f0d00161b5a83e56b0765ee05b76f1fc2e14923daa08eb9738cd3afdf3ed9a0fb287287bf2d75de42bdcf986ec92cab379ba9095ea196970fe4e7808eae1ca16b1e9994e9714690a722bf1c8ee4b290fb3560dfacbd640b724637473a90070a47961d419cbe39d3110a3a3965b8fe96abf73fcc351498ea89607b33c82b900ac55f8397824a0a1e312e47dd125c3907b6e8baedcbb813c8958573914950eb30bb8de5cd418300463b7ed5d2143644d13bb813f839e1462b9a3cc8acf71e34c31e257cc9a5cdee42444132da4226ac176b7514fd47191765c20ae9201619cbe9b56e40b302aa8cf977b2dd25ed659165d5a3afa34e01965827a526e5758037983609719b163497a727fcc5cf255d1a02f0d6ef6fe46075f2828f890c5799a9f76513abff8928e007040b69e579616a7bc3889ef53ad6176faa2e29ef8f05d8186475fa063ba284b492cc48b8d60858e282791bf308219774f8ef48747d571a7023345108bf7f5b20ef7d5f92231177d920f259491e36f9750d2d28284112fe56b6c11c1160c62d327b6243b1be361ef0f2e5eeec65f3061c577453b2f677f799a6a4d348ee14ff660ee4fc55dcd96fcf86501107b8fe9c96f632e0f69b1f148c28d8865f638a111cf36e79ae7e0e20813685dd193c4753919fa8c60815645b4d8a118ae19f69f32d3941e4af47bc060b02e1e013329e3b874006244f65fb0fd9ffce100f62975e5465795f80256603ff87aff8dbd619ab64235bf161ff2fcfd6270dfe4eee5710f324f51cfd3c027632ac9f63d2d2186c6dfc162ba2f25213e9e18fa0a71800ee418aa7e11f36129f6a7fadaf6d51f8869080c9b3c77432d3f8ef8390364d8c07027b5edd4e2bed77dc516d572ba94d39ceadc22c3fd1fcb27301927a197694153c32ddc696f16ebe36f260cb7bb2f65d3c1662e3d25fdad8890f8c7ad75eac84ae3f1691e297a908f3ce07838006531f72ac462c37e5e4e4b765a491adc6f2d2ada1316b46ae9ab6c08468a4bb73fc749b7c6ea142da0f18e6e1ba1c5f64466584bfe785d9644e6b113544fe559ab23188b2acd32d0033ecc198e7af219733e5770516d93985a9cd4a9113c64af1a9c3f8902e25569e5929222504799da8c55bf0a655353488ab473b4c3b0a456705bcd2fd0d15321608ec2ba1ed52667d5e11e320da3b180783b7e88c9132efa8ae5816e7b18c569f6daad574f148c6a1e8a0ae8c4699d8258f34c4cedff37597c27e8992056b35e8d4e4dcf0fc6ce05489543dd916a8a6a03b7876fba088b4ef8e03bf6b5bcc569cca8622abec66071e36aaf0095e1bb9dab7bc5b032a7f82f9f5207d9d878b0e3ab1192c28", 0x1000}, {&(0x7f0000002980)="ff62740ef00bd84f495dbe04a9beeeb0e4c068e0dbca59ad58adf16c82a0790582a02eeffebf1f5f78f8000bcbd0a682536a63bdf913997b505ce812b5098ded6a99", 0x42}, {&(0x7f0000002a00)="af01b0076f027311aaef672033c9dca9e60c74589936f52318722ad402c5b7660adca464bedb5fa7031db5e5fb57fb986d5d4b98e3f8d14dd61ca9af5a33f514e2bd5cee1c13ee0d81018405b8e552ea4529a014175cb6b69da195860702be8f4631b2bda36d31856ccc1fe0", 0x6c}, {&(0x7f0000002a80)="097ea79808f5665cd1cd2de1cca7b5a27eae02a8375e07917b53cf3ff9c0f7515304b89af8b3245a059b48a0b5decf8e664c7b03683c3506d05b5ab800a4c72ab9bc268fecadafacdf9461cc0e00f89cdb7bd6b6fbb18e6b997f4cb990393022d11c4aa94cfbd0c09724d86544f9fd9abda2604b1b16e3e3cd4d1b2bfbdfdd4552e1927f3951820f9745a7052ed818a2d48af531245850b71939899441890cc58699e6e794eb276718a357b65af2e16a0d152cba0f0e5aba5dc7d3e526489e4125074cb6", 0xc4}, {&(0x7f0000002b80)="bd19c46381fb4b8017e21e46c29a03f52e164c2cb65ce1e3e6a1e810bd90dadeabd6bca298b7ea30eb68c37eae4ae162eec97de7923f4a0093ecb59cd00ce6c59336fe0a74e53c3df3193fb230444f31b298dc1395e78979b3b093e019b0248aa87fcdb94c9d0ba4172b8f1dc01eb09cb0eb388af04e0ef4b73ff3a31b711212a9f71921fba0a152547153954b1f21717e8bd209f88e8c898ba147b0be8ae08e7e670660a0", 0xa5}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="32bb0da2e40f196ef367d86b11c36aa5c84cfda8765ac4f9b69149d06ae26ad382ec56ef5e83ddfd213423c6ea2274cd34a29680b55b043405a2865eb6f24068a9abcecefa9ce7ce164dfe0412d53edf19662b11193be8588072ca02deb640a8ac85f28f749460a0c66083b86842fe99d740", 0x72}], 0x8, &(0x7f0000004200)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00000093ae7e1800000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x10}, {&(0x7f0000004380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000004400)="c0559130dd0af4444c1808c464d8dc06db7389c86279b748fdce6cacf5609734e52d875b949c9c42556a8bfb292cec9cbb8853a34791251a879a75ffbb73d47edc868ee48120a5699062e0d15972b314d4", 0x51}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000005480)="225deb7ef2c75afcd460888017d1f472ae3e080f7fdf163391e4c368ea30e73001f33ab8291aa6e749c14e33905836", 0x2f}, {&(0x7f00000054c0)="ee8b4ee5b5c604d58f95680f9e50b7fa1be54be33994ca26dcafed257b3e14b6f79b", 0x22}, {&(0x7f0000005500)="055d4aa3480954f2fa3f21791dd171af3e91e033da114a765fa0d70dc7dca9a24a80981e27911076910065e5c9086dc93e87d3e4920673235ab963677c14b776fc95f1d9764e9e9d686ebb08ff49881c9668c68cf23aa4843963ed5bd5f97cb2d7b64345fbe017fb5d7f114caa60fdf04d637924d4a41e54cca1e789b3a2da", 0x7f}, {&(0x7f0000005580)="f9f17542376090aa31a42e2f9adc984c3b180380cfbb89f69f9a0eaf1c5fe2d2ee386eaab776b50299519c3bb69b6c2daa5cc3e427affaade5e0ab0bde4571c50bcd73ade11166f8bf2d1105923befbcff3a91d45c26c11967055ff015eaed81e2a5e13a09059febb3c5a5cfc2346c3734904afa15eff66024163ef4f244b81e47b4bb77f18c6827dac72d3c6d9f3aab1eb74395af69b30f57423f9f572e5191d260a99b9fac", 0xa6}], 0x6}], 0x3, 0x4000080) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc//net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodes\xb1J\x88tt_c', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) memfd_create(&(0x7f0000000080)=')proc\x00', 0x5) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x800, 0x0) r14 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x2, 0xc4b}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r14, 0x84, 0x1a, &(0x7f00000001c0)={r15, 0xd2, "00b3aa0a9daa122cfefa12e0c87f24c9dae355214c07954e7288feed5c1cbb3b09964fcb5558832c65c3211db5d22bcfcaa9d9d21678e5eea655ff29afcca64dfcc50d3c3252543100e946bbeb1423a482f6d4e5f1036d87ab6f599d668a2a678216ea9a4a01e54034f1421be4fe8a14aecd561e604acb688fcb4c109d10cbea603171621a91393f4829e7dfec59a5fc19ef67efff2ccffe6aeee95214aca0714e423c047678f1b3ead06b92bd24ba6b9e8996c354693f06921cfbc66da6b1973483c8c23c5c3c9073d11228b0079fd2c4a8"}, &(0x7f00000002c0)=0xda) [ 1333.649291][T10393] binder: 10392:10393 ioctl c0306201 20008000 returned -14 03:38:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x7ffffff9}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={0x0, r2, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r3, r2, 0x4}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0xfff}}, 0x18) 03:38:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x5, 0x1, 0x9, 0x3, 0x92, "517407ad9c80655a6eef33f74cadea8261182e4f1bc322fe0cc21c7c1a071e9eb7679c85ca91cb21e0742093e4d15ea0102a5c64a20d1d01d882b688f75a9a140a733852ab949a6266da98cd046726d0eb38c9cf5e79a271209819023c663955d6266abb3b284582c2169aabc2e9fcb6ac14b0e4e54e1e78a802243712b9dc48eba25cb2fdf6fa8d05ba5d31028a76dbfff1"}, 0x9c, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1e9, 0x281) [ 1333.823577][T10411] binder: 10410:10411 ioctl c0306201 20008000 returned -14 03:38:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = getpgid(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x6, 0x5, 0xed0a, 0x2}, 0x6) setpriority(0x2, r1, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x111000) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000040)=0xf57, 0x4) 03:38:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x2}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xe) 03:38:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ea, 0x281) 03:38:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x50, &(0x7f0000000040)}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='+,cgroup$\x00'], &(0x7f00000001c0)=[&(0x7f00000000c0)='em0selinux@\'ppp0\x00', &(0x7f0000000100)='vboxnet1^\x00', &(0x7f0000000140)='mime_type^\\\x00', &(0x7f0000000180)='\'\x00']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip6_tables_matches\x00') fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000002c0)={0x3, @null, r2}) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000300)={0x1000, 0x777b5f5f, 0x3, @stepwise={0xffffffff80000001, 0xbe, 0x6c4, 0x7fffffff, 0x800, 0x3fe1}}) [ 1334.012005][T10427] binder: 10420:10427 ioctl c0306201 20008000 returned -14 [ 1334.024273][T10427] binder: 10420:10427 ioctl c0306201 20008000 returned -14 03:38:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x3}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1eb, 0x281) 03:38:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) 03:38:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) 03:38:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() sendto$inet(r0, &(0x7f0000000180)="4ff368d4ef2a64ccec9586d95f8f1bac77fa53439bd7cae32337aa4bd07bc715321a0039e0e2b3904d5fab24f1ef8e14e0dabcb25b7f9e32b0e31ed9d27debbb618e0342cf306437b0118a70e4718c2878b6f939a10dc386b105859336650240b390125305cc74b4ec907418b4c5c939a83fc8c5b36c75a14ae64cee1cca0091fdeb428c687367fca578726cadc7077e887015aced8c306d63160fa00ed602ca6cacfea65cb7601905a8b71b722a600cdef497e57965387ef4414dc47d8cd7b06094444d3a6f10d7eef6e6c1eea9392c5ff4cdbe83a024c9164c7fbf", 0xdc, 0x4000, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x4b, 0x9, 0x319}, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000140)={'vlan0\x00', @ifru_ivalue=0x4}) shutdown(r3, 0x1) 03:38:27 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200881, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) [ 1334.218809][T10444] binder: 10440:10444 ioctl c0306201 20008000 returned -14 03:38:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x10002) getpeername(r0, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000200)=0xffffffffffffffbf) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ptrace$getenv(0x4201, r2, 0x4, &(0x7f0000000080)) 03:38:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ec, 0x281) 03:38:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x210042) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000002c0)={"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"}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x180) ioctl$KDSETLED(r2, 0x4b32, 0xffffffffffffffe0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000006c0)={0x4, 0xf000, 0x7, 0x8001}) set_robust_list(&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x2, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) [ 1334.455485][T10466] binder: 10461:10466 ioctl c0306201 20008000 returned -14 03:38:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) 03:38:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ed, 0x281) 03:38:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x5}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:27 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x4200, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000540)=""/41, 0x29}, {&(0x7f0000000580)=""/36, 0x24}], 0x7, &(0x7f0000000640)=""/103, 0x67}, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x101000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x6, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 03:38:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1334.636460][T10483] binder: 10479:10483 ioctl c0306201 20008000 returned -14 03:38:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() sendto$inet(r0, &(0x7f0000000180)="4ff368d4ef2a64ccec9586d95f8f1bac77fa53439bd7cae32337aa4bd07bc715321a0039e0e2b3904d5fab24f1ef8e14e0dabcb25b7f9e32b0e31ed9d27debbb618e0342cf306437b0118a70e4718c2878b6f939a10dc386b105859336650240b390125305cc74b4ec907418b4c5c939a83fc8c5b36c75a14ae64cee1cca0091fdeb428c687367fca578726cadc7077e887015aced8c306d63160fa00ed602ca6cacfea65cb7601905a8b71b722a600cdef497e57965387ef4414dc47d8cd7b06094444d3a6f10d7eef6e6c1eea9392c5ff4cdbe83a024c9164c7fbf", 0xdc, 0x4000, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x4b, 0x9, 0x319}, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000140)={'vlan0\x00', @ifru_ivalue=0x4}) shutdown(r3, 0x1) 03:38:30 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xfffffffffffffff9, 0x4, 0x2, 0x7, 0x1, 0x0, 0x4, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x1cb, 0x10}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x208000000007, 0x34, r0, 0x2) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc4000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:30 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ee, 0x281) 03:38:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1337.347955][ T26] audit: type=1400 audit(2000000310.280:374): avc: denied { getopt } for pid=10495 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1337.353733][T10494] binder_transaction: 10 callbacks suppressed [ 1337.353756][T10494] binder: 10492:10494 transaction failed 29189/-22, size 40-8 line 2994 [ 1337.403404][T10494] binder: 10492:10494 ioctl c0306201 20008000 returned -14 03:38:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/65) 03:38:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x379c4b282d8b3b8b, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x1) ioctl$FICLONE(r0, 0x40049409, r0) 03:38:30 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1ef, 0x281) 03:38:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:30 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4a3de288af2c823456c43c323051385450cb8ffe5fb09721cf073dd8870dd3e8d188b2146e448ec3b78b70279b4be0d4762b96c30b63f94c323e4a72eb7703e8ee1ea4865d7ea561b1e9aa52527a2ef5790445750d9989f92c47f7d81d257cd1832375baabce2ade47910a99d938d6529b46c5dee043fafbd9864ca2868fb6616bf30f5036aa68087da81692316ef82711187e2a2d", 0x95}], 0x1, &(0x7f0000000140)=[@iv={0x108, 0x117, 0x2, 0xed, "7853ea169aa77c41f99265237dcc3c2b96cdb53dd810bd640c3e56cd4015aedb06cecdc18c5acf86c0d43eb5d41befb2cc408ee8d933e82033bc4e100c4c2e9747365be261519711a0185f2efe0ed7384aacf6be49fcb2cb7b287f5acea17b23ce209f005f9b5111259b6189d5715b18faf753752c1e20e19a2c5e7c3ac7af7244cd27664de8c019eda08a74d77e3ce96e844ea300913d6e33148879078b2ad1dc9015c5efc6da6f35ce4f6b8c2abab9b5f14f4aebc1a192fb328a5a08b5ab034cc4dad4d8575e0dffef17830af99e7380b9b8f28fc5a3abc50a6146b737f5fd8d9745891c8b77c7e44d7d5612"}], 0x108, 0x1}], 0x1, 0x4000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() sendto$inet(r0, &(0x7f0000000180)="4ff368d4ef2a64ccec9586d95f8f1bac77fa53439bd7cae32337aa4bd07bc715321a0039e0e2b3904d5fab24f1ef8e14e0dabcb25b7f9e32b0e31ed9d27debbb618e0342cf306437b0118a70e4718c2878b6f939a10dc386b105859336650240b390125305cc74b4ec907418b4c5c939a83fc8c5b36c75a14ae64cee1cca0091fdeb428c687367fca578726cadc7077e887015aced8c306d63160fa00ed602ca6cacfea65cb7601905a8b71b722a600cdef497e57965387ef4414dc47d8cd7b06094444d3a6f10d7eef6e6c1eea9392c5ff4cdbe83a024c9164c7fbf", 0xdc, 0x4000, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x4b, 0x9, 0x319}, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000140)={'vlan0\x00', @ifru_ivalue=0x4}) shutdown(r3, 0x1) [ 1337.559109][T10512] binder: 10511:10512 transaction failed 29189/-22, size 40-8 line 2994 [ 1337.616227][T10512] binder: 10511:10512 ioctl c0306201 20008000 returned -14 03:38:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000740)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pipe(0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='security.capability\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x2000005) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x25) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:38:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f0, 0x281) 03:38:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) sendto$netrom(r1, &(0x7f0000000040)="c557b292a0607c38cf9bd790187c9806dbac45609e77023084e292b20bba", 0x1e, 0x20000000, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0402, 0xb0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x91, 0x80000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x3f, @broadcast, 0x4e21, 0x0, 'ovf\x00', 0x6, 0x1, 0x5}, 0x2c) 03:38:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x12}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1338.258930][T10532] binder: 10530:10532 transaction failed 29189/-22, size 40-8 line 2994 03:38:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8000) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_setup(0x6, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000040)=0x0) io_destroy(r1) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x2042) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x7fff, 0x0, 0x10003, 0x6a610110}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x48}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f1, 0x281) [ 1338.322801][T10532] binder: 10530:10532 ioctl c0306201 20008000 returned -14 03:38:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800000000005, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x63}], 0x13f8) [ 1338.416142][T10539] print_req_error: I/O error, dev loop5, sector 256 flags 80700 [ 1338.467546][T10550] binder: 10549:10550 transaction failed 29189/-22, size 40-8 line 2994 03:38:31 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x181) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f2, 0x281) [ 1338.520683][T10550] binder: 10549:10550 ioctl c0306201 20008000 returned -14 03:38:31 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp(0x4, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4c}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1338.665264][T10559] IPVS: ftp: loaded support on port[0] = 21 03:38:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x6) 03:38:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f3, 0x281) 03:38:31 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 1338.740901][T10573] binder: 10572:10573 transaction failed 29189/-22, size 40-8 line 2994 [ 1338.779027][T10573] binder: 10572:10573 ioctl c0306201 20008000 returned -14 03:38:31 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) 03:38:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x60}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:31 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x181) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:31 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x40080}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffdb1}, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read(r2, &(0x7f00000003c0)=""/128, 0xfffffffffffffc6a) 03:38:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f4, 0x281) 03:38:31 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:31 executing program 1: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10001, 0x200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0xffffffff, 0x2}) [ 1338.969119][T10590] binder: 10589:10590 transaction failed 29189/-22, size 40-8 line 2994 [ 1338.998514][T10590] binder: 10589:10590 ioctl c0306201 20008000 returned -14 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f5, 0x281) 03:38:32 executing program 4: 03:38:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x68}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1339.091139][T10599] IPVS: ftp: loaded support on port[0] = 21 03:38:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x44000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xa2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x3ff, 0x180, 0x80000000}, &(0x7f0000000100)=0x10) 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f6, 0x281) [ 1339.176637][T10610] binder: 10609:10610 transaction failed 29189/-22, size 40-8 line 2994 [ 1339.212132][T10610] binder: 10609:10610 ioctl c0306201 20008000 returned -14 03:38:32 executing program 4: 03:38:32 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x181) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6c}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f7, 0x281) 03:38:32 executing program 4: 03:38:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f8, 0x281) [ 1339.450522][T10626] binder: 10623:10626 transaction failed 29189/-22, size 40-8 line 2994 [ 1339.485782][T10626] binder: 10623:10626 ioctl c0306201 20008000 returned -14 03:38:32 executing program 4: 03:38:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x74}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1339.558590][T10636] IPVS: ftp: loaded support on port[0] = 21 03:38:32 executing program 4: [ 1339.645158][T10642] binder: 10640:10642 transaction failed 29189/-22, size 40-8 line 2994 [ 1339.678253][T10642] binder: 10640:10642 ioctl c0306201 20008000 returned -14 03:38:32 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x181) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1f9, 0x281) 03:38:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) 03:38:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7a}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:32 executing program 4: 03:38:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1339.859441][T10656] binder: 10653:10656 transaction failed 29189/-22, size 40-8 line 2994 [ 1339.896804][T10656] binder: 10653:10656 ioctl c0306201 20008000 returned -14 03:38:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1fa, 0x281) 03:38:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) read(r0, &(0x7f0000000000)=""/107, 0x6b) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 1339.922559][T10661] IPVS: ftp: loaded support on port[0] = 21 03:38:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x300}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) 03:38:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1fb, 0x281) [ 1340.058323][T10669] binder: 10668:10669 ioctl c0306201 20008000 returned -14 03:38:33 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x401, 0x181) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x500}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:33 executing program 4: accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4]}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhci\x00', 0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000640)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 03:38:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1fc, 0x281) 03:38:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1340.265321][T10684] binder: 10680:10684 ioctl c0306201 20008000 returned -14 [ 1340.278289][T10685] IPVS: ftp: loaded support on port[0] = 21 03:38:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x600}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1fd, 0x281) [ 1340.540655][T10692] binder: 10691:10692 ioctl c0306201 20008000 returned -14 [ 1340.585289][T10692] binder: 10691:10692 ioctl c0306201 20008000 returned -14 03:38:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) getpeername$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x1fe, 0x281) 03:38:33 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') 03:38:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x700}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1340.899523][T10705] binder: 10702:10705 ioctl c0306201 20008000 returned -14 03:38:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x201, 0x281) 03:38:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1340.942872][T10708] IPVS: ftp: loaded support on port[0] = 21 03:38:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x1200}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x300) write$selinux_validatetrans(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6f62dac7495dec8cc26a6563745f723a62696e5f743a73302073787374656d5f753a6f626a6563745f723a73657466696c65735f657865635f743a7330203030303030303030303030303030303030303034202f7573722f7362696e2f63757073640076f48d8049e06468a8072da3f1deaa10e4b95ba8a0ca4f70f5da2c8a074a1bdc9dedb36499fc7cf156415dcbb474899d8cc6ff874d97409e700580a57b47aefb1d34266eab16a035087ae208edffdf43cefffedb9418d99c91173fda17f2e01322cdef22d5e4258c12d27adea5948c609a72"], 0x65) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:34 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x202, 0x281) [ 1341.114819][T10720] binder: 10717:10720 ioctl c0306201 20008000 returned -14 03:38:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1341.170478][T10724] input: syz0 as /devices/virtual/input/input9 03:38:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x2000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e23, @broadcast}, 0x18, 0x0, 0x0, 0x0, 0xf7, &(0x7f0000000040)='ipddp0\x00', 0x6, 0x3ff, 0xfffffffffffff800}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x81, 0x60440) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) [ 1341.271882][T10730] input: syz0 as /devices/virtual/input/input10 [ 1341.305540][T10735] IPVS: ftp: loaded support on port[0] = 21 03:38:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x203, 0x281) 03:38:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1341.343657][T10737] binder: 10736:10737 ioctl c0306201 20008000 returned -14 03:38:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4800}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000000001, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 03:38:34 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x204, 0x281) 03:38:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1341.554630][T10748] binder: 10747:10748 ioctl c0306201 20008000 returned -14 [ 1341.585077][T10751] input: syz0 as /devices/virtual/input/input11 03:38:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4c00}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:34 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) flistxattr(r0, &(0x7f00000000c0)=""/5, 0x5) [ 1341.660899][T10758] IPVS: ftp: loaded support on port[0] = 21 03:38:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x205, 0x281) [ 1341.712516][T10764] binder: 10763:10764 ioctl c0306201 20008000 returned -14 03:38:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1341.804026][T10764] binder: 10763:10764 ioctl c0306201 20008000 returned -14 03:38:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:34 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:34 executing program 1: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@mcast1}) pipe2(&(0x7f0000000000), 0x80000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 1341.871859][T10774] input: syz0 as /devices/virtual/input/input12 03:38:34 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x206, 0x281) 03:38:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1341.958605][T10778] binder: 10777:10778 ioctl c0306201 20008000 returned -14 [ 1342.006206][T10781] IPVS: ftp: loaded support on port[0] = 21 03:38:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x207, 0x281) 03:38:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6800}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1342.080472][T10785] IPVS: ftp: loaded support on port[0] = 21 03:38:35 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 1342.175255][T10790] input: syz0 as /devices/virtual/input/input13 03:38:35 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 03:38:35 executing program 2: getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 1342.279439][T10797] binder: 10792:10797 ioctl c0306201 20008000 returned -14 03:38:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x208, 0x281) 03:38:35 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xfffffffffffffff9, 0x4, 0x2, 0x7, 0x1, 0x0, 0x4, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x1cb, 0x10}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x208000000007, 0x34, r0, 0x2) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc4000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 03:38:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6c00}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:35 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 1342.429081][T10805] IPVS: ftp: loaded support on port[0] = 21 [ 1342.448476][T10807] input: syz0 as /devices/virtual/input/input14 03:38:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x209, 0x281) 03:38:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1342.541953][T10814] binder_transaction: 12 callbacks suppressed [ 1342.541973][T10814] binder: 10811:10814 transaction failed 29189/-22, size 40-8 line 2994 03:38:35 executing program 1: memfd_create(&(0x7f0000000000)='\x00 ', 0x0) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0x0, 0x200000, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000000080)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x4, 0xf802, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x9) pkey_alloc(0x0, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1342.620774][T10814] binder: 10811:10814 ioctl c0306201 20008000 returned -14 03:38:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7400}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1342.725305][T10823] input: syz0 as /devices/virtual/input/input15 03:38:35 executing program 2: clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:38:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20a, 0x281) [ 1342.830684][T10830] binder: 10827:10830 transaction failed 29189/-22, size 40-8 line 2994 03:38:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1342.870919][T10830] binder: 10827:10830 ioctl c0306201 20008000 returned -14 03:38:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7a00}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1342.976470][T10832] IPVS: ftp: loaded support on port[0] = 21 03:38:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1343.206633][T10840] binder: 10838:10840 transaction failed 29189/-22, size 40-8 line 2994 [ 1343.234537][T10843] input: syz0 as /devices/virtual/input/input16 [ 1343.263643][T10840] binder: 10838:10840 ioctl c0306201 20008000 returned -14 03:38:36 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x1000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:36 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000054c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a000000000000000b4700e50000070000001f00000000e5002500000000000002000100000000be000000020000627c05000500000000000a00000000731f65000000ff170000000000f690b9a7008807a4cbadbed30200"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000000000000de0005001a0000000100041727fbb0fde70100000001000000530b2000000000ffffac1414b206000102"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20b, 0x281) 03:38:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1343.437113][T10852] binder: 10850:10852 transaction failed 29189/-22, size 40-8 line 2994 [ 1343.459303][T10852] binder: 10850:10852 ioctl c0306201 20008000 returned -14 03:38:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x2000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20c, 0x281) 03:38:36 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1343.691512][T10868] binder: 10866:10868 transaction failed 29189/-22, size 40-8 line 2994 03:38:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20d, 0x281) [ 1343.752222][T10868] binder: 10866:10868 ioctl c0306201 20008000 returned -14 03:38:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x3000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:36 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20e, 0x281) [ 1343.982839][T10889] binder: 10885:10889 transaction failed 29189/-22, size 40-8 line 2994 [ 1344.020716][T10889] binder: 10885:10889 ioctl c0306201 20008000 returned -14 03:38:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x20f, 0x281) 03:38:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1344.256966][T10908] binder: 10904:10908 transaction failed 29189/-22, size 40-8 line 2994 03:38:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1344.315477][T10908] binder: 10904:10908 ioctl c0306201 20008000 returned -14 [ 1344.368100][T10908] binder: 10904:10908 transaction failed 29189/-22, size 40-8 line 2994 03:38:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1344.414042][T10908] binder: 10904:10908 ioctl c0306201 20008000 returned -14 03:38:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x5000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:37 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:38:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x4, 0x20}, &(0x7f0000000380)=0xc) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x210, 0x281) 03:38:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 1344.601766][T10929] binder: 10923:10929 transaction failed 29189/-22, size 40-8 line 2994 [ 1344.634653][T10929] binder: 10923:10929 ioctl c0306201 20008000 returned -14 03:38:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x211, 0x281) 03:38:37 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:38:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x212, 0x281) [ 1344.839197][T10948] binder: 10942:10948 transaction failed 29189/-22, size 40-8 line 2994 03:38:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600045}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="f03a237a828e16fb73090440ba326cf0"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1344.909475][T10948] binder: 10942:10948 ioctl c0306201 20008000 returned -14 03:38:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x213, 0x281) 03:38:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1345.102969][T10965] binder: 10962:10965 ioctl c0306201 20008000 returned -14 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1345.151878][T10965] binder: 10962:10965 ioctl c0306201 20008000 returned -14 03:38:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x12000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x214, 0x281) 03:38:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1345.338180][T10982] binder: 10980:10982 ioctl c0306201 20008000 returned -14 03:38:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x20000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x215, 0x281) 03:38:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1345.593898][T10997] binder: 10996:10997 ioctl c0306201 20008000 returned -14 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x216, 0x281) 03:38:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x48000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x217, 0x281) [ 1345.832959][T11018] binder: 11014:11018 ioctl c0306201 20008000 returned -14 03:38:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4c000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:38 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x218, 0x281) [ 1346.062262][T11036] binder: 11031:11036 ioctl c0306201 20008000 returned -14 03:38:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x60000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x219, 0x281) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1346.287747][T11053] binder: 11050:11053 ioctl c0306201 20008000 returned -14 03:38:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x68000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21a, 0x281) 03:38:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1346.502792][T11069] binder: 11064:11069 ioctl c0306201 20008000 returned -14 03:38:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6c000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21b, 0x281) 03:38:39 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) [ 1346.663540][T11078] binder: 11076:11078 ioctl c0306201 20008000 returned -14 03:38:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x74000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21c, 0x281) 03:38:39 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1346.881831][T11097] binder: 11095:11097 ioctl c0306201 20008000 returned -14 03:38:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7a000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:39 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4) 03:38:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21d, 0x281) [ 1347.014241][T11108] input: syz0 as /devices/virtual/input/input32 03:38:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1347.064335][T11110] binder: 11109:11110 ioctl c0306201 20008000 returned -14 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 03:38:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x100000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21e, 0x281) 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 03:38:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1347.222502][T11126] binder: 11125:11126 ioctl c0306201 20008000 returned -14 03:38:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x200000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1347.280395][T11128] input: syz0 as /devices/virtual/input/input33 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x21f, 0x281) 03:38:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1347.390741][T11142] binder: 11141:11142 ioctl c0306201 20008000 returned -14 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 03:38:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x300000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1347.477414][T11148] input: syz0 as /devices/virtual/input/input34 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x220, 0x281) [ 1347.559581][T11158] binder_transaction: 13 callbacks suppressed [ 1347.559599][T11158] binder: 11157:11158 transaction failed 29189/-22, size 40-8 line 2994 [ 1347.575864][T11158] binder: 11157:11158 ioctl c0306201 20008000 returned -14 03:38:40 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 03:38:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x400000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x221, 0x281) 03:38:40 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 1347.703601][T11169] binder: 11168:11169 transaction failed 29189/-22, size 40-8 line 2994 [ 1347.739736][T11164] input: syz0 as /devices/virtual/input/input35 [ 1347.741513][T11169] binder: 11168:11169 ioctl c0306201 20008000 returned -14 03:38:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1347.802038][T11169] binder: 11168:11169 transaction failed 29189/-22, size 40-8 line 2994 03:38:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x222, 0x281) 03:38:40 executing program 2: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 1347.848041][T11169] binder: 11168:11169 ioctl c0306201 20008000 returned -14 03:38:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x500000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:40 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) fcntl$getflags(r0, 0x401) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000540)=@ax25, 0x80, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x16, 0x100000000401, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x4, 0x0, @binary}]}, 0x18}}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x4, 0x4c00) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xaf6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x7, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'yam0\x00\x00\x00\x00\x04\xff\xff\xff\xff\xa0\x01\x00', 0x400}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) close(0xffffffffffffffff) syz_execute_func(&(0x7f0000000200)="fe4b00c422a93f0d4e160000c401fd5b690026660d0d00c44185f59ffaffffff26360f18a9a20000002e4492c40111e2fd400f56b0cd300000c482a9b897116b23ab") open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x25) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/3, 0x3) 03:38:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x223, 0x281) [ 1348.024292][T11191] input: syz0 as /devices/virtual/input/input36 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1348.075070][T11198] binder: 11196:11198 transaction failed 29189/-22, size 40-8 line 2994 [ 1348.113129][T11198] binder: 11196:11198 ioctl c0306201 20008000 returned -14 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x224, 0x281) 03:38:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x600000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1348.259252][T11211] binder: 11209:11211 transaction failed 29189/-22, size 40-8 line 2994 03:38:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x225, 0x281) [ 1348.305768][T11211] binder: 11209:11211 ioctl c0306201 20008000 returned -14 03:38:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x700000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1348.367878][T11215] input: syz0 as /devices/virtual/input/input37 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) 03:38:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x226, 0x281) [ 1348.508506][T11227] binder: 11226:11227 transaction failed 29189/-22, size 40-8 line 2994 [ 1348.525490][T11227] binder: 11226:11227 ioctl c0306201 20008000 returned -14 03:38:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x1200000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x227, 0x281) [ 1348.632272][T11238] input: syz0 as /devices/virtual/input/input38 03:38:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) [ 1348.695911][T11242] binder: 11240:11242 transaction failed 29189/-22, size 40-8 line 2994 [ 1348.738968][T11242] binder: 11240:11242 ioctl c0306201 20008000 returned -14 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x228, 0x281) 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x2000000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:38:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 03:38:41 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) [ 1348.918828][T11264] binder: 11259:11264 transaction failed 29189/-22, size 40-8 line 2994 [ 1348.957846][T11267] input: syz0 as /devices/virtual/input/input39 03:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x229, 0x281) 03:38:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 1348.967479][T11264] binder: 11259:11264 ioctl c0306201 20008000 returned -14 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4800000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:38:42 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22a, 0x281) [ 1349.120467][T11280] binder: 11275:11280 transaction failed 29189/-22, size 40-8 line 2994 [ 1349.150281][T11280] binder: 11275:11280 ioctl c0306201 20008000 returned -14 [ 1349.178421][T11284] input: syz0 as /devices/virtual/input/input40 03:38:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x4c00000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22b, 0x281) 03:38:42 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000080)={'sha1-generic\x00'}}) [ 1349.344082][T11301] binder: 11298:11301 transaction failed 29189/-22, size 40-8 line 2994 03:38:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/66, 0x42, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @ipv4={[], [], @loopback}}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) 03:38:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:42 executing program 5 (fault-call:5 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1349.401280][T11301] binder: 11298:11301 ioctl c0306201 20008000 returned -14 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22c, 0x281) 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6000000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:42 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1349.545374][T11314] FAULT_INJECTION: forcing a failure. [ 1349.545374][T11314] name failslab, interval 1, probability 0, space 0, times 0 03:38:42 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) 03:38:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1349.600823][T11320] binder: 11317:11320 ioctl c0306201 20008000 returned -14 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22d, 0x281) 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6800000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1349.642842][T11314] CPU: 1 PID: 11314 Comm: syz-executor.5 Not tainted 5.0.0+ #23 [ 1349.650562][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.660761][T11314] Call Trace: [ 1349.664111][T11314] dump_stack+0x172/0x1f0 [ 1349.668481][T11314] should_fail.cold+0xa/0x15 [ 1349.673211][T11314] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1349.679065][T11314] ? ___might_sleep+0x163/0x280 [ 1349.683952][T11314] __should_failslab+0x121/0x190 [ 1349.688920][T11314] should_failslab+0x9/0x14 [ 1349.693432][T11314] kmem_cache_alloc_node_trace+0x270/0x720 [ 1349.699434][T11314] ? avc_has_extended_perms+0xa78/0x1100 [ 1349.705090][T11314] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.706220][T11326] binder: 11323:11326 ioctl c0306201 20008000 returned -14 [ 1349.711352][T11314] ? _kstrtoull+0x14c/0x200 [ 1349.723181][T11314] ? _parse_integer+0x190/0x190 [ 1349.728064][T11314] __kmalloc_node+0x3d/0x70 [ 1349.732594][T11314] kvmalloc_node+0x68/0x100 [ 1349.737120][T11314] vhost_dev_reset_owner_prepare+0x1d/0x20 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x6c00000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22e, 0x281) [ 1349.743025][T11314] vhost_net_ioctl+0xdc2/0x1900 [ 1349.747885][T11314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.754149][T11314] ? tomoyo_path_number_perm+0x263/0x520 [ 1349.759798][T11314] ? find_held_lock+0x35/0x130 [ 1349.764599][T11314] ? vhost_zerocopy_callback+0x300/0x300 [ 1349.770265][T11314] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1349.776110][T11314] ? ___might_sleep+0x163/0x280 [ 1349.780988][T11314] ? vhost_zerocopy_callback+0x300/0x300 [ 1349.786746][T11314] do_vfs_ioctl+0xd6e/0x1390 [ 1349.791452][T11314] ? ioctl_preallocate+0x210/0x210 [ 1349.796599][T11314] ? selinux_file_mprotect+0x620/0x620 [ 1349.798807][T11331] binder: 11330:11331 ioctl c0306201 20008000 returned -14 [ 1349.802089][T11314] ? __fget+0x381/0x550 [ 1349.802114][T11314] ? ksys_dup3+0x3e0/0x3e0 [ 1349.802135][T11314] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.802158][T11314] ? fput_many+0x12c/0x1a0 [ 1349.828774][T11314] ? tomoyo_file_ioctl+0x23/0x30 [ 1349.833752][T11314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7400000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1349.840037][T11314] ? security_file_ioctl+0x93/0xc0 [ 1349.845183][T11314] ksys_ioctl+0xab/0xd0 [ 1349.849354][T11314] __x64_sys_ioctl+0x73/0xb0 [ 1349.853982][T11314] do_syscall_64+0x103/0x610 [ 1349.858608][T11314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.864549][T11314] RIP: 0033:0x458079 [ 1349.868471][T11314] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.888545][T11314] RSP: 002b:00007f325ada0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.889796][T11336] binder: 11335:11336 ioctl c0306201 20008000 returned -14 [ 1349.896991][T11314] RAX: ffffffffffffffda RBX: 00007f325ada0c90 RCX: 0000000000458079 [ 1349.897002][T11314] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000003 [ 1349.897008][T11314] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.897015][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f325ada16d4 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x22f, 0x281) [ 1349.897027][T11314] R13: 00000000004c282e R14: 00000000004d52a8 R15: 0000000000000005 [ 1349.984424][T11343] input: syz0 as /devices/virtual/input/input41 03:38:42 executing program 5 (fault-call:5 fault-nth:1): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x230, 0x281) 03:38:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x7a00000000000000}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1350.034226][T11343] FAULT_INJECTION: forcing a failure. [ 1350.034226][T11343] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.097312][T11343] CPU: 1 PID: 11343 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1350.105025][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.115103][T11343] Call Trace: [ 1350.118446][T11343] dump_stack+0x172/0x1f0 [ 1350.122835][T11343] should_fail.cold+0xa/0x15 [ 1350.127489][T11343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1350.133343][T11343] ? ___might_sleep+0x163/0x280 [ 1350.138265][T11343] __should_failslab+0x121/0x190 [ 1350.143246][T11343] should_failslab+0x9/0x14 [ 1350.147781][T11343] __kmalloc_track_caller+0x2d8/0x740 [ 1350.153182][T11343] ? pointer+0x910/0x910 [ 1350.157485][T11343] ? __lock_acquire+0x548/0x3fb0 [ 1350.162451][T11343] ? kasprintf+0xbb/0xf0 [ 1350.166819][T11343] kvasprintf+0xc8/0x170 [ 1350.171096][T11343] ? bust_spinlocks+0xe0/0xe0 [ 1350.175810][T11343] ? debug_check_no_obj_freed+0x200/0x464 [ 1350.181561][T11343] kasprintf+0xbb/0xf0 [ 1350.185651][T11343] ? kvasprintf_const+0x190/0x190 [ 1350.190825][T11343] ? input_default_getkeycode+0x520/0x520 [ 1350.196580][T11343] input_devnode+0x4c/0x90 [ 1350.201032][T11343] device_get_devnode+0x175/0x2e0 [ 1350.206085][T11343] ? refcount_sub_and_test_checked+0x154/0x200 [ 1350.212284][T11343] devtmpfs_delete_node+0xaa/0x1a0 [ 1350.217435][T11343] ? devtmpfs_create_node+0x250/0x250 [ 1350.222867][T11343] ? __device_link_free_srcu+0x120/0x120 [ 1350.228562][T11343] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1350.234574][T11343] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.240840][T11343] ? kobject_put+0x84/0xe0 [ 1350.245286][T11343] ? __device_link_free_srcu+0x120/0x120 [ 1350.250950][T11343] ? klist_children_put+0x4a/0x60 [ 1350.256004][T11343] ? klist_put+0xdc/0x180 [ 1350.260360][T11343] device_del+0x8b4/0xc40 [ 1350.264733][T11343] ? __device_links_no_driver+0x250/0x250 [ 1350.270474][T11343] ? mark_held_locks+0xa4/0xf0 [ 1350.275269][T11343] ? _raw_spin_unlock_irq+0x28/0x90 [ 1350.280528][T11343] ? __input_unregister_device+0x153/0x4a0 [ 1350.286390][T11343] ? _raw_spin_unlock_irq+0x28/0x90 [ 1350.291661][T11343] cdev_device_del+0x1a/0x80 [ 1350.296291][T11343] evdev_disconnect+0x42/0xb0 [ 1350.301026][T11343] __input_unregister_device+0x200/0x4a0 [ 1350.306711][T11343] input_unregister_device+0xc5/0x110 [ 1350.312135][T11343] uinput_destroy_device+0x1f4/0x250 [ 1350.317487][T11343] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1350.323453][T11343] ? __schedule+0x81f/0x1cc0 [ 1350.328105][T11343] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1350.334213][T11343] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1350.339728][T11343] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1350.345044][T11343] ? retint_kernel+0x2d/0x2d [ 1350.349669][T11343] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1350.355333][T11343] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1350.360824][T11343] ? retint_kernel+0x2d/0x2d [ 1350.366071][T11343] uinput_ioctl+0x4a/0x60 [ 1350.370533][T11343] ? uinput_compat_ioctl+0x90/0x90 [ 1350.375678][T11343] do_vfs_ioctl+0xd6e/0x1390 [ 1350.380307][T11343] ? ioctl_preallocate+0x210/0x210 [ 1350.385449][T11343] ? selinux_file_mprotect+0x620/0x620 [ 1350.390951][T11343] ? __fget+0x381/0x550 [ 1350.395152][T11343] ? ksys_dup3+0x3e0/0x3e0 [ 1350.399897][T11343] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.406181][T11343] ? fput_many+0x12c/0x1a0 [ 1350.410644][T11343] ? tomoyo_file_ioctl+0x23/0x30 [ 1350.415620][T11343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.421893][T11343] ? security_file_ioctl+0x93/0xc0 [ 1350.427071][T11343] ksys_ioctl+0xab/0xd0 [ 1350.431259][T11343] __x64_sys_ioctl+0x73/0xb0 [ 1350.435880][T11343] do_syscall_64+0x103/0x610 [ 1350.440515][T11343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.446439][T11343] RIP: 0033:0x458079 [ 1350.450349][T11343] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.470093][T11343] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.478546][T11343] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1350.486539][T11343] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1350.494563][T11343] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1350.502561][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1350.510574][T11343] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 [ 1350.523769][T11352] binder: 11347:11352 ioctl c0306201 20008000 returned -14 03:38:43 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:43 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) 03:38:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x2}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x231, 0x281) 03:38:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1350.691538][T11360] binder: 11359:11360 ioctl c0306201 20008000 returned -14 03:38:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x232, 0x281) 03:38:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x3}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x2, 0x0) 03:38:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:43 executing program 1: stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) [ 1350.816108][T11373] input: syz0 as /devices/virtual/input/input42 03:38:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x233, 0x281) [ 1350.861311][T11373] FAULT_INJECTION: forcing a failure. [ 1350.861311][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.886212][T11380] binder: 11377:11380 ioctl c0306201 20008000 returned -14 [ 1350.925363][T11373] CPU: 0 PID: 11373 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1350.933072][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.943150][T11373] Call Trace: [ 1350.946472][T11373] dump_stack+0x172/0x1f0 [ 1350.950835][T11373] should_fail.cold+0xa/0x15 [ 1350.955543][T11373] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1350.961374][T11373] ? ___might_sleep+0x163/0x280 [ 1350.966394][T11373] __should_failslab+0x121/0x190 [ 1350.971379][T11373] should_failslab+0x9/0x14 [ 1350.975928][T11373] kmem_cache_alloc_trace+0x2d1/0x760 [ 1350.981328][T11373] ? mutex_trylock+0x1e0/0x1e0 [ 1350.986168][T11373] ? kasan_check_write+0x14/0x20 [ 1350.991154][T11373] kobject_uevent_env+0x2fb/0x1030 [ 1350.996294][T11373] ? wait_for_completion+0x440/0x440 [ 1351.001613][T11373] kobject_uevent+0x20/0x26 [ 1351.006134][T11373] device_del+0x758/0xc40 [ 1351.010493][T11373] ? __device_links_no_driver+0x250/0x250 [ 1351.016231][T11373] ? _raw_spin_unlock_irq+0x28/0x90 [ 1351.021457][T11373] ? __input_unregister_device+0x153/0x4a0 [ 1351.027808][T11373] ? _raw_spin_unlock_irq+0x28/0x90 [ 1351.033043][T11373] cdev_device_del+0x1a/0x80 [ 1351.037662][T11373] evdev_disconnect+0x42/0xb0 [ 1351.042377][T11373] __input_unregister_device+0x200/0x4a0 [ 1351.048051][T11373] input_unregister_device+0xc5/0x110 [ 1351.053454][T11373] uinput_destroy_device+0x1f4/0x250 [ 1351.058768][T11373] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1351.064681][T11373] ? tomoyo_domain+0xc5/0x160 [ 1351.069399][T11373] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1351.075521][T11373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.081782][T11373] ? tomoyo_path_number_perm+0x263/0x520 [ 1351.087466][T11373] ? find_held_lock+0x35/0x130 [ 1351.092252][T11373] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1351.098101][T11373] ? ___might_sleep+0x163/0x280 [ 1351.102978][T11373] uinput_ioctl+0x4a/0x60 [ 1351.107336][T11373] ? uinput_compat_ioctl+0x90/0x90 [ 1351.112482][T11373] do_vfs_ioctl+0xd6e/0x1390 [ 1351.117191][T11373] ? ioctl_preallocate+0x210/0x210 [ 1351.122327][T11373] ? selinux_file_mprotect+0x620/0x620 [ 1351.127821][T11373] ? __fget+0x381/0x550 [ 1351.132023][T11373] ? ksys_dup3+0x3e0/0x3e0 [ 1351.136483][T11373] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.142734][T11373] ? fput_many+0x12c/0x1a0 [ 1351.147170][T11373] ? tomoyo_file_ioctl+0x23/0x30 [ 1351.152132][T11373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.158403][T11373] ? security_file_ioctl+0x93/0xc0 [ 1351.163555][T11373] ksys_ioctl+0xab/0xd0 [ 1351.167738][T11373] __x64_sys_ioctl+0x73/0xb0 [ 1351.172355][T11373] do_syscall_64+0x103/0x610 [ 1351.176984][T11373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.182899][T11373] RIP: 0033:0x458079 [ 1351.186808][T11373] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.206690][T11373] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.215135][T11373] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1351.223153][T11373] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1351.231143][T11373] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1351.239190][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1351.247186][T11373] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 03:38:44 executing program 4 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x4}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x4b47, 0x0) 03:38:44 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x234, 0x281) [ 1351.396358][T11394] binder: 11393:11394 ioctl c0306201 20008000 returned -14 [ 1351.455350][T11407] input: syz0 as /devices/virtual/input/input43 [ 1351.475790][T11407] FAULT_INJECTION: forcing a failure. [ 1351.475790][T11407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1351.489146][T11407] CPU: 1 PID: 11407 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1351.489157][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.489163][T11407] Call Trace: [ 1351.489196][T11407] dump_stack+0x172/0x1f0 [ 1351.489224][T11407] should_fail.cold+0xa/0x15 [ 1351.519417][T11407] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1351.525263][T11407] ? __lock_acquire+0x548/0x3fb0 [ 1351.530218][T11407] ? trace_hardirqs_on+0x67/0x230 [ 1351.530239][T11407] should_fail_alloc_page+0x50/0x60 [ 1351.530255][T11407] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1351.530274][T11407] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1351.530296][T11407] ? find_held_lock+0x35/0x130 [ 1351.556587][T11407] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1351.562429][T11407] cache_grow_begin+0x9c/0x860 [ 1351.567222][T11407] ? kobject_uevent_env+0x2fb/0x1030 [ 1351.572521][T11407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.578783][T11407] kmem_cache_alloc_trace+0x67f/0x760 [ 1351.584168][T11407] ? mutex_trylock+0x1e0/0x1e0 [ 1351.588958][T11407] ? kasan_check_write+0x14/0x20 [ 1351.593939][T11407] kobject_uevent_env+0x2fb/0x1030 [ 1351.599078][T11407] ? wait_for_completion+0x440/0x440 [ 1351.604399][T11407] kobject_uevent+0x20/0x26 [ 1351.608936][T11407] device_del+0x758/0xc40 [ 1351.613283][T11407] ? __device_links_no_driver+0x250/0x250 [ 1351.619031][T11407] ? _raw_spin_unlock_irq+0x28/0x90 [ 1351.624241][T11407] ? __input_unregister_device+0x153/0x4a0 [ 1351.630070][T11407] ? _raw_spin_unlock_irq+0x28/0x90 [ 1351.635335][T11407] cdev_device_del+0x1a/0x80 [ 1351.639968][T11407] evdev_disconnect+0x42/0xb0 [ 1351.644658][T11407] __input_unregister_device+0x200/0x4a0 [ 1351.650316][T11407] input_unregister_device+0xc5/0x110 [ 1351.655715][T11407] uinput_destroy_device+0x1f4/0x250 [ 1351.661040][T11407] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1351.667045][T11407] ? tomoyo_domain+0xc5/0x160 [ 1351.671829][T11407] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1351.677928][T11407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.684221][T11407] ? tomoyo_path_number_perm+0x263/0x520 [ 1351.689874][T11407] ? find_held_lock+0x35/0x130 [ 1351.694668][T11407] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1351.700497][T11407] ? ___might_sleep+0x163/0x280 [ 1351.705369][T11407] uinput_ioctl+0x4a/0x60 [ 1351.709726][T11407] ? uinput_compat_ioctl+0x90/0x90 [ 1351.714852][T11407] do_vfs_ioctl+0xd6e/0x1390 [ 1351.719455][T11407] ? ioctl_preallocate+0x210/0x210 [ 1351.724575][T11407] ? selinux_file_mprotect+0x620/0x620 [ 1351.730043][T11407] ? __fget+0x381/0x550 [ 1351.734216][T11407] ? ksys_dup3+0x3e0/0x3e0 [ 1351.738648][T11407] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.744906][T11407] ? fput_many+0x12c/0x1a0 [ 1351.749365][T11407] ? tomoyo_file_ioctl+0x23/0x30 [ 1351.754323][T11407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.760597][T11407] ? security_file_ioctl+0x93/0xc0 [ 1351.765732][T11407] ksys_ioctl+0xab/0xd0 [ 1351.769927][T11407] __x64_sys_ioctl+0x73/0xb0 [ 1351.774573][T11407] do_syscall_64+0x103/0x610 [ 1351.779186][T11407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.785122][T11407] RIP: 0033:0x458079 03:38:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x5}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1351.789036][T11407] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.808753][T11407] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.817190][T11407] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1351.825179][T11407] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1351.833169][T11407] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1351.841161][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1351.849154][T11407] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 03:38:44 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x235, 0x281) [ 1351.893212][T11413] binder: 11412:11413 ioctl c0306201 20008000 returned -14 03:38:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x4b49, 0x0) 03:38:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x6}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:45 executing program 4 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x541b, 0x0) 03:38:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x236, 0x281) [ 1352.116875][T11434] binder: 11432:11434 ioctl c0306201 20008000 returned -14 [ 1352.137587][T11435] input: syz0 as /devices/virtual/input/input44 03:38:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:45 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) [ 1352.176303][T11434] binder: 11432:11434 ioctl c0306201 20008000 returned -14 [ 1352.191758][T11440] FAULT_INJECTION: forcing a failure. [ 1352.191758][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.277846][T11440] CPU: 0 PID: 11440 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1352.285554][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.296084][T11440] Call Trace: [ 1352.299427][T11440] dump_stack+0x172/0x1f0 [ 1352.303788][T11440] should_fail.cold+0xa/0x15 [ 1352.308439][T11440] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1352.314296][T11440] ? ___might_sleep+0x163/0x280 [ 1352.319196][T11440] __should_failslab+0x121/0x190 [ 1352.324178][T11440] should_failslab+0x9/0x14 [ 1352.328716][T11440] __kmalloc+0x2dc/0x740 [ 1352.332993][T11440] ? kobject_uevent_env+0x2fb/0x1030 [ 1352.338314][T11440] ? rcu_read_lock_sched_held+0x110/0x130 [ 1352.344066][T11440] ? kobject_get_path+0xc4/0x1b0 [ 1352.349052][T11440] kobject_get_path+0xc4/0x1b0 [ 1352.353849][T11440] kobject_uevent_env+0x31f/0x1030 [ 1352.358994][T11440] ? wait_for_completion+0x440/0x440 [ 1352.364314][T11440] kobject_uevent+0x20/0x26 [ 1352.364336][T11440] device_del+0x758/0xc40 [ 1352.364360][T11440] ? __device_links_no_driver+0x250/0x250 [ 1352.364396][T11440] ? _raw_spin_unlock_irq+0x28/0x90 [ 1352.364420][T11440] ? __input_unregister_device+0x153/0x4a0 [ 1352.364435][T11440] ? _raw_spin_unlock_irq+0x28/0x90 [ 1352.364456][T11440] cdev_device_del+0x1a/0x80 [ 1352.364473][T11440] evdev_disconnect+0x42/0xb0 [ 1352.364490][T11440] __input_unregister_device+0x200/0x4a0 [ 1352.364506][T11440] input_unregister_device+0xc5/0x110 [ 1352.364526][T11440] uinput_destroy_device+0x1f4/0x250 [ 1352.364548][T11440] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1352.364573][T11440] ? tomoyo_domain+0xc5/0x160 [ 1352.379175][T11440] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1352.379198][T11440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.379226][T11440] ? tomoyo_path_number_perm+0x263/0x520 [ 1352.449787][T11440] ? find_held_lock+0x35/0x130 [ 1352.454580][T11440] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1352.460466][T11440] ? ___might_sleep+0x163/0x280 [ 1352.465357][T11440] uinput_ioctl+0x4a/0x60 [ 1352.469746][T11440] ? uinput_compat_ioctl+0x90/0x90 [ 1352.474895][T11440] do_vfs_ioctl+0xd6e/0x1390 [ 1352.479521][T11440] ? ioctl_preallocate+0x210/0x210 [ 1352.484671][T11440] ? selinux_file_mprotect+0x620/0x620 [ 1352.490162][T11440] ? __fget+0x381/0x550 [ 1352.494364][T11440] ? ksys_dup3+0x3e0/0x3e0 [ 1352.498811][T11440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1352.505074][T11440] ? fput_many+0x12c/0x1a0 [ 1352.509515][T11440] ? tomoyo_file_ioctl+0x23/0x30 [ 1352.514480][T11440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.520745][T11440] ? security_file_ioctl+0x93/0xc0 [ 1352.526148][T11440] ksys_ioctl+0xab/0xd0 [ 1352.530338][T11440] __x64_sys_ioctl+0x73/0xb0 [ 1352.534962][T11440] do_syscall_64+0x103/0x610 [ 1352.539580][T11440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1352.545517][T11440] RIP: 0033:0x458079 [ 1352.549450][T11440] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1352.569094][T11440] RSP: 002b:00007f676513ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:38:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x7}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x237, 0x281) [ 1352.577524][T11440] RAX: ffffffffffffffda RBX: 00007f676513ec90 RCX: 0000000000458079 [ 1352.585514][T11440] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1352.585523][T11440] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.585530][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f676513f6d4 [ 1352.585537][T11440] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000004 03:38:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x5421, 0x0) [ 1352.625012][T11456] binder_transaction: 11 callbacks suppressed [ 1352.625031][T11456] binder: 11455:11456 transaction failed 29189/-22, size 40-8 line 2994 [ 1352.649067][T11456] binder: 11455:11456 ioctl c0306201 20008000 returned -14 03:38:45 executing program 4 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:45 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1352.694560][T11456] binder: 11455:11456 transaction failed 29189/-22, size 40-8 line 2994 [ 1352.727587][T11456] binder: 11455:11456 ioctl c0306201 20008000 returned -14 03:38:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x238, 0x281) [ 1352.779403][T11466] input: syz0 as /devices/virtual/input/input45 03:38:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x12}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:45 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x5450, 0x0) [ 1352.839545][T11466] FAULT_INJECTION: forcing a failure. [ 1352.839545][T11466] name failslab, interval 1, probability 0, space 0, times 0 03:38:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x239, 0x281) [ 1352.923082][T11466] CPU: 1 PID: 11466 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1352.930780][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.934788][T11480] binder: 11479:11480 transaction failed 29189/-22, size 40-8 line 2994 [ 1352.940862][T11466] Call Trace: [ 1352.940900][T11466] dump_stack+0x172/0x1f0 [ 1352.940932][T11466] should_fail.cold+0xa/0x15 [ 1352.940957][T11466] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1352.940985][T11466] ? ___might_sleep+0x163/0x280 [ 1352.970437][T11480] binder: 11479:11480 ioctl c0306201 20008000 returned -14 [ 1352.972792][T11466] __should_failslab+0x121/0x190 [ 1352.972817][T11466] should_failslab+0x9/0x14 [ 1352.972834][T11466] __kmalloc_track_caller+0x2d8/0x740 [ 1352.972850][T11466] ? pointer+0x910/0x910 [ 1352.972867][T11466] ? kasprintf+0xbb/0xf0 [ 1352.972895][T11466] kvasprintf+0xc8/0x170 [ 1353.008054][T11466] ? bust_spinlocks+0xe0/0xe0 [ 1353.012766][T11466] ? pointer+0x910/0x910 [ 1353.017027][T11466] ? __sanitizer_cov_trace_cmp8+0x18/0x20 03:38:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x48}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23a, 0x281) [ 1353.022763][T11466] kasprintf+0xbb/0xf0 [ 1353.026851][T11466] ? kvasprintf_const+0x190/0x190 [ 1353.032051][T11466] ? cleanup_uevent_env+0x50/0x50 [ 1353.037699][T11466] ? input_default_getkeycode+0x520/0x520 [ 1353.043472][T11466] input_devnode+0x4c/0x90 [ 1353.047927][T11466] device_get_devnode+0x175/0x2e0 [ 1353.052992][T11466] dev_uevent+0x3e8/0x580 [ 1353.057348][T11466] ? device_get_devnode+0x2e0/0x2e0 [ 1353.062603][T11466] ? kobject_uevent_env+0x2fb/0x1030 [ 1353.068341][T11466] ? rcu_read_lock_sched_held+0x110/0x130 [ 1353.074494][T11466] ? device_get_devnode+0x2e0/0x2e0 [ 1353.077844][T11485] binder: 11484:11485 transaction failed 29189/-22, size 40-8 line 2994 [ 1353.079711][T11466] kobject_uevent_env+0x487/0x1030 [ 1353.079733][T11466] ? wait_for_completion+0x440/0x440 [ 1353.079757][T11466] kobject_uevent+0x20/0x26 [ 1353.079785][T11466] device_del+0x758/0xc40 [ 1353.099806][T11485] binder: 11484:11485 ioctl c0306201 20008000 returned -14 [ 1353.103041][T11466] ? __device_links_no_driver+0x250/0x250 03:38:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23b, 0x281) 03:38:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x4c}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1353.103065][T11466] ? _raw_spin_unlock_irq+0x28/0x90 [ 1353.103080][T11466] ? __input_unregister_device+0x153/0x4a0 [ 1353.103095][T11466] ? _raw_spin_unlock_irq+0x28/0x90 [ 1353.103123][T11466] cdev_device_del+0x1a/0x80 [ 1353.103143][T11466] evdev_disconnect+0x42/0xb0 [ 1353.145833][T11466] __input_unregister_device+0x200/0x4a0 [ 1353.151491][T11466] input_unregister_device+0xc5/0x110 [ 1353.156892][T11466] uinput_destroy_device+0x1f4/0x250 [ 1353.162330][T11466] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1353.168241][T11466] ? tomoyo_domain+0xc5/0x160 [ 1353.172979][T11466] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1353.179085][T11466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.185369][T11466] ? tomoyo_path_number_perm+0x263/0x520 [ 1353.191040][T11466] ? find_held_lock+0x35/0x130 [ 1353.196021][T11466] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1353.201868][T11466] ? ___might_sleep+0x163/0x280 [ 1353.203932][T11493] binder: 11491:11493 transaction failed 29189/-22, size 40-8 line 2994 [ 1353.206757][T11466] uinput_ioctl+0x4a/0x60 [ 1353.206774][T11466] ? uinput_compat_ioctl+0x90/0x90 [ 1353.206793][T11466] do_vfs_ioctl+0xd6e/0x1390 [ 1353.206823][T11466] ? ioctl_preallocate+0x210/0x210 [ 1353.231208][T11493] binder: 11491:11493 ioctl c0306201 20008000 returned -14 [ 1353.234286][T11466] ? selinux_file_mprotect+0x620/0x620 [ 1353.234303][T11466] ? __fget+0x381/0x550 [ 1353.234324][T11466] ? ksys_dup3+0x3e0/0x3e0 [ 1353.234340][T11466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1353.234353][T11466] ? fput_many+0x12c/0x1a0 [ 1353.234373][T11466] ? tomoyo_file_ioctl+0x23/0x30 [ 1353.234405][T11466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.277471][T11466] ? security_file_ioctl+0x93/0xc0 [ 1353.282592][T11466] ksys_ioctl+0xab/0xd0 [ 1353.286766][T11466] __x64_sys_ioctl+0x73/0xb0 [ 1353.292004][T11466] do_syscall_64+0x103/0x610 [ 1353.296629][T11466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1353.302639][T11466] RIP: 0033:0x458079 [ 1353.306552][T11466] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1353.306572][T11466] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.306593][T11466] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1353.306602][T11466] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1353.306619][T11466] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1353.334685][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1353.334694][T11466] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 03:38:46 executing program 4 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23c, 0x281) 03:38:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x60}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:46 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x5451, 0x0) [ 1353.531138][T11506] binder: 11503:11506 transaction failed 29189/-22, size 40-8 line 2994 [ 1353.543043][T11506] binder: 11503:11506 ioctl c0306201 20008000 returned -14 03:38:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23d, 0x281) 03:38:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x68}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:46 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1353.591467][T11510] input: syz0 as /devices/virtual/input/input46 [ 1353.622622][T11510] FAULT_INJECTION: forcing a failure. [ 1353.622622][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.680770][T11522] binder: 11521:11522 transaction failed 29189/-22, size 40-8 line 2994 [ 1353.682540][T11510] CPU: 1 PID: 11510 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1353.696813][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.698047][T11522] binder: 11521:11522 ioctl c0306201 20008000 returned -14 [ 1353.706898][T11510] Call Trace: [ 1353.706940][T11510] dump_stack+0x172/0x1f0 [ 1353.706961][T11510] should_fail.cold+0xa/0x15 03:38:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x6c}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23e, 0x281) [ 1353.706978][T11510] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1353.706997][T11510] ? ___might_sleep+0x163/0x280 [ 1353.707015][T11510] __should_failslab+0x121/0x190 [ 1353.707035][T11510] should_failslab+0x9/0x14 [ 1353.707051][T11510] kmem_cache_alloc_node+0x264/0x710 [ 1353.707075][T11510] ? find_held_lock+0x35/0x130 [ 1353.757145][T11510] __alloc_skb+0xd5/0x5e0 [ 1353.761510][T11510] ? skb_trim+0x190/0x190 [ 1353.765937][T11510] ? kasan_check_read+0x11/0x20 [ 1353.770803][T11510] alloc_uevent_skb+0x83/0x1e2 [ 1353.775649][T11510] kobject_uevent_env+0xa63/0x1030 [ 1353.781128][T11510] ? wait_for_completion+0x440/0x440 [ 1353.786859][T11510] kobject_uevent+0x20/0x26 [ 1353.791368][T11510] device_del+0x758/0xc40 [ 1353.795708][T11510] ? __device_links_no_driver+0x250/0x250 [ 1353.801463][T11510] ? _raw_spin_unlock_irq+0x28/0x90 [ 1353.806659][T11510] ? __input_unregister_device+0x153/0x4a0 [ 1353.812464][T11510] ? _raw_spin_unlock_irq+0x28/0x90 [ 1353.817689][T11510] cdev_device_del+0x1a/0x80 [ 1353.822294][T11510] evdev_disconnect+0x42/0xb0 [ 1353.826977][T11510] __input_unregister_device+0x200/0x4a0 [ 1353.832707][T11510] input_unregister_device+0xc5/0x110 [ 1353.838104][T11510] uinput_destroy_device+0x1f4/0x250 [ 1353.843490][T11510] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1353.849415][T11510] ? tomoyo_domain+0xc5/0x160 [ 1353.854130][T11510] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1353.860307][T11510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.866942][T11510] ? tomoyo_path_number_perm+0x263/0x520 [ 1353.872593][T11510] ? find_held_lock+0x35/0x130 [ 1353.877375][T11510] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1353.883218][T11510] ? ___might_sleep+0x163/0x280 [ 1353.888070][T11510] uinput_ioctl+0x4a/0x60 [ 1353.892399][T11510] ? uinput_compat_ioctl+0x90/0x90 [ 1353.897517][T11510] do_vfs_ioctl+0xd6e/0x1390 [ 1353.902112][T11510] ? ioctl_preallocate+0x210/0x210 [ 1353.907214][T11510] ? selinux_file_mprotect+0x620/0x620 [ 1353.912675][T11510] ? __fget+0x381/0x550 [ 1353.916854][T11510] ? ksys_dup3+0x3e0/0x3e0 [ 1353.921288][T11510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1353.927540][T11510] ? fput_many+0x12c/0x1a0 [ 1353.931966][T11510] ? tomoyo_file_ioctl+0x23/0x30 [ 1353.936903][T11510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.943315][T11510] ? security_file_ioctl+0x93/0xc0 [ 1353.948441][T11510] ksys_ioctl+0xab/0xd0 [ 1353.952601][T11510] __x64_sys_ioctl+0x73/0xb0 [ 1353.957203][T11510] do_syscall_64+0x103/0x610 [ 1353.961787][T11510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1353.967671][T11510] RIP: 0033:0x458079 [ 1353.971564][T11510] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1353.991185][T11510] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.999603][T11510] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1354.007593][T11510] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1354.015565][T11510] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1354.023558][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1354.031518][T11510] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 03:38:47 executing program 4 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x5452, 0x0) 03:38:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x4, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x23f, 0x281) [ 1354.194439][T11530] binder: 11528:11530 transaction failed 29189/-22, size 40-8 line 2994 [ 1354.256016][T11530] binder: 11528:11530 ioctl c0306201 20008000 returned -14 [ 1354.278083][T11530] binder: 11528:11530 transaction failed 29189/-22, size 40-8 line 2994 03:38:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1354.302178][T11530] binder: 11528:11530 ioctl c0306201 20008000 returned -14 03:38:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0x5460, 0x0) 03:38:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x74}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1354.343969][T11545] input: syz0 as /devices/virtual/input/input47 [ 1354.389280][T11545] FAULT_INJECTION: forcing a failure. [ 1354.389280][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.421540][T11545] CPU: 0 PID: 11545 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1354.429229][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.439295][T11545] Call Trace: [ 1354.442608][T11545] dump_stack+0x172/0x1f0 [ 1354.446964][T11545] should_fail.cold+0xa/0x15 [ 1354.451579][T11545] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1354.451748][T11556] binder: 11555:11556 transaction failed 29189/-22, size 40-8 line 2994 [ 1354.457430][T11545] ? ___might_sleep+0x163/0x280 [ 1354.457450][T11545] __should_failslab+0x121/0x190 [ 1354.457468][T11545] should_failslab+0x9/0x14 [ 1354.457486][T11545] kmem_cache_alloc+0x2b2/0x6f0 03:38:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x240, 0x281) [ 1354.457505][T11545] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1354.457519][T11545] ? lock_downgrade+0x880/0x880 [ 1354.457540][T11545] skb_clone+0x150/0x3b0 [ 1354.457563][T11545] netlink_broadcast_filtered+0x870/0xb20 [ 1354.457588][T11545] netlink_broadcast+0x3a/0x50 [ 1354.457613][T11545] kobject_uevent_env+0xa94/0x1030 [ 1354.489656][T11556] binder: 11555:11556 ioctl c0306201 20008000 returned -14 [ 1354.490854][T11545] ? wait_for_completion+0x440/0x440 [ 1354.490883][T11545] kobject_uevent+0x20/0x26 [ 1354.490907][T11545] device_del+0x758/0xc40 03:38:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f53fac62ffc41367a146f2efdc53d6b76485d205369cc715a795de1ebb1682a72ef7f143fe498507398b2c67da29a69624555d7d9b9de755fbdedf38d27069f72537c8f111525c2d644241de7d86bac7caa91809219908dc78857a448a47ce4abf2dfd50ac344d5614caeb0202e04aa7d45c", 0x72, 0x6}, {&(0x7f0000000100)="ed24e1cc31ad3060557ae780054ffbd7e7e05d201615717ddd925acf3ce8f3690b0a56f203fe217710c41e66bba04ed5447ea3bd063df2ff985e0be627a7dac1f4c32eb6db8aa45ad4215a4c3fa9c4653c2eae182a1a8ff3c05cb387cbd7f4b9100a8cd8c55f5ef2b7947305bc859ba3bd655b63de8787748e11a94948f9f8a31e839b296ad7bf2b7893799fc20e4d7b24e589c48d8c4b04ed60b356a3a7335c049fe55f3ee2", 0xa6, 0x7}, {&(0x7f00000001c0), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000200)="ab8f2161574b8eef4091a21331557dae097d172b24ffd60de095c4e043a214d281c4f3c9e6017ae428f83bf6e256cde8993060eaf88c82da7314d4dfbc7c9d28b6d8322692368001713153d1a545da15dc4f4ede73dceea4285787696d5430b29a66ae2843120ce83047af8de8687786f8991c0fbb459e69270e0a4f174a3ab324eaaa4665f1b35a194ba30b8a1c0fd82493e58506", 0x95, 0xffffffffffffffff}], 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) [ 1354.536814][T11545] ? __device_links_no_driver+0x250/0x250 [ 1354.542553][T11545] ? _raw_spin_unlock_irq+0x28/0x90 [ 1354.547762][T11545] ? __input_unregister_device+0x153/0x4a0 [ 1354.553581][T11545] ? _raw_spin_unlock_irq+0x28/0x90 [ 1354.558838][T11545] cdev_device_del+0x1a/0x80 [ 1354.563461][T11545] evdev_disconnect+0x42/0xb0 [ 1354.568146][T11545] __input_unregister_device+0x200/0x4a0 [ 1354.573788][T11545] input_unregister_device+0xc5/0x110 [ 1354.579205][T11545] uinput_destroy_device+0x1f4/0x250 [ 1354.584540][T11545] uinput_ioctl_handler.isra.0+0x886/0x1cc0 03:38:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x7a}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x241, 0x281) [ 1354.590448][T11545] ? tomoyo_domain+0xc5/0x160 [ 1354.595140][T11545] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1354.601247][T11545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.607504][T11545] ? tomoyo_path_number_perm+0x263/0x520 [ 1354.613144][T11545] ? find_held_lock+0x35/0x130 [ 1354.617924][T11545] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1354.623756][T11545] ? ___might_sleep+0x163/0x280 [ 1354.628625][T11545] uinput_ioctl+0x4a/0x60 [ 1354.632964][T11545] ? uinput_compat_ioctl+0x90/0x90 [ 1354.638091][T11545] do_vfs_ioctl+0xd6e/0x1390 [ 1354.642701][T11545] ? ioctl_preallocate+0x210/0x210 [ 1354.647828][T11545] ? selinux_file_mprotect+0x620/0x620 [ 1354.653297][T11545] ? __fget+0x381/0x550 [ 1354.657465][T11545] ? ksys_dup3+0x3e0/0x3e0 [ 1354.661904][T11545] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1354.668158][T11545] ? fput_many+0x12c/0x1a0 [ 1354.672592][T11545] ? tomoyo_file_ioctl+0x23/0x30 [ 1354.677543][T11545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.683799][T11545] ? security_file_ioctl+0x93/0xc0 [ 1354.688925][T11545] ksys_ioctl+0xab/0xd0 [ 1354.693101][T11545] __x64_sys_ioctl+0x73/0xb0 [ 1354.697707][T11545] do_syscall_64+0x103/0x610 [ 1354.702321][T11545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1354.705404][T11569] binder: 11567:11569 ioctl c0306201 20008000 returned -14 [ 1354.708229][T11545] RIP: 0033:0x458079 [ 1354.708247][T11545] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1354.708256][T11545] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1354.708271][T11545] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1354.708281][T11545] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1354.708289][T11545] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1354.708308][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1354.779399][T11545] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 03:38:47 executing program 4 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:38:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x242, 0x281) 03:38:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x300}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:38:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@mode={'mode'}}, {@overriderock='overriderockperm'}, {@nojoliet='nojoliet'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@cruft='cruft'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 03:38:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf01, 0x0) [ 1354.958721][T11575] binder: 11574:11575 ioctl c0306201 20008000 returned -14 [ 1354.960606][T11575] binder: 11574:11575 ioctl c0306201 20008000 returned -14 03:38:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x500}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 03:38:48 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x33c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x243, 0x281) 03:38:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1355.009271][T11589] input: syz0 as /devices/virtual/input/input48 [ 1355.077007][T11589] FAULT_INJECTION: forcing a failure. [ 1355.077007][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.122853][T11589] CPU: 0 PID: 11589 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1355.130535][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.140605][T11589] Call Trace: [ 1355.143921][T11589] dump_stack+0x172/0x1f0 [ 1355.148373][T11589] should_fail.cold+0xa/0x15 [ 1355.152997][T11589] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1355.158821][T11589] ? ___might_sleep+0x163/0x280 [ 1355.163689][T11589] __should_failslab+0x121/0x190 [ 1355.168646][T11589] should_failslab+0x9/0x14 03:38:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf03, 0x0) [ 1355.173175][T11589] kmem_cache_alloc_trace+0x2d1/0x760 [ 1355.178586][T11589] ? kasan_check_write+0x14/0x20 [ 1355.183564][T11589] kobject_uevent_env+0x2fb/0x1030 [ 1355.188689][T11589] ? wait_for_completion+0x440/0x440 [ 1355.193998][T11589] kobject_uevent+0x20/0x26 [ 1355.199188][T11589] device_del+0x758/0xc40 [ 1355.203548][T11589] ? __device_links_no_driver+0x250/0x250 [ 1355.209281][T11589] ? trace_hardirqs_on+0x67/0x230 [ 1355.214339][T11589] __input_unregister_device+0x3a4/0x4a0 [ 1355.220015][T11589] input_unregister_device+0xc5/0x110 [ 1355.225431][T11589] uinput_destroy_device+0x1f4/0x250 [ 1355.230736][T11589] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1355.236651][T11589] ? tomoyo_domain+0xc5/0x160 [ 1355.241352][T11589] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1355.247454][T11589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.253715][T11589] ? tomoyo_path_number_perm+0x263/0x520 [ 1355.259368][T11589] ? find_held_lock+0x35/0x130 [ 1355.264176][T11589] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1355.270010][T11589] ? ___might_sleep+0x163/0x280 [ 1355.274890][T11589] uinput_ioctl+0x4a/0x60 [ 1355.279236][T11589] ? uinput_compat_ioctl+0x90/0x90 [ 1355.284358][T11589] do_vfs_ioctl+0xd6e/0x1390 [ 1355.289470][T11589] ? ioctl_preallocate+0x210/0x210 [ 1355.294602][T11589] ? selinux_file_mprotect+0x620/0x620 [ 1355.300069][T11589] ? __fget+0x381/0x550 [ 1355.304265][T11589] ? ksys_dup3+0x3e0/0x3e0 [ 1355.308691][T11589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1355.315145][T11589] ? fput_many+0x12c/0x1a0 [ 1355.319584][T11589] ? tomoyo_file_ioctl+0x23/0x30 [ 1355.324566][T11589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.330821][T11589] ? security_file_ioctl+0x93/0xc0 [ 1355.335964][T11589] ksys_ioctl+0xab/0xd0 [ 1355.340153][T11589] __x64_sys_ioctl+0x73/0xb0 [ 1355.344755][T11589] do_syscall_64+0x103/0x610 [ 1355.349355][T11589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1355.355268][T11589] RIP: 0033:0x458079 [ 1355.358752][T11592] binder: 11591:11592 ioctl c0306201 20008000 returned -14 [ 1355.359186][T11589] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1355.385998][T11589] RSP: 002b:00007f676515fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.394438][T11589] RAX: ffffffffffffffda RBX: 00007f676515fc90 RCX: 0000000000458079 [ 1355.402768][T11589] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1355.410759][T11589] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:38:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:38:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1, 0x0, 0x600}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1355.418749][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67651606d4 [ 1355.426730][T11589] R13: 00000000004c266a R14: 00000000004d50b0 R15: 0000000000000005 [ 1355.492777][T11606] ISOFS: Unable to identify CD-ROM format. [ 1355.513436][T11585] ================================================================== [ 1355.522014][T11585] BUG: KASAN: use-after-free in string+0x208/0x230 [ 1355.522038][T11585] Read of size 1 at addr ffff8880a9b76000 by task syz-executor.4/11585 [ 1355.522042][T11585] [ 1355.522057][T11585] CPU: 0 PID: 11585 Comm: syz-executor.4 Not tainted 5.0.0+ #23 [ 1355.522064][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.522077][T11585] Call Trace: [ 1355.550644][T11609] binder: 11608:11609 ioctl c0306201 20008000 returned -14 [ 1355.556874][T11585] dump_stack+0x172/0x1f0 [ 1355.556891][T11585] ? string+0x208/0x230 [ 1355.556909][T11585] print_address_description.cold+0x7c/0x20d [ 1355.556920][T11585] ? string+0x208/0x230 [ 1355.556931][T11585] ? string+0x208/0x230 [ 1355.556942][T11585] kasan_report.cold+0x1b/0x40 [ 1355.556957][T11585] ? string+0x208/0x230 [ 1355.556972][T11585] __asan_report_load1_noabort+0x14/0x20 [ 1355.556983][T11585] string+0x208/0x230 [ 1355.556996][T11585] ? widen_string+0x2e0/0x2e0 [ 1355.557011][T11585] ? console_unlock+0x6a7/0xeb0 [ 1355.557032][T11585] ? find_held_lock+0x35/0x130 [ 1355.623005][T11585] vsnprintf+0xbfc/0x1af0 [ 1355.627344][T11585] ? pointer+0x910/0x910 [ 1355.631607][T11585] ? string+0x1cc/0x230 [ 1355.635777][T11585] add_uevent_var+0x14d/0x310 [ 1355.640463][T11585] ? cleanup_uevent_env+0x50/0x50 [ 1355.645493][T11585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1355.651751][T11585] ? input_dev_uevent+0x110/0x890 [ 1355.656787][T11585] input_dev_uevent+0x163/0x890 [ 1355.661641][T11585] ? input_add_uevent_bm_var+0x150/0x150 [ 1355.667286][T11585] dev_uevent+0x312/0x580 [ 1355.671620][T11585] ? device_get_devnode+0x2e0/0x2e0 [ 1355.676825][T11585] ? kobject_uevent_env+0x2fb/0x1030 [ 1355.682118][T11585] ? rcu_read_lock_sched_held+0x110/0x130 [ 1355.687876][T11585] ? kobject_uevent_env+0x37d/0x1030 [ 1355.693178][T11585] ? device_get_devnode+0x2e0/0x2e0 [ 1355.698429][T11585] kobject_uevent_env+0x487/0x1030 [ 1355.703570][T11585] ? release_nodes+0x548/0x9c0 [ 1355.708361][T11585] kobject_uevent+0x20/0x26 [ 1355.712899][T11585] kobject_put.cold+0x177/0x2ec [ 1355.717788][T11585] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 1355.723787][T11585] put_device+0x20/0x30 [ 1355.727956][T11585] evdev_free+0x51/0x70 [ 1355.732150][T11585] device_release+0x7d/0x210 [ 1355.736753][T11585] kobject_put.cold+0x28f/0x2ec [ 1355.741619][T11585] cdev_default_release+0x41/0x50 [ 1355.746666][T11585] kobject_put.cold+0x28f/0x2ec [ 1355.751536][T11585] cdev_put.part.0+0x39/0x50 [ 1355.756148][T11585] cdev_put+0x20/0x30 [ 1355.760145][T11585] __fput+0x6df/0x8d0 [ 1355.764150][T11585] ____fput+0x16/0x20 [ 1355.768142][T11585] task_work_run+0x14a/0x1c0 [ 1355.772761][T11585] exit_to_usermode_loop+0x273/0x2c0 [ 1355.778078][T11585] do_syscall_64+0x52d/0x610 [ 1355.782683][T11585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1355.788583][T11585] RIP: 0033:0x411e31 [ 1355.792490][T11585] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1355.812282][T11585] RSP: 002b:00007ffe925f0be0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1355.820737][T11585] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31 [ 1355.828723][T11585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1355.836716][T11585] RBP: 0000000000000000 R08: 00000000bf198e40 R09: 00000000bf198e44 [ 1355.844798][T11585] R10: 00007ffe925f0b10 R11: 0000000000000293 R12: 0000000000000001 [ 1355.852786][T11585] R13: 00007ffe925f0c20 R14: 0000000000000001 R15: 00007ffe925f0c30 [ 1355.860792][T11585] [ 1355.863134][T11585] Allocated by task 11589: [ 1355.867562][T11585] save_stack+0x45/0xd0 [ 1355.871728][T11585] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1355.877395][T11585] kasan_kmalloc+0x9/0x10 [ 1355.881744][T11585] __kmalloc_track_caller+0x158/0x740 [ 1355.887147][T11585] kstrndup+0x5f/0xf0 [ 1355.891156][T11585] uinput_dev_setup+0x1d4/0x310 [ 1355.896018][T11585] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 1355.902013][T11585] uinput_ioctl+0x4a/0x60 [ 1355.906345][T11585] do_vfs_ioctl+0xd6e/0x1390 [ 1355.910946][T11585] ksys_ioctl+0xab/0xd0 [ 1355.915105][T11585] __x64_sys_ioctl+0x73/0xb0 [ 1355.919715][T11585] do_syscall_64+0x103/0x610 [ 1355.924321][T11585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1355.930203][T11585] [ 1355.932525][T11585] Freed by task 11589: [ 1355.936608][T11585] save_stack+0x45/0xd0 [ 1355.940764][T11585] __kasan_slab_free+0x102/0x150 [ 1355.945709][T11585] kasan_slab_free+0xe/0x10 [ 1355.950221][T11585] kfree+0xcf/0x230 [ 1355.954047][T11585] uinput_destroy_device+0xf8/0x250 [ 1355.959253][T11585] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1355.965158][T11585] uinput_ioctl+0x4a/0x60 [ 1355.969492][T11585] do_vfs_ioctl+0xd6e/0x1390 [ 1355.974083][T11585] ksys_ioctl+0xab/0xd0 [ 1355.978237][T11585] __x64_sys_ioctl+0x73/0xb0 [ 1355.982837][T11585] do_syscall_64+0x103/0x610 [ 1355.987445][T11585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1355.993324][T11585] [ 1355.995652][T11585] The buggy address belongs to the object at ffff8880a9b76000 [ 1355.995652][T11585] which belongs to the cache kmalloc-32 of size 32 [ 1356.009537][T11585] The buggy address is located 0 bytes inside of [ 1356.009537][T11585] 32-byte region [ffff8880a9b76000, ffff8880a9b76020) [ 1356.022553][T11585] The buggy address belongs to the page: [ 1356.028204][T11585] page:ffffea0002a6dd80 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a9b76fc1 [ 1356.038368][T11585] flags: 0x1fffc0000000200(slab) [ 1356.043337][T11585] raw: 01fffc0000000200 ffffea000209f288 ffffea0002a3a748 ffff88812c3f01c0 [ 1356.051943][T11585] raw: ffff8880a9b76fc1 ffff8880a9b76000 000000010000003b 0000000000000000 [ 1356.060554][T11585] page dumped because: kasan: bad access detected [ 1356.066976][T11585] [ 1356.069320][T11585] Memory state around the buggy address: [ 1356.074952][T11585] ffff8880a9b75f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.083018][T11585] ffff8880a9b75f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.091108][T11585] >ffff8880a9b76000: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1356.099181][T11585] ^ [ 1356.103265][T11585] ffff8880a9b76080: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1356.111348][T11585] ffff8880a9b76100: 00 00 01 fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 1356.119429][T11585] ================================================================== [ 1356.127503][T11585] Disabling lock debugging due to kernel taint [ 1356.153476][T11585] Kernel panic - not syncing: panic_on_warn set ... [ 1356.160117][T11585] CPU: 0 PID: 11585 Comm: syz-executor.4 Tainted: G B 5.0.0+ #23 [ 1356.169229][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.179330][T11585] Call Trace: [ 1356.182634][T11585] dump_stack+0x172/0x1f0 [ 1356.185265][ T3874] kobject: 'loop5' (00000000230ee05e): kobject_uevent_env [ 1356.186976][T11585] panic+0x2cb/0x65c [ 1356.186998][T11585] ? __warn_printk+0xf3/0xf3 [ 1356.198312][ T3874] kobject: 'loop5' (00000000230ee05e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1356.202576][T11585] ? string+0x208/0x230 [ 1356.202591][T11585] ? preempt_schedule+0x4b/0x60 [ 1356.202607][T11585] ? ___preempt_schedule+0x16/0x18 [ 1356.202621][T11585] ? trace_hardirqs_on+0x5e/0x230 [ 1356.202635][T11585] ? string+0x208/0x230 [ 1356.202655][T11585] end_report+0x47/0x4f [ 1356.240205][T11585] ? string+0x208/0x230 [ 1356.244369][T11585] kasan_report.cold+0xe/0x40 [ 1356.249066][T11585] ? string+0x208/0x230 [ 1356.253251][T11585] __asan_report_load1_noabort+0x14/0x20 [ 1356.258902][T11585] string+0x208/0x230 [ 1356.262899][T11585] ? widen_string+0x2e0/0x2e0 [ 1356.267575][T11585] ? console_unlock+0x6a7/0xeb0 [ 1356.272440][T11585] ? find_held_lock+0x35/0x130 [ 1356.277213][T11585] vsnprintf+0xbfc/0x1af0 [ 1356.281549][T11585] ? pointer+0x910/0x910 [ 1356.285789][T11585] ? string+0x1cc/0x230 [ 1356.293736][T11585] add_uevent_var+0x14d/0x310 [ 1356.298882][T11585] ? cleanup_uevent_env+0x50/0x50 [ 1356.303906][T11585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1356.305228][ T3874] kobject: 'loop1' (000000006cb10fe3): kobject_uevent_env [ 1356.310162][T11585] ? input_dev_uevent+0x110/0x890 [ 1356.319770][ T3874] kobject: 'loop1' (000000006cb10fe3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1356.322393][T11585] input_dev_uevent+0x163/0x890 [ 1356.337406][T11585] ? input_add_uevent_bm_var+0x150/0x150 [ 1356.343053][T11585] dev_uevent+0x312/0x580 [ 1356.347397][T11585] ? device_get_devnode+0x2e0/0x2e0 [ 1356.352617][T11585] ? kobject_uevent_env+0x2fb/0x1030 [ 1356.357940][T11585] ? rcu_read_lock_sched_held+0x110/0x130 [ 1356.363688][T11585] ? kobject_uevent_env+0x37d/0x1030 [ 1356.368982][T11585] ? device_get_devnode+0x2e0/0x2e0 [ 1356.374187][T11585] kobject_uevent_env+0x487/0x1030 [ 1356.379308][T11585] ? release_nodes+0x548/0x9c0 [ 1356.384086][T11585] kobject_uevent+0x20/0x26 [ 1356.388592][T11585] kobject_put.cold+0x177/0x2ec [ 1356.393453][T11585] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 1356.399522][T11585] put_device+0x20/0x30 [ 1356.403680][T11585] evdev_free+0x51/0x70 [ 1356.407841][T11585] device_release+0x7d/0x210 [ 1356.412439][T11585] kobject_put.cold+0x28f/0x2ec [ 1356.417295][T11585] cdev_default_release+0x41/0x50 [ 1356.422329][T11585] kobject_put.cold+0x28f/0x2ec [ 1356.427193][T11585] cdev_put.part.0+0x39/0x50 [ 1356.431781][T11585] cdev_put+0x20/0x30 [ 1356.436214][T11585] __fput+0x6df/0x8d0 [ 1356.440209][T11585] ____fput+0x16/0x20 [ 1356.444197][T11585] task_work_run+0x14a/0x1c0 [ 1356.448792][T11585] exit_to_usermode_loop+0x273/0x2c0 [ 1356.454081][T11585] do_syscall_64+0x52d/0x610 [ 1356.458681][T11585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1356.464573][T11585] RIP: 0033:0x411e31 [ 1356.468469][T11585] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1356.488105][T11585] RSP: 002b:00007ffe925f0be0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1356.496524][T11585] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31 [ 1356.504522][T11585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1356.512519][T11585] RBP: 0000000000000000 R08: 00000000bf198e40 R09: 00000000bf198e44 [ 1356.520505][T11585] R10: 00007ffe925f0b10 R11: 0000000000000293 R12: 0000000000000001 [ 1356.528508][T11585] R13: 00007ffe925f0c20 R14: 0000000000000001 R15: 00007ffe925f0c30 [ 1356.537328][T11585] Kernel Offset: disabled [ 1356.541689][T11585] Rebooting in 86400 seconds..