000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:09:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:09:58 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:09:58 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 595.530541] binder: 29461:29462 ioctl 4018620d 0 returned -22 06:09:58 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) flock(r2, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f00000002c0)=""/245, &(0x7f0000000240)=0xf5) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fff, 0xff, 0x236c, 0xfffffff7}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) munlockall() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000080)={0xa, 0xffff, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x18) r6 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r6, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r6, 0x4, 0x100000427ff) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x1, 0x32, 0x1, r7}) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:00 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:00 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000280)={0x0, 0x34, "7ee887d75fa843530e1a7a4ddf00e5c27489d5592cdbc6f536b937bed78a6884cf57a7673752d5dc8f5edd0a3657f2fc3ef0d80f"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f00000013c0)=""/218) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000240)="11ad") r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r10, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0}]) fstat(r9, &(0x7f0000000580)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r12, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r12, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:00 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(0xffffffffffffffff, r1, 0x0, 0x4e68d5f8) 06:10:00 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:00 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000100)={{0x1, 0x2, 0x624, 0x4d5898cd361f97fc, 0x9b000000}, 0x800100000000009}) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0)="0d7fbb93773ddd8fe20184eba3e34e9818d74b69cf88880c6d25849f5c00e1f83cd26d501303e567d39bcc0bec9d5c8dfc05f54e8aa47c01c0131e170d608d59b0bb8647a6e4df4f16b27239d548c0473c4bc4485b296361cea430a0127129be64bd5aa4b2c6ab278448117c44ce61d530e42b0f045cb4f9d1c9fed230e343ef02ecb1b65b1154f11600", 0x6) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r4, 0x0, 0x4e68d5f8) [ 598.214855] binder: 29497:29508 ioctl 4018620d 0 returned -22 06:10:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:01 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000013c0)={0x170, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf2f5, @loopback, 0x1000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x3359}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3b8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x64000010}, 0x4802) fstat(r5, &(0x7f0000000580)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080), 0x1c) dup2(r10, r10) r11 = fcntl$dupfd(r9, 0x605, r10) getpeername$inet6(r11, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r13, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r13, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 598.550516] binder: 29533:29535 ioctl 4018620d 0 returned -22 06:10:01 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:01 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:01 executing program 3: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x40) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x854) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000100)="00000100000000c483431b1792b34eb30500000007c8c3e95628bd9b24", 0x1d) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000300)=r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) read(r6, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x11, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x9, 0x6, 0x7b, 0x80}, 0x14) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) dup2(r3, r3) fsetxattr$security_smack_transmute(r3, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:03 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) dup2(r5, r5) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000001c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0xfffffffffffffdc0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:03 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:03 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000002c0)="ee60e2dca9c338ab1ee108b7ee99ea22a331cc5fb9c2b3c7b2162c559b367a0f96e076bde53c84d2d68a241d2cf7e87e684dcffebe84e986e9ceb4f83eb001b11733b926c39c7c6e52ca0188bb4280be5998dbd2999d1ba29e1e8d6c3be0d08c05f52eec8cb451a7d2d7a4e791f01ac032cd6f9a82ac0fc9c61b3a591b5525ccfbd103de9b59565012be8518e9df17d000e3f68cb4f107299bc49c6149fa65856f889846f2ddec7ab5a5a15e830ca59470313df745c587fd8dde6d8e6fe0ba487d6c70f008fe63eb5f9715ce488e877c0afc6fa20d70bf4e98b4e6", 0xdb) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r3, 0x0, 0x4e68d5f8) 06:10:03 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 601.237697] binder: 29568:29580 ioctl 4018620d 0 returned -22 06:10:04 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r4, 0x0, 0x4e68d5f8) 06:10:04 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @local}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000003c0)=""/4096, 0xfffffd24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0x38) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:04 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 601.555375] binder: 29605:29607 ioctl 4018620d 0 returned -22 06:10:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) prctl$PR_CAPBSET_READ(0x17, 0x19) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:04 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000002c0)=""/198) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) bind(r4, &(0x7f0000000180)=@generic={0x11, "000001e7ff000000080040944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000c389e2c8ed64e5c03c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001daa1f2e090283878740000000000000006ad8e5ecc326d3a09ffc2c65c"}, 0x80) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) read(r6, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r5, 0x0, 0x4e68d5f8) 06:10:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r6 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r8 = eventfd2(0x0, 0x1) fstat(r8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r6, r10, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r7, r9}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r9}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r5, r9}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r11 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r13 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r15 = eventfd2(0x0, 0x1) fstat(r15, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r13, r17, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r17, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r14, r16}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r16}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r12, r16}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r18 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r22 = eventfd2(0x0, 0x1) fstat(r22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r20, r24, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r24, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r21, r23}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r23}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r19, r23}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r25 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r25, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r25, &(0x7f0000000080), 0x1c) dup2(r25, r25) getsockopt$inet6_mreq(r25, 0x29, 0x14, &(0x7f0000000140)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000000180)=0x14) r27 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r29 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r31 = eventfd2(0x0, 0x1) fstat(r31, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r29, r33, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r33, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r30, r32}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r32}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r27, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r28, r32}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r34 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r36 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r38 = eventfd2(0x0, 0x1) fstat(r38, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r40 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r36, r40, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r40, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r37, r39}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r39}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r35, r39}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r41 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r43 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r45 = eventfd2(0x0, 0x1) fstat(r45, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r43, r47, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r47, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r44, r46}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r46}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r42, r46}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r48 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r50 = eventfd2(0x0, 0x1) fstat(r50, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r52 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r48, r52, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r52, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r49, r51}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r51}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r53 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r55 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r57 = eventfd2(0x0, 0x1) fstat(r57, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r59 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r55, r59, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r59, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r56, r58}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r58}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r53, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r54, r58}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r61 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r63 = eventfd2(0x0, 0x1) fstat(r63, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r65 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r61, r65, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r65, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r62, r64}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r64}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r66 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r68 = eventfd2(0x0, 0x1) fstat(r68, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r70 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r66, r70, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r70, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r67, r69}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r69}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r71 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r73 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r75 = eventfd2(0x0, 0x1) fstat(r75, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r77 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r73, r77, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r77, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r74, r76}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r76}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r71, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r72, r76}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) r79 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r79, r79) getsockopt$inet6_IPV6_IPSEC_POLICY(r79, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) r82 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r82, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r82, &(0x7f0000000080), 0x1c) r83 = dup2(r82, r82) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r83, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r83, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r83, 0x4, 0x100000427ff) accept$packet(r83, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000b80)={0x630, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x15c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r28}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r35}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r42}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r49}, {0x1b8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r54}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r60}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r62}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r67}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r72}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r78}}, {0x8}}}]}}, {{0x8, 0x1, r80}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9f28}}, {0x8}}}]}}, {{0x8, 0x1, r81}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x8c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r84}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 601.895289] binder: 29632:29633 ioctl 4018620d 0 returned -22 06:10:04 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:04 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0xc200) fcntl$dupfd(r1, 0xc0a, r2) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r3, r4, 0x0, 0x4e68d5f8) 06:10:04 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xff) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:04 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:04 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @reserved}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r5, 0x4, 0x100000427ff) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "be8f0cb737af93ef", "55fc3f6c2b70eb83782d44a5d1bc9915209bea3d4984fb0777d6c9bc529c42b0", "c92ab907", "e52f96078e47f07b"}, 0x38) sendfile(r1, r2, 0x0, 0x4e68d5f8) [ 602.279696] binder: 29662:29663 ioctl 4018620d 0 returned -22 06:10:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x7, 0x413480) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\xe1\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', 'syz0\x00', &(0x7f0000000000)=""/3, 0x3}, 0xfffffce5) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0xd) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:05 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x13) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 602.481542] hid-generic 0000:0000:0000.0009: item fetching failed at offset 2539123 [ 602.517306] hid-generic: probe of 0000:0000:0000.0009 failed with error -22 06:10:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 602.644479] binder: 29695:29698 ioctl 4018620d 0 returned -22 06:10:05 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:05 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = accept4$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x800) r11 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r13 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r15 = eventfd2(0x0, 0x1) fstat(r15, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r13, r17, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r17, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r14, r16}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r16}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r12, r16}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in, 0x4e24, 0x8000, 0x4e22, 0x100, 0x0, 0x40, 0x80, 0x33, r5, r16}, {0xf7, 0x19f, 0xffffffff00000001, 0xa4d, 0x3f, 0x70, 0xffffffffffffffa5, 0x3ff}, {0x0, 0x6, 0x7, 0x9d8}, 0x2, 0x6e6bbd, 0xb0ec890c8131414b, 0x0, 0x6, 0x1}, {{@in=@local, 0x4d4, 0xff}, 0xa, @in6=@mcast2, 0x3500, 0x6, 0x0, 0x0, 0x1ff, 0x7f, 0x7}}, 0xe8) fstat(r6, &(0x7f0000000580)) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r19, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r19, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:05 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) mount(&(0x7f0000000000)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='befs\x00', 0xdd4b00e62f79ba06, &(0x7f0000000140)='eth1\x00') read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:05 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:05 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x2000, 0x10) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:05 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x802) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000009000000ffff00003cf3ffffffffffff070000000000000001000000000000000700000000000000000000000000000000000000000000000000000000000000ffff00004000000003000000000000000200000000000000ff030000000000000200000000000000000000000000000000000000000000000025f0630b52c2b852799000"/330]) openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) fstat(r8, &(0x7f0000000580)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r11, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r11, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 603.211512] binder: 29723:29726 ioctl 4018620d 0 returned -22 06:10:06 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x1c2480, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000440)="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", 0x1a2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000000)) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:06 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 603.516356] binder: 29724:29737 ioctl c0c0583b 20001540 returned -22 06:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x1, 0x9}, @sack_perm, @sack_perm, @timestamp, @timestamp, @window={0x3, 0x9, 0xfcad}], 0x6) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r3, r0, 0x80000) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:08 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14103e, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r1, &(0x7f0000000000)=""/20, 0xfffffffffffffcc8) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:08 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:08 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r2, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r2, 0x4, 0x100000427ff) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pread64(r4, &(0x7f00000000c0)=""/247, 0xf7, 0x1) r5 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 605.407405] binder: 29756:29759 ioctl 4018620d 0 returned -22 06:10:08 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x55800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd68}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x26000001}, 0x8040) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r10, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:08 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 605.753778] binder: 29800:29802 ioctl 4018620d 0 returned -22 06:10:08 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x27e752888a345aaf) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xa5cc554) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1209553a", @ANYRES16=r5, @ANYBLOB="0d1027bd7000fcdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}}, 0x20000c41) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) r7 = dup2(r6, r6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000200)=[@mss={0x2, 0x400}], 0x1) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r7, 0x4, 0x100000427ff) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_subtree(r8, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7042b00}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200080c0}, 0x80) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus/../file0\x00', 0x2000, 0x40) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10402000}, 0xc, &(0x7f0000000280)={&(0x7f00000013c0)={0x21c, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x51}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4}, 0x48004) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r10, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0xfff, 0x3]) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r12, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x10a, r12, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:08 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/143, 0x8f}], 0x8) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r3, 0x0, 0x4e68d5f8) [ 606.245172] binder: 29832:29852 ioctl 4018620d 0 returned -22 06:10:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000300)=0x4) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lseek(r0, 0xfc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) dup2(r2, r2) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x1, 0x1000, 0xfff, 0x3ff, 0x9176, 0x4}) 06:10:09 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r2, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r2, 0x4, 0x100000427ff) getsockopt$netlink(r2, 0x10e, 0x1, &(0x7f0000000000)=""/13, &(0x7f0000000080)=0xd) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000002040)=""/102400, 0x19000) sendfile(r3, r4, 0x0, 0x4e68d5f8) 06:10:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:09 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 606.770537] binder: 29876:29892 ioctl 4018620d 0 returned -22 06:10:09 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x3ffffffffffff1b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000003c0)=""/4096, 0xfffffd24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) r8 = dup(r7) ioctl$LOOP_GET_STATUS64(r8, 0x4c05, &(0x7f0000001540)) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) sendto$unix(r5, &(0x7f00000013c0)="5dde7edc61d5a5a81d0ce0efff2b7b35a3695bba854f3d71850ff99bf6ae2c8cf5474ee7064e85cc3ba8e139a996d31d9215d39492598c5ed455a533572ba3cf5a4a8aa640df20a723fb0793df251439ac950aa469895bdd4f6b8affeba2c4cb0307b634973fb8a60c9ff2", 0x6b, 0x40, &(0x7f0000001440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockname$inet(r3, &(0x7f00000014c0)={0x2, 0x0, @remote}, &(0x7f0000001500)=0x10) keyctl$get_persistent(0x3, r11, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x1022, {0x0, 0x1, 0x6}, 0x80, r11, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:09 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x10, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r6, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r6, 0x4, 0x100000427ff) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r8, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) fstat(r7, &(0x7f0000000580)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r10, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 607.274608] binder: 29913:29928 ioctl 4018620d 0 returned -22 06:10:10 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) socket(0x5, 0x0, 0x11) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) dup2(r5, r5) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x3e4, 0x12, 0x5, 0x2, 0x70bd29, 0x25dfdbfd, {0x5, 0x0, 0x3}, [@generic="2c151df514dd2e832e96ad77eb1ea046f12201af6b1a34d5d44613", @nested={0xa8, 0x2a, [@generic="ea471c40127737a21229033258cd20665b803349b0c69d2c2118ca18d091fb0443b074b927c2346a016d1153d95f54e9332bf0fc11388d94a247973a7159cbde182a42b30513f199e5232a7544c96b9e47eef0ef7ad0b98251b97f39af8648403f19a26b156d1dbb96364d29c5caebfbd14137809d29cf994d448f18afd3bc4a0ac12bb1f9de564d7b77d56d7902f01729c5e4ea899ddf1c079a3debf6", @typed={0x4, 0x5d}]}, @nested={0x30c, 0x48, [@generic="212e3689", @typed={0x8, 0x71, @uid=r4}, @generic="b7823c4a22e4238cb891f23a955916920152a33b4ae51dce67e1b1652137bda5404a45854bfb8411449acfe9833aea05287b9a0787245be8c05cd19c627b5849f1f295ed4ad9c7437d661b3bc9b06c4017686bdc03e0b01e4014166727acd06ac20fb811d350c6fa1f35fcd0cca6245f1fa83507910dad1ca95b55595e15a7ea8446bcf1395c88b92d62def7d4a03ccdc7ec36f33c721fa9918e22c3258f1b634198e9eea77a", @typed={0x14, 0x8f, @ipv6=@loopback}, @typed={0x8, 0x1c, @fd=r5}, @generic="997531811d5e99f90f99d401ccd29005a461a23a475b9434eee90b5e07d94255c30bbce807fbb58f1b15569419a4c10a60a983f1a2a5ec555a551a7a92bfac577869e1ba9243bacf4ba207e059e8dc24b1e8312a8734f738e40208e874dd29e55d76a96ff0043f83bcf6f9b2191adc0099845aa5d8ec9d3ce4235e2e438a2dafb327982a2e97805a4fe8339e3d28fa354364b301abd1606c6c76dd4910bb3e648298d72f891c162f3a6165b77ea12ec94bd70e8970f0cd808e4492abac7a543004f70beb492558f93349525624384973a9c1b6b97a850b978685", @generic="0fed60faedd206dfcb9e312e44835dac9f9ad8062dfdb07cab687af3629596a2d7d8eb8ded3d50474285aa08e9c68258114d78fe4b74f794bc62a650efd796151ab1d007c0a63c3e7afe8c58e8e74cb2c9368c33875e40d6b5107c224ed671989d80c799d48e2b9034f900c30a", @generic="4c52861ce454a6707b41c824877ad81fbd1c729102db1a33849574172e46024b506110794d8200b6198a17d0f9cde2ad21eaa8243ee9ba8846409f116e49a7f796a9bf15a0b90eb716e183dd595d0fc2d6ae5bd51dd5c594acc54b7049e3d2d394a92df0ae352274aaa31ad92c56d2bf90047567cb63901c193b4e466b799e70225bba4547bd2836064495da5c8a81ccbeac9ec7f3b3156651456e2b95253722f4ecb551dc6c6b2b25556749a449e32a183325c0bd2b8456482b6b88c193db7233a0803139c30d23d2ecd994b2faf57cc27b7a5ceaf0ea204a4f428c8c33b424b94e4f8822315c72227d4a15550f7b109f07"]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bind(r1, &(0x7f0000000180)=@isdn={0x22, 0x6, 0x20, 0xff, 0x5}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r7, 0x0) read(r7, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r6, 0x0, 0x4e68d5f8) 06:10:10 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r2, 0x20, 0x6, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = accept(r1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) r7 = dup2(r6, r6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r7, 0x4, 0x100000427ff) r8 = dup2(r7, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) readahead(r8, 0x1, 0x8001) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:12 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:12 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x4) ppoll(&(0x7f00000001c0)=[{r2, 0x1000}, {0xffffffffffffffff, 0x8}], 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={0x6}, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000003c0)=""/4096, 0xfffffd24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:12 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:12 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 609.646972] binder: 29951:29975 ioctl 4018620d 0 returned -22 06:10:12 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000002c0)={0x0, 0xfffffffffffffe00, 0xa, 0xff, 0x3, [{0x400, 0x5, 0xffff, 0x0, 0x0, 0x800}, {0x1, 0x7fffffff, 0x3ff, 0x0, 0x0, 0x211a}, {0x1, 0x9, 0x1f, 0x0, 0x0, 0x500}]}) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:12 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @rand_addr="0bf900"}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) r5 = accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80000) sendmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000280)="2cb5116507da6ce6933c90c014fd8e76b5922d59be9920e359ec5e2cc7a6d20a0a12d867f2a9a42e51e380bd9073b916c4e039d394c2afe94d7836b25413b0f9a1c22d7204a9086a31d77595d86f0cbfd2c124d4a0155e5622f78f2f52748dfb0d8e5b74512188f62bf7c31d3fbb95cbb284c41c504d6aacae2f8743696517dd183d25bf102d755d4223f7d7056abfea6b2ec5ff7c656495f992e9caef17feb3f49384b0f680ff82d267ba774bb714f4fe6352c087c783", 0xb7}, {&(0x7f00000013c0)="415611e2bd708869b6d6b458f74131c3ad081ffcebbc42b20d8537e5d0e006a979e181ab9bc94430b470e2c4605d3bd1b0c085bcba4e4a409692f3c3d5716350ca", 0x41}, {&(0x7f0000001440)="78f53c0ef2c4c60aa73c0d80c1d22321fff6154301a606783d1108932976ba0cfd6708510f58d98f2d4d2525a26a475c9656131682f091b96929490e8a9f5c7c229d", 0x42}, {&(0x7f00000014c0)="8e459fc8499b335d916e9e8f5cda25e0b52252b3b04dcf6b85a034e11a6d0131d2b254ca14fa4b817dbf4e2938d8345ed42cfbd1a687cba62b36e83f2f88face153a4d2a6b2f14ab8ae0e4179e96e56dc97112c7f2ac3607ff2b5108776aad04966d01e08278414f590975342d8361adf2ff4dd1b6e8b3db72", 0x79}, {&(0x7f0000001540)="a7f2aa9546c67380c361958df6a76352b6fd1f85c2b95bfa6c1fccf7b0b691e1179e890da9455f0b9a708bba78f061b479ff5ce5967ff2a853255cb0e9e5059ec99cae887d57ba30535eca79747e7501e1ec54044299acb00437d7576da3464d608a222e16db508789398a89c3b6d23219fccf92b902e9e7c03db6dde690744353a5733c26e7da8c16c3ee0ee6d70c2c70d9caf79142", 0x96}, {&(0x7f0000001600)="2d6a59fc529556bc11eb8ae7908e3947ecde9080832faa97ac9b5aef6cd3382300587849249159334ab19c517dd129238a0888379eefff0410c2cd62d8e93678e365c6009d91deb860c3587273797cf8c922cce06e3810da398e82a4accc58027a0770a1ce977141bcdfd5ff148744fcadabd01b2e", 0x75}, {&(0x7f0000001680)="2bb6c7e69431202ff2e9d9f75cbf416bf323df96f02fb83d9017a4fd1b767c4d4564888a0faaf5052c5a56a98fee14a90c840cdb167e757bbae0d4fca0faf99d2cee6e1045dba2ab95", 0x49}], 0x7, &(0x7f00000018c0)=[{0xf8, 0x116, 0x29d0, "df766a8e02901298a866fcab308d33b36c0b6f519c7749b040747d63462392ee7762a24ac38e943b0630e9bc4cf0678ea469285001697fcb8fbe9ce91374f6ee3c7d1d518b6cff1391905fcea041db16544b8c8096b3e8bbf4337f99205d48a3c3bfa5bbe86c4acca12d0ae7fb733215a7e5b4c18db0668a511202a033d2ab41f7359f2dedb8de40797bc4272acac835a86c1450527edb6b6134f876e0524efb852ff0f7cf49761ab302fae62ecbc754d606036eb93d43facb0233bf9c4f439e74badc735dd75161ed50a8b72165739717cf4f23ede6fb4afaf68bef2d6d477cb35f1fc31b"}, {0x68, 0x84, 0x200, "c9e637a1ec47c2353584c69e03402396c9eeaaf2e3a9d065e41395fe0daec09696084ba5a1192041eec60846a019ed2c5c6d23cb9cd32f46c06726b76c7f42d75d674113603c1db95deb1a10aabbe10322de2a"}, {0x20, 0x110, 0x7ff, "1ebf9a92837a75f61d67"}, {0x110, 0x31c, 0x0, "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"}, {0xe0, 0x115, 0x5, "e6b7dc465486664d06aa24cff34ab1320a1db77dfcde0c4f78825a9b5661e91335fa87d9aa3f492cfca542ac3272cfba0e6ada66288ee2836e86ea65aab576e69c3f7619ce973cce7a35413683b3da5351235f44203ce3c2ac3f3d4039730bfe15259887f4ef79212fac8cd65aded992d5b1e71da23540a3fbe70e79c6db7af22be2b370c039ab36e005b5f00dd9c3c76f11dc8a03f4393062d5f666e6076647f5d90f0d363145263c220cd5fa6b933600983640c62954efaeceb77f661ad79196ea3543733ad008a0"}], 0x370}}, {{&(0x7f0000001780)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001c40)="d79106c9e0a55a0450a85f4ef6cd4f3eb967dc77c7c1cc11146714e5ef255a2f5eb28d79b995dd6c265709138984561a11d00a2f24e9ef6eb258b3c08244a2f656fe42475128894f02e10835403388046b472a59ab5846c54d6cef183da2da6e31840cae0606c30246c5f64a2f058842c186a2070dc1bbd3733896fdd926470c178df97ccafa262268ea2e396fe40cc95a8179e9fff60a332a38167427202f95f60b97d2d65a484bbd59f810eda3b918b783e107e8a5a958a5e1d68d5e5db5d87a790dfc", 0xc4}, {&(0x7f0000001d40)="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", 0xfc}, {&(0x7f0000001e40)="0a540e1bc873ccd4768370b6488732048c806c3e2a2bf883571e83a64557830db45a249ea3b836b3dd99233642e8312b98854aadb4b6c20cc5fe5073109af41baa8d24ff30bc99fe913edcd28d25d570127f99f38d604788d84a4bf398e0f6db381490807fa5c1c559174c566fc951414fc8bc3d366e4fc780844091c15ccbc8f44679108f0dd45429376e8c8cbe7c924b3a9e74f62c3e9f4554c0c3c729c30dafd7f663cd69bec227a749109a3f17e983db73d6f80a4c0894199e7036cbdafcbb89d5423e913e8f3d71bdd7dcf7187fa912", 0xd2}, {&(0x7f0000001f40)="84c057acc39ad5c52c28b03eccfb74505e6cde2bcd50d2c07c4ab220dfcd842c89ee491d2a5ee1ee3f9a3b1b4d40b4d7440c030acb6848a1151149a57e8ca418a19913e18d106a3312825926f56b9b779910044cb29ffc8f454d8d40de933b12cad86548d3a5ba091942797656de43bea1597c247c81317bf8409e744f6efa8c8e194fd60cb8e9cf507ad129765572c8b17345cf9bcdf5376855188dcbb933919afb66f9163905db0d8b7bad23e99c4e5a16aae1b3f1df9ece8c911179830ac8da2e51f8508db35b47e0ee527b008faaa27a86f6ffbd", 0xd6}, {&(0x7f0000002040)="fcf297c90fa74b83b5a0dd38efd63fd0b8e53a2ddbe18d884a0a1ed1eb4c6d4741ba5bf4874c2b5d7701c3f9f5db364a9359d1f606b45bc4053d8769c1e3f478d7affe434b6e65c2485bc15ef1c829dded11bee2f2e7abd9eea83500e770270d8dfdb95478496e10676cefd7793b77315071fdef958d20cd5706ae750beb6a5a014c73921089d4cdc0720ef41970eefba0dfeed4f3df878179d13f1e13de4e80334af434e4f24a3969635e", 0xab}, {&(0x7f0000002100)="8009cb4bf2826a366d586390d246c200710154075295b47f9dc034ca645341134dba750973b2695cebc84dd8001d4d7ced0c382400f8d19d521167dba93226027993ea371e3578b3c762d8c090d4231ad830b8f26deb6f8eeff22b53d042f25620db873506274a8e4d0d480eb82a8e5ea0901107aef66b114fdd4fca8e5e63ada838103600d505175a", 0x89}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="566881869525fd153ebaa5729afd8af39c5a5c92551d738e7a03750295ae4ce7305ead1e607267faf6c2e72bfc2cf3348afd335988234d0c45ccd56820628e748d8cee2b809305df8a89cb2f2c1476e82b4b38ecd190f7c8dc4abb68623cd1774734386df9581da73c0d83d1d5c62377fa8ff02185be6b98ff1ffd85828615e8a59a6c0007fbfbb32f10ae79887ea92e96d4b733284bbe667cf3e12e038f685d9feae971090b5352223d81600b63ae49102e32a0a30ec10ef65e2a0204a4fcc104a4588818cbd83af759305343", 0xcd}], 0x8, &(0x7f0000003340)=ANY=[@ANYBLOB="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"], 0x1d0}}, {{&(0x7f0000003540)=@sco={0x1f, {0xff, 0x48, 0xc5, 0x1, 0x1, 0x80}}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000035c0)="ab6876d7e027d75b418da111fdf936de3800f16cef1bb08329cd5ce3aa867796d15c824ec49574d58ce61fbdcb4140b11dee55c6dcfe4b80bae7dd0ecd052b81932e2ba5e1ac23c05871e5b9fe16bcb91ea0c83601", 0x55}, {&(0x7f0000003640)="c0137a71e881cbce2c18b382906b1e7d9aa86628d327f44acfc1bd0b8d66bc54a62dc2dada014bf018add29957c9acc08e2e401a58942889fe5e0e7e6eb97c5cda47f488dc677c59877f9091b5f0f35148b02da0a6", 0x55}, {&(0x7f0000000340)="3385734bbb1f03ed675814a0d2cb499cc3cb51404330064a1e46caa3f85af04035314dde99ecaa75a152", 0x2a}, {&(0x7f00000036c0)="148dc4dbdad2e5506a19a4cd4abbba4e9655a8feda9c3038a7d0895f0cb44f9ad64ed99a470e68d59e00e969d6443e9379837ddb43d24826ed953afbf307379bf00527343fcd464b79017c5b1abeadfb8533c7694f5ecfd7645f49640587900c8f19d4ec1b2232470928cefd1e54ff7eae2207093f8dbe775c642797", 0x7c}, {&(0x7f0000003740)="79f42371739ebe54f0bb83b6f73b5bc517070bf3180ce3f0d9bebbf619869fe1450d4b53af7518fdeb742185352e7941f172efe0afbd8784c165f20df7cea4d82de21cf49b0137f9f25efd9bf51c2ce7eb4cf3aa249805f15ce1685e371078f2e6a7974cb59e6fcb4601cfd2853f2e71f001e05116d40b4f14c9c6db59e55abcba385b2297d730c40a4fe11f60ef7e3ec48ea0ff04fbad79b24b24e55762a4dbe2cc230a37f1340eae52a8b66823b9a3ab4facabf0b6864921a79af092ae3833795b32d966e261d13f74", 0xca}, {&(0x7f0000003840)="40171bcbafd7ae72e6d8f0b89c92624ca80d45ac60460f75e8ecc28fc8fe20e0dba9252f4e867b655a72df331543971d50ebe1837c04cd6f7f166ee54eb7a6b5394b40c4afd35c71650bad70a03fad84541f064c8f9ddd4f", 0x58}], 0x6, &(0x7f0000003940)=[{0x78, 0x115, 0x81, "38383026b3beaf708d1469b71b1fc2d81b955c7a5e02079e394b1adbf1670e72a9fc3203567500471a09733cf2f9ffe96d6319c18954099900b251e3c25a81a5569f7d86acbc6655775ba541e8277e958c6269a59c6d9685024ab39bf7578faa3def2eb1"}, {0x58, 0x0, 0x401, "f6c97a27f1b9365d51318d6a9c680bb3c1fbbde9e9b2943e92942f5874b28944cc285ad1415fad07635cdc020945ea1219256a60525e2c952b44fc7d2720c374c3"}, {0x70, 0x110, 0x7, "06fae01141c83d5b7b89b399bc70e731c9d6079b3fac5627711d9ac843011b8b7f56062cae69320be597f84d64c950fb3c5aab84643783fe2504f2fbc112baf56824fdc19c99dac5950dbd85c1a70198125b0fd952b828f4b4dd"}, {0x90, 0x134, 0x800, "880b7b631ca2b6866d2fc80ccf8123ae712e956dd75d5bb89e49fd7b22a1d8933d63a899eb0cc08486e844d204d47d0e77e9f14ae8adf5fe7584f1fd83c54e3eedb48e4f46024383910b9341024a9f911a0c69e98c33403b78cb4b9f084aa1127c5723d05778ae36bd7e737fb798c251e24528000c40361e20"}, {0xa8, 0xff, 0x3, "a82918d749bee4ef1824925aa69408da8ddf60c2731307b16cbde1f4b0d73b96087849ed743064f2bad46a43d589ae7bd28fcbef1971f8fa0a0578d4f68af89f81b8c006f6446a9942bc2242e6a29537f936937cd80a7f287d3bc3f7d0016bb16b6ecd74e4ff28c9346261fe19118235b951facd874d4e43e7604eb0cd12a30417ce71a6181b6dcc6530f59ee0bfcf286fe62a"}, {0xc0, 0x10d, 0x2, "51601832a86bc293f1cf6fb039d11265a8a61ac3b9aee4dc1ae363a2d50b73b75a91c5e3b1f71f9ffaa7884772840d684761f0804845ecb1e6abcc1c960ce49f446bef2c440ed896dbf652f75b6fa0196e22980bf8d60d3b99272410ec4e1dc59b96e120579beb740e4e78b82126364672a8cb7f18a15ace13380be1d25befacd7227277f6ea14846ed0f19b1f511f874507940abb018eb99d8b36331a8171a63165b0851779de083edb58"}, {0xe0, 0x84, 0x7e, "3fc29e99ee2a84d165fd9c32d948d5441666fab130d47f67b7323588720a0c203a279ae6cf2aa500349d028bc07ea936b95933dadfadb3791d0ddf5fc352d6dd9c1a92d1572bb6b09bb5384d6ca7c715f3b33322addc1006adea73734182be7abbe6834d5b33dc480bc41ac5f6e654add16efbd51a5eb2f336b3f6f4848e1e90346bfb11d216fd9574c2c40d22ffcc5ae1afb89b9eb9bb56cdd9d9c7899fc777dfd97174993303dd7c16bb8418b85b9423ddf928e56a5c95af8de0cacd4c9a61f9ff4bfc7d6f6424fa"}, {0x1010, 0x1, 0x1000, "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"}, {0x110, 0xdbe50d00396ec03d, 0x1000, "749421c85e0fbc0f65b2afb68396f99178e30fb0798856b0ae1b9d756a89174b36179c5c1b55fa2a1eea9346c5cef139c5d7e8fa4e5efeb5a6f88c4b30c3d3f4fa937af178d4548788a72e5f1e4da64ddbf578650108c8c0ba068750b5d5c2c49459ea1228d9b829773132537d71fb47326db2c588cac466e4220e9fda6574daac70a549d0b3bddd795a5e5838a63a064286e655f14d918a132b39d0bf33e676006b3ad7ef0184daa5fe2d2c8b22a38158b7030b83eb13e942f6359d1d163bdc61ebb4863eaaebc756755242a2226febb294a178bcb7fda3ff5d6b2e0a6201e8b858b925f5d03c33dd03607c022dd7e2e9442c04210b45208a"}, {0x78, 0x84, 0x5, "ee3b1a817b6a8b76beb029fcede56babbb4cd1f7986213b92b7762dcaa64e4619ad6d960f3b20bf63813a2a3cf1342dd7c433d40df21a296d75ac74b7f984e313cfef3667dfbab8166b6aaa1d65a60a986421b048159cdef53fc684ab391d8a7ee304bf5"}], 0x15b0}}], 0x3, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) fstat(r8, &(0x7f0000000580)) pipe2(&(0x7f0000004fc0), 0x80000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r11, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r11, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:12 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:12 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:12 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0x1000, &(0x7f00000018c0)="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", 0x7e, 0x0, &(0x7f0000000240)="d68a74be44efb4a733f9fa2ae674f277a7b5f1a1f0e2f7ce82a2d9193eb6ac081321bc9ed627cb36e774d2ea124032643d8c88e5651aec075bbf60b8dc0dd243aab6c90a5e542e10c92d7762618b355847db43f2fa0f0904274501bfa1e3dcd989de4c91bae570181eb29709024c77c22101234cdf76d0c44dbb1f9c8b93"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r8, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) fstat(r7, &(0x7f0000000580)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r10, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 610.168481] binder: 29997:30013 ioctl 4018620d 0 returned -22 06:10:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x1120, {0x0, 0x1, 0x20006}, 0x2, r10, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x2000000, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:15 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r5, 0x4, 0x100000427ff) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:15 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:15 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) tkill(r4, 0x11) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r6, 0x29, 0x40, &(0x7f00000000c0), 0x0) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e1e}, 0x1c) r8 = dup2(r7, r7) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x3f) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @sack_perm, @mss={0x2, 0x9}], 0x3) fcntl$setstatus(r8, 0x4, 0x100000427ff) write$selinux_context(r8, &(0x7f0000000100)='syste\xc0\xbcBN\x83\xa7\xfah\xbc\x8d{mr:crond_unit\x7f{\xf6j\x02?\f&\\\xc1\x12\x17\x87\x91U{mf', 0x25) fcntl$setstatus(r3, 0x4, 0x80000000002c00) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080), 0x1c) r10 = dup2(r9, r9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r10, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r10, 0x4, 0x100000427ff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000000000000000000010000000000000000006000000000000005e820f17900c9f0df0dd28391edcf06d46a1568bbf6ec83e00"/64]) [ 612.681798] binder: 30033:30055 ioctl 4018620d 0 returned -22 06:10:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1020, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:15 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:15 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) dup2(r5, r5) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000014c0)="1ff05c2ea1ede6f26aeb89863c80b44f569067063ca3531b99dcd7b5af177c688bac0bfd9bef52dff45ed4978e35ad5b1ecfc06c3f62f6cfc4f3d801814d733f9e33e332bccb098bcf965fae92878a8e81cc4a99e609e7a30f905d3214058282be293a9a7be1e172042465c9cb2b43269461c73ebb0aca491ecc783322fb46142358c84f94d71fd58f4e7b1a644b4d", 0x8f}], 0x1) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0x10001, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080), 0x1c) dup2(r10, r10) fsetxattr$security_selinux(r10, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:15 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:15 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r5, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syncfs(r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080), 0x1c) dup2(r10, r10) r11 = accept4(r10, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000000)=0x80, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80041}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read(r7, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r5, r6, 0x0, 0x4e68d5f8) [ 613.191347] binder: 30078:30094 ioctl 4018620d 0 returned -22 06:10:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) rt_sigqueueinfo(0xffffffffffffffff, 0x21, &(0x7f0000000240)={0x36, 0x6, 0x101}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x1, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x400, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:16 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:16 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0xe7) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) [ 613.725789] binder: 30118:30135 ioctl 4018620d 0 returned -22 06:10:16 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) dup2(r5, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000018c0)=""/4096, &(0x7f0000000240)=0x1000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080), 0x1c) r10 = dup2(r9, r9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r10, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r10, 0x4, 0x100000427ff) accept$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) fstat(r11, &(0x7f0000001780)) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r14 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0x4c) r16 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r18 = eventfd2(0x0, 0x1) fstat(r18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r16, r20, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r20, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000028c0)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e20000700008000a2000000", @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB="b46b6e00000000000c001c00b33f58981a895665529edc66eaa65d44e5a749195a66d40429db8f256e9cc5a22e06494257b18e70563ff34725d8c64febec54c109f06ad42999a12897aed25b083abde62ab6d0f0e6066bbaee4ba3e0d4ec75f0151f07abc31fc669ef1ac325d26b7c2e31b40035433c198e8aa91122f45a709247493d19bc52f796c40c18309e03ac862ee6ced55cdfd0a36cba0efc059881ca", @ANYRES32=0x0, @ANYBLOB="030000000000000000000800030000170000ac0007007f000001000000739e7969a6000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200203e281b2f00000000000000713930369d036aadb5b98840ff0bdd5f065c2a444664534df4357ecec1bcd3b9551b87c9784b124b234b6459a1a742b8feaed04f786edfa3372db67ae91feb2e2da9917d50f09bb3dad05cee514347fff03a6f6115891d1e", @ANYRES32=0x0, @ANYRES32=r19, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f04000000000000ff010000c06b6e000300010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r15, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r21 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0x26a) r23 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x200, 0x0) fstat(r21, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r23, r26, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r26, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000002b00)=ANY=[@ANYBLOB="1c010000df2dff020001000008000000dd4265c75634ac14142100004e20000700008000a200000057629e60ffffffff000000001f5f7c6ada798a17e7bd3b682ccc28e95c0a742ebe124edd2ad7d60900"/90, @ANYRES32=r24, @ANYRES32=r25, @ANYBLOB="b46b7eb0767569ea16f31c00", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac3f1c875e42d7d0d50000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000d6c4ea8b39954d3fe78e2c0bceb7fc57895c40a9bc6e0f7830f2bd9e8745108ca2b1250b319b0039fd9e37b0c1f8b6fa0bc7ae0308111bff49b3e980fb73e5647ecf79ec4283448f6ab1b969ed33d8ed677d504782b9cadd42e056985012627f2de473711a07b09fe9ef8b07a1541f2fe6961313868607c97b650bcb91965e4f7fb3d99794619c2834de996afa02151cb223c63f4148d90507ed755b7ce48244204757", @ANYRES32=0x0, @ANYRES32=r25, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r22, r25}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) keyctl$get_persistent(0x3, r25, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r13, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:16 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 614.229994] binder: 30150:30165 ioctl 4018620d 0 returned -22 06:10:16 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:16 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:17 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x34113f, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x734}, 0x4) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f00000001c0)) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:17 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:17 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb10100000000000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r4, 0x0, 0x4e68d5f8) 06:10:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:19 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000003c0)=""/4096, 0xfffffd24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)) io_setup(0xffffffe1, &(0x7f00000001c0)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_submit(r7, 0x1e8, &(0x7f0000001480)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x80, r2, &(0x7f0000000280)="75c92d936a0ca0e8f7e228420adf58aaefc1790877846f752c2ea6fae02732d63df444a7fdfda2f41e51b1a85c175ad7b5bfdcfd82bc74639332f0a66135c72cfb0c0cc7361e316df73e991c76fbb0fbc969f119d907572a5993a12cb4caf794e8ffe3cae2ee6bbc0d0967c27e1089d7a40adcf91d34c2a933fe687207a25c09239f3d761979b2025d694f799496bba78b7c57f90f0b9f344e85f7a645ed1672c6c7031600d2090a", 0x0, 0x0, 0x0, 0x1}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x6, 0x9, r8, &(0x7f00000013c0)="22da3c5cfc75fb0db25a6b3af9c5be3a30a2c87e3b7f3368c9d85297ed5767b4e00cfbc05088560413958882ca2ab3e8328f0667cd91db31c4fbe64ba0f185b5b898547c3d411bd5", 0x0, 0xfffffffffffffffe, 0x0, 0x2, r10}]) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x4e24, @rand_addr=0x36}}, 0x0, 0x101, 0x0, "4b558f880c9efcc92128a81f4c5309025ffe80625337b1b31997caeb99bb95e74f068a867a66f589a4026bbd066f8cc431470f3539d06cb38d886adffc257c2e603255b272e9742a0517e587cbca657e"}, 0xd8) fstat(r6, &(0x7f0000000580)) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r14, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r14, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:19 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0xe5) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x1b, 0xa, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) dup2(r6, r6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000)={0xfffffff8, 0x1483, 0x800, 0x10001, 0x7}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r5) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x4, 0x1000, [0x1, 0x2, 0x8]}}) tkill(r1, 0x22) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2b56431d58a5300d, 0x44) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) [ 616.775910] binder: 30208:30239 ioctl 4018620d 0 returned -22 06:10:19 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) read$char_usb(r3, &(0x7f00000003c0)=""/4096, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getuid() sendmsg$nl_generic(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0040908}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x6bc, 0x2e, 0x8, 0x70bd28, 0x25dfdbfd, {0x1f}, [@typed={0x104, 0x83, @binary="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"}, @generic="9cbd90ba331a8f2d677f8d5f4fc1d105", @typed={0x4, 0x45}, @nested={0x264, 0x6c, [@generic="16158a35654ed289e6b515f9e2373546db77cc84904264b09b42c66a95d3207ec8914b745fbc07d470dd6a457585d09fe121b6e6796a505c5ba66073591029ed", @typed={0x8, 0x8d, @uid=r6}, @typed={0x4, 0x46}, @generic="0421e0304abeb8171b3eb7", @generic="d702000535c69dbc7c6da1b71fba1c1b8e091fe04b9c2d0d637998ee8ca76a6f9a686ed95c1e753edd76c18ee2ccd26a8243603a8e68c1a400b8dc698f9d245214c192c5be185a047a88c5ae8e04adf29b21194c508ee43d8a913c991613e9ca12c974797ef16eead1e5e82e3cc25321314074ce6372ffc8d3293f6fa86a61fe707672b6c469532e8ce5ae00548c3072f159598230464a761f0eba7776861590f7d237bb502fe2a30e9c69251f", @typed={0x14, 0x63, @ipv6=@local}, @typed={0x8, 0x1f, @u32=0x3}, @generic="efd9f8da6b9979e422331aca4607c6321303942ef6674f5425da74ff878d1bd6e9ca4d7bde6f12d64a7076b1082fc142e623ab662fba5d9a782a60bb87c7f78ed53d3ef75aa3d29a41e8e963671d78e7f63807c0cb51eaee6d796597", @generic="57717d9f8ffb2dd26329b2dbcc83e714205dff10083b351618f741531b421d6309b0f07eceab6c7aca8260826f475dafcd5beb4ec7647acf42d1381302b25ad37648ffb5dc33a09d3c9c423b92c29d38d0a4f21906f05c9b32c36d239716150def1689eab936d9f2e367e78ea7d8939c04f24677dc6ecbc12fa1ec80b6718d019e915eeb0bf6322faa40fdd322038aec2d8868e6b2a3a7a86e6fb1be65a5bdd22b05f02d9b10aeeee7cbb9808498f246de2ac193faefb6289ebffb7cc1637ff328ee024b6d03b468906a3a64a964d660a4bc9fdf465e16a559b1c23dfb414b9372dd"]}, @nested={0x230, 0x60, [@generic="1a44cfcbfeb2a8836ce073717b639ed0ddd26dd5439d987a1adc7ad8ee9f0238ae980d9439ed4b7ba969b1b6d3b1b7b45511cd302cdb168091d5a906e0714d583c234daec768089a0d63756f78596382757c234c89d858ef7e8334eb5e5f4132e2fef60183ab784dcabf4807ac36aba96c1ebcad0f8168da94d3286d9c46b183d2a57dce941741c623c57717367ca9216d96abf7096cce3c8bfccf6f223d0d9a03c21be5dc1cef27a50d46187552c6479b817c5b18594ecee0df69fc90a1f233340930d2f3d8196c0ab8194fe63b2ff33a5d5b99", @generic="42fa44425811b154d54493c53d9e0d1105e57a3b7d20620d9c65b5054348ca3b496c7d8e288e0ae0fb015cb3c60fbe057d75b66715cf8753a748f3a0bea4f78d131de6c596a4962de5d7a40481d8d8cc8ee269319fb2629f8ac5c96ff75e87682aebbc3ffc274962bfe31753b453d742463aef702230402cd52033b123eb065f623ddffdb75862bdcb9fed641a85919824416872a264c3f7f800c456677f223b737b9d2271ba88", @typed={0xc, 0x66, @u64=0x6f4d7652}, @typed={0xa4, 0x8a, @binary="90f977b8ebf07e1c6307e2573432b65a3fa1a8353fc0f4d73864e591f822c74249e25bb0e588e5d352204d31603f2a7c122d6ab339084841f8465bde924f46fd9c803774e30786d7624edf8393150dbc73e4449267c6634632569c8a19083814257b7bf484112752e38eac2e7cdff014ecfeda4d7086b8d487b8b63c59162c639e32ce4f0bec9a8ed1cb8038f17cca4585859121579064cbccf3842446cf"}]}, @generic="9cda170c0460266e2b963ecdc6409015f1be6444a40b768931dc3dee3f4916cbd32ca7154719efffb0d69489cc43b151791af7329b9d0dc2a7b71e0cb201bb40604267fca5910d589054ca9ee5dc2d54f522713c59405fb06bf5c3a01b7abab1cc90fc499d16eee37696c8acf350a80e0853da3a606da169eddf3b47b3b6eb459d00ea6722bfead8bb0f5ddec3e20f4af619065a51a7a18162a2b60cf51252eaaf731b360baec6108d5d9ca4b615be14d2fde095509e32ce6cbaaebf1f12dd2b9521522c6b887f2c0e738bb2be157e2c9acd413c2093a3adfbe7fafc5dbe5a107c9fcc80a48fe9a67a91cfa963cf45b2846efe424649f628dd"]}, 0x6bc}, 0x1, 0x0, 0x0, 0x41}, 0x8000000) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:19 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x181) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 617.244846] binder: 30263:30274 ioctl 4018620d 0 returned -22 06:10:20 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:20 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x6, 0x1, 0x1}}, 0x14) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:20 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 617.685571] binder: 30294:30309 ioctl 4018620d 0 returned -22 06:10:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) r5 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8e9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$nbd(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="67446698000000000000030002000000373963156e48bd0400aad672ccc0db63570f95c0d1e1d4cf8f8ec33d81a92c1f61b7114e4c73be81f2f854c31e89a26e7a886df8947e6169e58f3e1195056a14ff8ecff8a529fc0deb4d6094a14fdaf7ffffffe9b1d39e40044669ddc52042a3d3365aa100e3366488c38593ba8382c4a0dd942e186ae1d21feea78503f529e721350c"], 0x93) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x88001) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x3ba}, 0x7) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r3, r4, 0x0, 0x4e68d5f8) 06:10:22 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$get_persistent(0x16, r4, r6) r7 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) dup2(r8, r8) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xfffffffffffffc53) r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r10, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0}]) fstat(r9, &(0x7f0000000580)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r12, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r12, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:22 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:22 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x10001) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='bdev\x00', 0x0) [ 619.821815] binder: 30318:30340 ioctl 4018620d 0 returned -22 06:10:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x7, 0xd81ef00bb4447299) 06:10:22 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) readv(r2, &(0x7f0000001800)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000001440)=""/222, 0xde}, {&(0x7f0000001540)=""/128, 0x80}, {&(0x7f00000015c0)=""/129, 0x81}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000001680)=""/182, 0xb6}, {&(0x7f0000001740)=""/151, 0x97}], 0xa) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x4c2) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(r3, &(0x7f0000005040)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x65, 0x0}}], 0x400000000000039, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r7, 0x0) read(r7, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r6, 0x0, 0x4e68d5f8) 06:10:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) r9 = inotify_init1(0x80800) fsetxattr$smack_xattr_label(r9, &(0x7f0000000180)='security.SMACK64\x00', &(0x7f0000000240)={'/dev/full\x00'}, 0xb, 0x2) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 620.318946] binder: 30364:30374 ioctl 4018620d 0 returned -22 06:10:23 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x141001) syncfs(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:23 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000013c0)=ANY=[@ANYBLOB="9237000000000000d3000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="00000000ff9f3effffffffff00"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="00000000008000"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x002\x00'/28, @ANYRES32, @ANYBLOB="000000001f00"/28, @ANYRES32=r4, @ANYBLOB="00000000001000"/28, @ANYRES32=r5, @ANYBLOB='\x00'/28]) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000003c0)=""/4096, 0xfffffd24) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/100) io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x8000, r9, 0x0, 0x41}]) fstat(r9, &(0x7f0000000580)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r12, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r12, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) ioctl$KDSETMODE(r8, 0x4b3a, 0x10001) 06:10:23 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 620.773879] binder: 30399:30407 ioctl 4018620d 0 returned -22 06:10:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:23 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:23 executing program 3: [ 621.202201] binder: 30427:30438 ioctl 4018620d 0 returned -22 06:10:25 executing program 1: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:25 executing program 3: 06:10:25 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'teql0\x00', {0x1}, 0xd1fc}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/307) getdents(r8, &(0x7f0000000140)=""/239, 0x6c) getdents(r8, &(0x7f0000000ea9)=""/407, 0x197) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fstat(r3, &(0x7f0000001440)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r12 = eventfd2(0x0, 0x1) fstat(r12, &(0x7f0000000680)) 06:10:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x19e) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:25 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:25 executing program 3: 06:10:26 executing program 1: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) [ 623.429801] binder: 30454:30475 ioctl 4018620d 0 returned -22 06:10:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0x193) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r9, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:29 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:29 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xfffffffffffffd72) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setns(r9, 0x3020000) ptrace$pokeuser(0x6, r7, 0x75f, 0x7) fstat(r5, &(0x7f0000000580)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x501001, 0x0) fchdir(r12) keyctl$get_persistent(0x3, r11, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r11, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r13, r13) ioctl$sock_inet_SIOCSIFNETMASK(r13, 0x891c, &(0x7f0000000280)={'sit0\x00', {0x2, 0x4e24, @loopback}}) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) fchdir(r2) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r9 = eventfd2(0x0, 0x1) fstat(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r7, r11, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r8, r10}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r10}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r6, r10}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) fchown(r4, r10, 0xee01) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r12, 0x0, 0x937db0e72fdcf7a1, &(0x7f00000000c0)=""/219, &(0x7f0000000040)=0xdb) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) r14 = epoll_create(0xffff) splice(r13, &(0x7f00000002c0)=0x5, r14, &(0x7f0000000300)=0x802000000, 0x8, 0xa) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 626.484872] binder: 30513:30531 ioctl 4018620d 0 returned -22 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000140)) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$unix(0x1, 0x5, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) fcntl$setsig(r5, 0xa, 0x1b) fcntl$setstatus(r4, 0x4, 0x100000427ff) readahead(r4, 0x1451c886, 0x8) 06:10:29 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffd87}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) stat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) fstat(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r10, r8, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) lchown(&(0x7f00000013c0)='./file0\x00', r5, r8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r12, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0}]) fstat(r11, &(0x7f0000000580)) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r15 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r15) r16 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/loop#\x00', r15) keyctl$get_persistent(0x3, r14, r16) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r14, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) ioctl$FS_IOC_ENABLE_VERITY(r13, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0x14, &(0x7f00000001c0)="f5aabe53647e8f6c619d0486917c1e9bb0dde790", 0x8a, 0x0, &(0x7f0000000240)="84c0c8007d9c41df9331bfb7d20008dff6296267e208a92c8ee39bd35b634006bc47262d1cdefa28b87a78d03a17111ef434d0a6574763a8d4d174c1f3f584812b4cefaed9c9e2bc300b7d205053cd3455b81546a2744ebc6de7e8759ba58c368567d3bbf5f6266fb845511cd678e9593ccec180139f254bcf97d70ef9a1fdc9b651cfc792d643b96670"}) 06:10:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:29 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) [ 627.178484] binder: 30571:30601 ioctl 4018620d 0 returned -22 06:10:29 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:29 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080), 0x1c) r11 = dup2(r10, r10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r11, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r11, 0x4, 0x100000427ff) socket$inet6_udplite(0xa, 0x2, 0x88) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r12, &(0x7f0000000080), 0x1c) r13 = dup2(r12, r12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r13, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r13, 0x4, 0x100000427ff) fstat(r13, &(0x7f0000000100)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r15, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r15, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5, 0x8000000000}}, 0xa0) 06:10:30 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:30 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:30 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000140)) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:30 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) fchmod(r0, 0x9d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0x8e25, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:30 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:30 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) [ 628.173612] binder: 30633:30662 ioctl 4018620d 0 returned -22 06:10:31 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:31 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xdee800c}], 0x1, 0xb) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) 06:10:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000140)) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 629.197524] binder: 30682:30694 ioctl 4018620d 0 returned -22 06:10:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000280), 0x4) r2 = add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="e5ed934959b67e03f6bf2882b16eb5c2e12961bbc1523a057bcf6129df93", 0x1e, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000003c0)='(-\xb2vboxnet1md5sum\'\x82vmnet1@\x00', &(0x7f0000000400)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000110}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x14, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1c}, [@generic="41784b3b89b7beb426dacb"]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008840) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) r6 = memfd_create(&(0x7f0000000040)='\\{\x00', 0xa) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000000c0)="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") fcntl$setstatus(r5, 0x4, 0x100000427ff) ioctl$LOOP_CLR_FD(r5, 0x4c01) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:33 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$notify(r4, 0x402, 0x1) fcntl$setstatus(r4, 0x4, 0x100000427ff) ioctl$FICLONE(r2, 0x40049409, r4) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r8, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) fstat(r7, &(0x7f0000000580)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000013c0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x14, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r11, 0x0, 0x4, 0x30000, 0x6, 0x1, 0x5, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5, 0x0, 0xffffffffffff8000}}, 0xa0) 06:10:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:33 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 631.144907] binder: 30708:30733 ioctl 4018620d 0 returned -22 06:10:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:36 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7065726d686174203078303030303030303030303030303030505050993100736c616e3076626f786e657431002f73656c696e75782f6d6c730070726f6300be7d15b5ffcb0c290c8973a7258d9950b2e57b240f5caf5838bfc69ff364cba1154a668b54fcd5de1c5ccd9e0ab1f273a0b3dccdfcc8aa8c8bbc6ace8a67cfb75ddaab63e1974b999e8c090cbfc0964eb0e643733a9bf7750533a9ea4e276a8e7170dd141ba6475fa8cfc05dc4c4efebc0513545c8b10d28d02d266b17c8e938f32bc7fe51aa60df2440aa71e41a8d8fa3f276f003818098e5b0b73b5a73c22ab5d23495cd9f7f4e03fbf991de9196dd768b7d966d3ef02e00cdd033d28e5fb30ad2cfde653ee57b0557b57161545b7a4df497e0dcea119efc54f77ce4ef3114b953b99a356aa9faf6c0995e947fdfcaa1072610e938d73c3641"], 0x3f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40100, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000000c0)=0x77f0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) fcntl$setstatus(r1, 0x4, 0x80000000002c00) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="bf5100da347ca405f856dfb44d78e6f6", 0x10) 06:10:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:36 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000003c0)=""/4096, 0xfffffd24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) fstat(r5, &(0x7f0000000580)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000240)={0x4, 0x5, 0x7, 0x0, 0x7}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2074, {0x0, 0x1, 0x6}, 0x80, r8, 0x0, 0x4, 0x10000, 0x9, 0x6, 0x8, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x3f}}, 0xa0) r11 = accept4(r4, 0x0, &(0x7f00000001c0), 0x100800) r12 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f0000000300)={r12, 0x0, 0x4, 0x4, 0xff}) 06:10:36 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) [ 634.309955] binder: 30761:30784 ioctl 4018620d 0 returned -22 06:10:37 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000540), 0x18, 0x0) 06:10:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:37 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000003b000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 06:10:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket(0x0, 0x0, 0x2c) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000500)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000540)="a70de7266ddf3f7b580729728cda1f2c1a0f1257672bb0b8c61d068205c9563a63cf76f6e0aff8409dbd2d1ba2887ef3c07e8ccf39780de58da8f3c014ffacea2b65463b6e3cf30e0f636e94058bf4d9175d0f66c18280de5628a14159a42e0819de57c947197b63b50b3af1cb9c77f8e8a845dc15a3439a10c4046513deaa360755d8eef9cfdf0590ef6e70f853ee9708a213cb73ea80bcff1fee3a0c13d96e6d36841d0e325be08c6bbb75560e2903fc907308c28ef193e66e1fd3ff44d6b296a15d4b1fe52fd0e05db2e867c77ba92c41f8d27cbdb1510bb4f71876718c7dba97aca31bf3febcab18e04c0aaa0920946e6c29262598c6a13a298425a284ea136e57dc6fb84af1d40900000000c3c1c18ced4c978294eaa16c9fb0e8102adf261eb88e796b31194a995ee5c06ca845d9699fc5575665131fa298ae89b21ed68436e69008718ccaa2a9b19762d2337f02", 0x151}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 06:10:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) [ 634.769100] binder: 30819:30838 ioctl 4018620d 0 returned -22 06:10:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) tkill(r3, 0x7) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @mss={0x2, 0x100}, @sack_perm, @sack_perm], 0x5) connect$inet6(r4, &(0x7f0000000080), 0x1c) dup2(r4, r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="ebc37d5d11d7bb244aadebe4f3ba96a244a0300c9d3efd59b45719653c41eb1fb63200bc9da2beff5aec4e971bbf0f8ca9fb016b725d4b0ea97d524543341a329c08a4dbde7b3c73f83b58767a95210883fa", 0x52}, 0x68) 06:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002b80)=""/4108, 0x100c}], 0x1}, 0x40042) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000500), 0x6c) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 06:10:40 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/224) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c463fff1f809c00000000000000020006000400000069010000000000004000000000000000ad01000000000000080000000700380002000400f2ff0200070000000100000000000000000000007f000000000000000100000000000000fffeffffffffffff0c000000000000000800000000000000129511c23aefe72be5827a5922114c513295955474b94a2539e92b3d8a34683a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3236dcb06f14"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:41 executing program 5: 06:10:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:41 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:41 executing program 5: 06:10:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0xe, 0x40, 0x2, 0x9, 0x0, 0x2, 0x60e1b8aea6a23256, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0xf800000000000000, 0x10001}, 0x40, 0x0, 0x6, 0x3, 0xffffffffffffffff, 0x7fffffff, 0x4}, 0xffffffffffffffff, 0x9, r6, 0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x40010, r7, 0x1) 06:10:43 executing program 5: 06:10:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:10:43 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x0, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) 06:10:43 executing program 5: 06:10:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:43 executing program 5: 06:10:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) [ 641.104062] binder: 30953:30982 ioctl 4018620d 0 returned -22 06:10:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$session_to_parent(0x12) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:46 executing program 5: syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) 06:10:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) 06:10:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x0, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:46 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev, @local}, 0x6) 06:10:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:46 executing program 5: 06:10:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev, @local}, 0x6) 06:10:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:46 executing program 5: [ 644.135891] binder: 30995:31030 ioctl 4018620d 0 returned -22 06:10:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@dev, @local}, 0x6) 06:10:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 06:10:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x0, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x787}, "ffea06777c496e2c", "d9d19f7bafee16a89fce6d0e2b2c93fcf6eadab989e5a50e86b26c865d358c82", "e8c7200e", "d25fc8d201e9003b"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2c) ptrace$setopts(0x4206, r5, 0x3, 0x100018) tkill(r2, 0x11) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) dup2(r6, r6) r7 = dup3(r6, 0xffffffffffffffff, 0x0) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f00000000c0)=""/122, &(0x7f0000000040)=0x7a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:49 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) 06:10:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 06:10:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:49 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87\b\x17\xb0\xaa&\x03\x82s\x11\x8e\xaf\x9f\x9aDj\xa3\x91\xdf\x17gv\xe4\xee\xd3\xef\xd1\xc7\x01\xb3\xe5\xb529\xc1\xbe\x7f\x8a\xacvm5\xbd\xf2\xd6\r\xebg\x01\xa7\xf3\nQ\xc7\xf0\xaa\x1cE\xd0\xcb\xa4q-\xd6\x8d\x9f\x0ea\xd0O\v\xbc\x9e\xc6\xe4\xb7\xa4w\x7f~\x8b0\x8f\xec\n\x9c\xbd$\x1fMy\xe0Sj\xb6\xe0\x8e\x8f\x06\x13>g\xf8i\x93j\xfe\x13\xde') fstat(r0, &(0x7f0000002580)) [ 647.153592] binder: 31044:31078 ioctl 4018620d 0 returned -22 06:10:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:10:49 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffe20, 0x0}}], 0x1, 0x0, 0x0) [ 647.265885] binder: 31092:31093 ioctl 4018620d 20000600 returned -22 06:10:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa) 06:10:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:50 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080), 0x4) 06:10:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) fcntl$setstatus(r0, 0x4, 0x80000000002c00) ioprio_get$pid(0x1, r1) 06:10:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(r0, &(0x7f0000000040)='/', 0x0, 0x0) [ 647.667633] binder: 31111:31129 ioctl 4018620d 0 returned -22 06:10:50 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x2}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 06:10:50 executing program 5: mknod(&(0x7f0000000200)='./file1\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0x3) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r2) creat(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl(r2, 0x0, 0x0) 06:10:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:50 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) timerfd_create(0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0}}], 0x1, 0x0) io_setup(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) [ 648.351241] binder: 31150:31168 ioctl 4018620d 0 returned -22 06:10:51 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) timerfd_create(0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:51 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 648.841233] binder: 31178:31189 ioctl 4018620d 0 returned -22 06:10:51 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') 06:10:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/36) 06:10:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') 06:10:53 executing program 3: clone(0x802102001dff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) 06:10:53 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) timerfd_create(0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\xfa\xe6\xaf\aBS\xe5\xa5\x96\xfd\x92\x1c=!\x9b\xd4\x02\xdf\xf5\x82J\x92\r\xe3tlb\xc6\xcdR\x15\xa5\x04\'{g\xde\xdeN\x85G\b\xf1.k\x87q\xe9\x00\x00\x00\x00\x00\x00\x00$\x94\xf7\x98\xa1\xd6hGH\x9cI\b\x1f}\x1d\xc2\xb8\x1c\xdfX7\xe6}\x18\xd7\x13kK\x1f\xa0\x13\x89Z\xd3_\xf9\ns\xe9\xd5\xf1)\xe8\x9e^=\x91\x02\xae\x90\xd1\'\xe4\xc4*^\f\x8a\xf9\xfc}0\xe7\xa4^c\vD\xc3<\x84\x19C>\xa5\xb0\v\xf9M{\xa6j\xb3\xd5\x81 \xc5S\xce>\x9a\xa2\x14\xbc-K(\xef\x8f\x02E\xe1\x1f\xd2\xb8\x15\xa6\xb5e\xff\xbc\v\xb4\xf7\x19\x11\xd4\xbb\x14\x02yf\bN\xcc\x962c\x82(\x91qj\xef\xffM\xbb\xac?\xd9\xfb\x8b\f/\x811\xd4^9\xcd\xe0\xc2\f6\xdc\xa6\xf3\'|\xa5\xfc4\x9aE\x84\xba\x8b\'\xd4\xadpD|\x85\xc2ZUD\'') 06:10:53 executing program 5: syz_emit_ethernet(0x5c, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\x00\f', 0x26, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x3580, 0x88be, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"f837d0857914c2794f5b902d274fdde1f194"}}}}}}}, 0x0) 06:10:53 executing program 5: r0 = socket(0x2, 0xc003, 0x6) connect$unix(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="8202adfdffffffffffffff653000463f7b238bf46854d78a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799b9b813ad30505e8f5300a49fef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd23593ae4630b93dcb46b1f9c55be5570000000000000000000000000000000000e676693c34ace42c729afc115c2a2ada300037030012780d142e1e7af204c69d78ed"], 0x10) write(r0, &(0x7f0000000040)="9e3eb3900603b73725c7419aab4230e8864fabe4f27242c9a88b86fab7ca2730619556ae0b655533", 0x28) sendto(r0, &(0x7f0000000180)="6861fe261e6f64378b5e05cdf304b826010000000000000000000000e2597291bd508928c1fcdf82fa627475b78f00"/60, 0x3c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0xc003, 0x6) connect$unix(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10) write(r1, &(0x7f0000000080)="9e3eb390b603b73725c7c19aab4230e8b4732d3e92e14fabe4f2d065c9a88b86fab7ca2730619556", 0x28) 06:10:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x6, 0x8, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) [ 650.676023] binder: 31211:31245 ioctl 4018620d 0 returned -22 06:10:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000004000)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 06:10:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000280), 0xa7067ae) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:56 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:56 executing program 5: r0 = epoll_create1(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') dup3(r1, r0, 0x0) 06:10:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:56 executing program 3: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 06:10:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 06:10:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40046304}], 0x0, 0x0, 0x0}) [ 653.539225] binder: 31270:31272 BC_INCREFS_DONE u0000000000000000 no match 06:10:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80442, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "88f055657b399ba9", "65a8200f3e14460afb3cdfb3aaeed750836983eaaac21761defc79a76718a577", "d498cd13", "4c52b6608d23a6f7"}, 0x38) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r5, 0x4, 0x100000427ff) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000100)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) r7 = dup2(r6, r6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r7, 0x4, 0x100000427ff) ftruncate(r7, 0x100000001) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) sendfile(r1, r0, 0x0, 0x80005) [ 653.582764] binder: 31270:31288 BC_INCREFS_DONE u0000000000000000 no match 06:10:56 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:56 executing program 3: r0 = memfd_create(&(0x7f0000000040)='$system$eth1/\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') [ 653.654402] binder: 31292:31300 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 653.682438] binder: 31266:31302 ioctl 4018620d 0 returned -22 [ 653.734124] binder: 31292:31300 unknown command 0 06:10:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 653.766200] binder: 31292:31300 ioctl c0306201 20000600 returned -22 [ 653.790338] binder: 31292:31315 IncRefs 0 refcount change on invalid ref 0 ret -22 06:10:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0}}], 0x1, 0x0) io_setup(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) [ 653.833617] binder: 31292:31315 unknown command 0 [ 653.851325] binder: 31292:31315 ioctl c0306201 20000600 returned -22 06:10:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40046304}], 0x0, 0x0, 0x0}) 06:10:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 654.004648] binder: 31332:31336 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 654.034572] binder: 31332:31336 unknown command 0 [ 654.048476] binder: 31332:31336 ioctl c0306201 20000600 returned -22 06:10:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r3, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe) 06:10:56 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:56 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket(0x0, 0x80002, 0x2c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) pipe(0x0) vmsplice(r1, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0x8, 0x8000, {0x56, 0xfffb, 0xfff9, {0x20, 0xff}, {0x0, 0x101}, @ramp={0x2, 0x7f, {0x0, 0x0, 0x4, 0x4}}}, {0x57, 0x6, 0x8, {0xf4, 0x26}, {0x45, 0x4}, @ramp={0x0, 0x1f, {0x40, 0x200, 0x8001, 0xd44}}}}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) vmsplice(r5, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 654.197378] binder: 31337:31357 ioctl 4018620d 0 returned -22 06:10:59 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss, @window={0x3, 0x3f, 0xfe14}, @mss={0x2, 0x2}, @sack_perm, @timestamp, @mss={0x2, 0x7f}], 0x7) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) fcntl$setstatus(r2, 0x4, 0x80000000002c00) 06:10:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x2) 06:10:59 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:59 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{}, {0x2}]}, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd96, 0x3ff}, 0x1100, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 06:10:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(0x0) fchdir(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='timers\x00') write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x8, 0x400, 0x0, 0x101, 0x1f, 0x3}}, 0x50) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_setup(0x400, &(0x7f0000000240)) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x119080, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0x186) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2}]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffeda) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000200)={0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'lblcr\x00', 0x18, 0x7ff, 0x73}, 0x2c) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0xe, 0xfe, 0x5, 0x9, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x11, 0x8, 0x4}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x8}]}, 0x48}}, 0x4000081) 06:10:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000053c07bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:10:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="1c0000005e001f00145847000000000000000000020000000f060000", 0x1c) [ 656.849043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=94 sclass=netlink_route_socket 06:10:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @remote, @local, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) 06:10:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r1) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r5 = eventfd2(0x0, 0x1) fstat(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r3, r7, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r4, r6}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r6}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) r9 = dup2(r8, r8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r9, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r9, 0x4, 0x100000427ff) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r2, r6}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'\x00', r2}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) tkill(r10, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:10:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:10:59 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) open(0x0, 0x14103e, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:10:59 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:10:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) sched_getaffinity(r1, 0x8, &(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:10:59 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) open(0x0, 0x14103e, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:00 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:02 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) 06:11:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) listen(r0, 0x0) setns(0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 06:11:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:02 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, 0x0, 0x320f) 06:11:02 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0x0, 0x3, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0xffff, 0xffffffd8, 0x1, 0x6}, 0x14) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r2 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r2) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x800003102011ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) 06:11:02 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) [ 659.903175] binder: 31487:31517 ioctl 4018620d 0 returned -22 06:11:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x1, 0x96f}], 0x1) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r2 = gettid() ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1000000000000003, 0x100000) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/pid\x00') tkill(r2, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:02 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\x00\f', 0x18, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x3580, 0x88be, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"f837d085"}}}}}}}, 0x0) 06:11:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000104c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x18000, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 06:11:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @reserved="a0a65bed395a578ed06105e8a2bd16ecbabe28cd8fa7d8e85491d06326955fc6"}}) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x190) dup2(r2, r3) 06:11:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 660.296324] binder: 31533:31563 ioctl 4018620d 0 returned -22 06:11:03 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r2+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:03 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(0x0, 0x14103e, 0x0) dup(0xffffffffffffffff) read(r3, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 660.705027] binder: 31569:31583 ioctl 4018620d 0 returned -22 06:11:03 executing program 5: 06:11:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, 0x0, 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:03 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:11:03 executing program 5: 06:11:03 executing program 5: 06:11:03 executing program 5: [ 660.976916] binder: 31592:31609 ioctl 4018620d 0 returned -22 06:11:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:05 executing program 5: 06:11:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, 0x0, 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:05 executing program 0: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:05 executing program 3: 06:11:05 executing program 3: 06:11:05 executing program 5: 06:11:05 executing program 3: 06:11:05 executing program 5: 06:11:05 executing program 3: 06:11:06 executing program 5: [ 663.396768] binder: 31617:31645 ioctl 4018620d 0 returned -22 06:11:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) tee(r3, r0, 0x8, 0x2) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:06 executing program 3: 06:11:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, 0x0, 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 663.772424] binder: 31654:31658 ioctl 4018620d 0 returned -22 06:11:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:06 executing program 0: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:06 executing program 5: 06:11:06 executing program 3: 06:11:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000), 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:06 executing program 5: 06:11:06 executing program 3: 06:11:06 executing program 5: 06:11:06 executing program 3: [ 664.381515] binder: 31667:31686 ioctl 4018620d 0 returned -22 06:11:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000280)=0x5, 0xffffffffffffffa7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0xa9a7, 0x6, 0x2}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:09 executing program 3: 06:11:09 executing program 5: 06:11:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000), 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:09 executing program 0: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:09 executing program 3: 06:11:09 executing program 5: 06:11:09 executing program 3: 06:11:09 executing program 5: 06:11:09 executing program 3: 06:11:09 executing program 5: [ 666.711500] binder: 31694:31723 ioctl 4018620d 0 returned -22 06:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000280)=0x400100000001, 0xffffffffffffff1b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) fsetxattr(r3, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000140)='}\x00', 0x2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2c) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2c) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x2c) tkill(r6, 0x25) fcntl$setstatus(r0, 0x4, 0x80000000002c00) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) 06:11:12 executing program 5: 06:11:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000), 0x0, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:12 executing program 3: 06:11:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:12 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:12 executing program 3: 06:11:12 executing program 5: 06:11:12 executing program 5: 06:11:12 executing program 3: 06:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={r4, 0x9, 0x400}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040), 0x229) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:12 executing program 5: 06:11:12 executing program 3: 06:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x401) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x3) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000004340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80104042}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000181}, 0x1) connect$inet6(r6, &(0x7f0000000080), 0x1c) dup2(r6, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r5, &(0x7f000000b040)=[{{&(0x7f0000004380)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x8, @rand_addr="bb83d9bb719ebf97d17894d7aaf21331", 0x6}}}, 0x80, &(0x7f0000005500)=[{&(0x7f00000054c0)='}', 0x1}], 0x1, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1458}}, {{&(0x7f0000007e40)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000009140)=[{&(0x7f0000007ec0)="fa1ef816cf4fd2d737b099fa0d135fbed7e77609d4163350e9fa826a9e3d878e778f0e15c05737d611884f159e552b778226ad20fd958f738635078a492da25f50114ac4e2924c83f72f7a55d8245ccfba66c1b00f73406296714c888980fe41d5b2a5e8b70bdbf8c66860c37a5298d47256419c38807fccf6065f112b55e5b6cb883c6bd1c16690b00dd9debfc8675476e6eb5940de0d0527215491985b688819753a65e45a50421de9fb9f2096a30c3fec5d74784f", 0xb6}, {&(0x7f0000007f80)="8cb637869def738f3c729fdd6f4cfded41c43e960e5c3eb06ca3d3b61db99b428660210b53b25e6ef4c7fd5a620cdd477f4c9eb69b91bd045c138df150e864360fcf379f57908e14a424fa3eade01ccee2931060f5a335628d83b64ffedd87da3caaf88cffdba677594dd5e4b7491dbf01fd9fed6f407da3373099a4d4410d05fa7e6635947729411b7eaf29ca2ae575a8ac93b81a237186d4e147abd873c5c19e221d44c56c222da4e2788bc2c64212f346367e8fc08aa52e06cee4dd", 0xbd}, {&(0x7f0000008040)="e629ca399445d9c983d80af2f71a4409217ed1ca7c7b8aa53c6aed002af9ea8a52b803b935d77ff97a688d5af7a6741146e92cb6e16036b74acb479c454fea61772b82d8da72c160c65bc81f948efa0140652c7b180645573df5272df241bb91e711417f11d84f60bd02ae0c5f933d9429489e9850007941dc11cabaf4eb177408cb3398a35c91330661ad0ad99ddad8592f133de8552be44ec69f35115b2273aaf1f67864b419cf2442aaff260941f07a2d2ef71afb0fa898a9be1d8ea1140ee580b27e1cc1f599810b211b74045932b12a2dab", 0xd4}, {&(0x7f0000008140)="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", 0x1000}], 0x4, &(0x7f0000009180)=[{0x88, 0x10e, 0x5, "2493d129e986438c8915765d993b2e4cfb7a84d92059cc47a6cd2750dcc2040043e05540b00e9dfcc346a5d371e21fd7e8459cc6714d29b555b93c27d268aa74c9534c54067cd02a35b8c903ef31eea2ebe2a667549d46acadbf5c70d8afbce013f4a3f55d4fc11260bda479f55eecf4b72f367a4c5d"}, {0xc8, 0xff, 0x5, "1f2b472c5a20dc329385fae7b04f1efe6b6574fcdc65aadc33e19de1f65b5c28328f492135085e9a57a6748486a98731c454892751b88cf65bdfcf6a3a8c495be1d612c60f54d0aa6c7e1bbfefcf8c002d08a43dc9d33fab88a5afee79967a05030eadc11e2ec980bbc12763491cf829d96e88da049479caf8c51ec547cee0248b01e903e797aa0817b9ed6b8691bb6a358a4d879161f96f9cd62ab44e18e66f6c5fe003e012fa3d7fa2deaa73fc387bdb543b"}, {0xb8, 0x113, 0xffffffff, "5f27a9d4189e83398df6f9d44db4dde5f70c9eed402c5c4622cd099f35bd40ff356c0c21627ddbad863174cc4c89a4c1e646fe941cbee3d70cd972f4dd6c4be9ff9de878f6bf3fca269f2deb36641149ad3a9b02a1ee3377512b822adc5e3567e4372ed0cccd3e9cdd935279b60792e0cb7c47a8036fab78da6fe2e2e4565c000cb95b40cc450aa2f3c2bf528e683a97e7c89698a72f43b271f901defcca06e39dea2a1d9a5e"}], 0x208}}, {{&(0x7f00000093c0)=@l2={0x1f, 0x4, {0x5, 0x1, 0x80, 0x5, 0xe, 0x96}, 0x7, 0x2}, 0x80, &(0x7f0000009440), 0x0, &(0x7f0000009480)=[{0x30, 0x101, 0x101, "5263e4b1bd6afbc3949991aa5a7b4802884980856d613314a8"}, {0xa0, 0x108, 0x0, "9baa03c1577ccb79251d248c42590e294d722b0178c836887483b9e55b982ba3da630a3b7ab9452c7b2ec4817bae82508f508ae8a23b86afa2babba71eb1ade4d6fc44342f9c6459c52075948463c70053e1d8db9cf98ea27f711868301b2f725bcb00214a8a9f836e1279ec5c39042a2972e7a6d46e72a5f8c4820b357fe8d840d04b142f4333a79e"}, {0x10, 0x116, 0xff}, {0xa0, 0x1, 0xffffffff, "4ce9044e035e27fa0009e8fc96679e1cdcbf6755fd9bf3fc274598f339306616a2348200ac05d2e0c7e0756ab794c06abb4c4985f79dd4d4202714f6be08a2779b9da2872cc2c286e45d7affbe01525d47386ffed1425bafd924fb03c3b0adc9a1668b0d8230e7b793f9b3c558281ed06a8a274c5866ce60bdc72ca4fc467ab0df2e96370316be19d57d288231c3df"}, {0xa0, 0x3a, 0x2, "2902011d8d2cc48c8805c3f6766564455de2840b8b702c7ca2a35bd8717cf84959028a7d3714b431c7d0e73be7cecfdbb83a3639ba64309bca368d56ac020049c0001dd10650b4ce34ceecd3038e63db9c8ee5a873c6458cba4ab218bb2a67dd6590e39ed8705b616d3c285315b1b126405da1c721cf47c5b4cd3c7cd42af4389ce77b4e101da6aebd8ae49da6"}, {0x1010, 0x107, 0x3f, "403c5becd117ea6ad437290a2328a45234121b90440317d3980ef89d056d7d7e3b8cb1495d2191ad1344bce582b49c6aa7c1cf996142ac76b7b6e553a95a1bddbe07b8113f3a36a2d2781b885621be0eacb25a1e3225cb4808198784128a523851b4bcbf27dde94c967ae616759d5bee0c0d416b44a387d62b8b4b9d129a26bf9caed0aa75e64c13f0ebdd95261b2f3dfa20275196991cd69c5c99a68487e03240991ec45c5288c113d361dd94c83ad644efd3822731c5cb3bafa02295a03eb7d60a7282a6491f82ba40928c4ac289c1e9e61672804adc72e9f4aa9e2c51343c0a35b6f59523ca8e7078d03a7d9a48e6fe58dcff423d6d25f92180793a908e5592f956429e63e5b3d5a0f0ae5ce40887d28370038b6c822edbc171205947b792094722df820d108e189002e22c515682cd3eebd9435d2a79a9a9ab5b015f7304c0a45dc3968988456af0e74c694b8e9edd6a0c8af2071bac0d8a0cdcf2116e0793a3502ef2534ce03fc62129fcad28f4bf7e777f450c3a634b557c3873bdd5cbecde4f9c1a1ec783d9ef3bf967b400b2cc1fdeb76109e0ffd94914fb6590a6578a5386f5b25461497a98a2135663b5766a43afdcdd32cfb043459740ce8711b37e1e8a1c8fb55ac7cd583ccde72129447acd81d8e7eba60106c5cb03b9c7642d1dc257926ac9a3dffd662bbf535d180424451d85c570db05c4aa33356a19657e745504de008cfd6e43cb27d02e09c45c4166fce5a679ff74987d14b6f3e99f523aeb3f9a6a68d113117999e27cbab4f3ba5c5dd490a84e6d2fdfb1d229f20524bf4a1216cd7cfa12f5f8bac801b01cfee85d4bfc263e28a84d400cfb09dceecfda3857dea1dc72efe4369430049764a219ae3495320a26e5ef37632696792c638170c7d4a0d7ba4ea8073affed10277c8cbc77b1dec6947e3abe42e4538291beb984311ef298acb378f5d16b1c249e520ae471b81a7e9c6962011db49da99c072b2702d7b9c77e652b2a5c0cdd29761ec1c089cebf178b855218f64f670de1c5f24b77f7be33ff97ece35bf21fe8055f4e4414ee2c879f403b960cb0473390599d420979d74d31efd92687c7fda4f0aa6e47d82c0fc557381de3edbd716cc09a66b3e9a22ec5fcb9b52b0a5f797dab8939505dbfe447dbba07bb18c633b0f7be297152f2f85b37bee600192f6d72d8047c9b4a54543ba1f4337672f5588f05aff73fa0e95f0bf1fd493def69e01164c0534b3ce24a240a4db15557ee77bb2a6dea3c8db6a242983e75f1199078edfcfaa16d490b31cb5063f853623c5e6115e821ea800d3a670bfe6f210bac30e1216e29c60e23250d44b93d85d1c47d8b2c32f65a12630c675fdb2f842b1962c69d5b85a2a747e3f42bc9baa862d0c9b3f562fd115ca3ed879a65758e115e0368c0aee5d103d9009f33d8e000dfc183c5408fb2d439c7428ed01ad9dea96314fcaafb9c4c1fe7aba6fe75357066554f0f576ec8f86367e16a8c259159b1d4df9ab13b68e78bd08ed5c6027f802fc326deaac84b90e3c7898827d820337b6b234cb41b0446f61763d360fc6919368448d3f04c59807a4ae151a9e4bf5a46a0fe1dec4715f42546635e80897b5df4e3537f639eac92e6a74b1b371bc74b37d4a92bafe5ca48101e5ff0b0c81e27c443827d11bb44b48317882bdd465cb21c64ed7b5ffd466ce6a64b620f583f7c1d14891fb1fca781a4b00097fd28f0d2b5d55ce12e45e02aef446e324c4e1393aac2938f291ecc4d76481e9d42d3d1f5a750e1f130811f75c23b6a8106d524b77365e19527793316eff571ad52abcdb26cfbe522184a74238d5445dff7331bf693470cb004d6229e24d8ae290c2a9f917d437fc52d182e52c7227e6defdf3d88a918e2c060a386dfde4a038d6cb3e6da734eac2c3df90c607f104f29c8636e2de3c29fb4a5515e0ec0ce6595c33922f0e13328387d5f9332ac8a0f398ac6c8ac18b80dbeb853fbfe96530b5f1835b586bc6d60fe089def0951caee27d53fd7e0116b84a0ead8561c3b087997af96c8385631b65a828d578f09d8532a2011bccea775f4f32a573de65645b13d6058962fe6fd25eedf0447e364eed40ae5ae7e48c12c91864e19826ee191870670c1402d2423af8f89cb8c1659a8136f013a27343106b1f6d9516c9f83fca2768075f62f64a3470203514042391503b66790309e77e98711540ea4878799bba4ba27b74710f60daa0c8a79cae607cddaf3c6d2026246f675282a2a8bf6b4aa19d2656d4fe6ad81a26e46748ab8dfea36654db4c59bf614ecbcf0cd4627c19e1f43a2411891f8be49af429e7df56c74630af9aa8846304280a64657f7998ef49c5e1b207981f753bef9203b87ce2528d16297b5e449e24b0bc6542ed3d1db5316fff672524b34b839bcef1f4d339edcda9318affebc9e04a6a7dc0ed1d9ea29fc0fdf6b036ea692e03a3f4b622cb9a432c7dcb58b12397d898c8c962d8bb00a0c26adf9b61c6a58406c1861928d408237ce8fe90471a6a0c04bce7f102ee1d4f1b65eed43991f8111f41fbe5246ce5fb2cfc0f21343edc2f8feabd2e4f239ad01df5763e574d3cab557353993cbf5cc07f3cebb6209a38536c9d8d7ef1205a50fadc5bc7953433827f648a0ecc76136b0eef61ce0b4c742a81ca25c647f2a8d3ce233ff20c181182c3630135b9b6ca196525f98d45f9ea8c320d2e0c355a495808daa8b27ccc6f57099d5981e1918fce47c9ba3ca9264b8b46280ff19d1d2b2958549722933f50f8904d3b4ade320041c7a6e235514eae95e8b1afde01b9933a014b6099032e4d681053b0ebb5be923b3c3d78c84bc7c644a33353ee1b63819bc677c6272f9723885277c95e8f879d7e04bfe8d0a22a10b4319c2359d9b07d832cd97c73f352701234da25d88e8810cf402732c94b98d12ac6831061498f70cc00b66efd81169dba2fc468f36d3c74492af5ea02412055a19ced9a41a2553fc3dc933fbdf85b8330f0255ef31982675a74ad5faee7f0439117863e723e96ad7b725e5258184fbc945f95ce4957983e1f4cd12d2770948926c3bdab79bf556115bbe0aa6a9ca6c48b44d999cc7cb227f894760aded6ec33b1e9bc3618fd3c431ce49eaeb8a77130727fad70ab8f9bb0918e2390f0d1f47e2cb79d21adb6f824048bebb87b44ed33498a02a98f34c8ffc3e99be3f50c175657dc85d32a74a4f8681cfe3510d7c103a5e6b6ebc0d06df0a7b541d61ac55457effda554f66c34b90d7d6bd50d93fdbdac732380f693b78e16b4b7d9683de3acda9ff5c733673117d1bd36e779b3b4b6d4cebb39433ce3d29d39dc1f102128ef3682e93731ae6ded36b40a914bd8e6a45c632306c315ba88acbccb2376c8626787edd81651d136d172c053719930d01162d3137b52ef2481ca77818f8696e47f3c8f1cb41d6cf2784c04c30f8464bd3feeaa2746e8391c15e052a796caf4d50a3128d2589aecc70322c4f04d90030a6ea32663baf28f00a7420c566cb9f51b9bb23c9563b8ae386f8eb4ce259d08f387418fb8d2db548101893a75790e652f697546a81eded98e1108ae925e60b17b7e5fe53617c4cc04634031d73ade37234c49cde6b888edfb9748fc5c64694a264ce82d38e023386c8680a45f91365c3283966e22f182b026f18f522540ec868b5bcd3e40d17cf2096c541f25ff234179f96a1822a954a6be7fa9150ff33eb754a141ae5c47b6c94bebe1e69ceb4375e9aad5e8967cd083833da586293f26d948749c6213a0a4e9e1f611a9f32ccd2201fad7e5f374c4e25fe09280d68f10ad34aeaf00e8002159e14b9341eec540a4ba6ecccc3468e94d68dff27392558f168815fa5677c5621d442187c0249f259056ab863954e5e9893c8c19905ebe7509b1bffb580adecb50ec47bc6fe1e5a621921a5aff3b329230c5a6cd69d4e005b539babe4ee0748b810176b58ea961255ce53d580c1b5f04f10f1157ded08fd25f7795bbf73e923824ae9d257c8d4d466dc842f4855ed6a72b5c61026c6cdae6139f8c1da907a2364baffaeb2b461a5cf3dcd33843116b5611fa7189524446d6f4452fe010f3e379c2a75634eaeb1ac8830f34aee70352a3fb8249594dcbaa7f4123962df9799d009801a9f25d5f917d1a86130482294717e601c3a358817cd071e8e6c9932f36a1b8b4fd1a6e9ff6a0498c7b31983829ae9f3727ffade33aae374916d1efc3077e93c6058cbda7092df17e1003d27cd99698eec6e1db31bdcff5b1b97ea9a4b7c50e1b06f39b2fd5455978ee4f081c284bcdc9385c7f6f764a535170b47236236bae56a5f965009fe4eacf7ad380977b515284344ba5cc49743fbb9863cbc71dde1598411dae3b8a74fdeb29d2516af73070942d41e3a21a4639e509c2bd583a3b282ce59b77d57b40158d04d2b5b7d68bb46cb8997d79a6cbd8723cc87e5ad6275a753aa3508d227e0a309eedd6d98cd17559f052815f4464eedff761d7d7268b107202fdb8ef01f6b1c4b9f440fb0c4d3789910c17ae4c27f86643515553a639214255d2d957b4be5a7b52feec3c73ed60285e121a61deadf4eade198ddfeee2ea8b291e8c8926a097e22f0f686ca39b01d17b9bb5fcdde266660a72177321b3888f0060e4f7fedfc1e089af621e799a24eebd87da1a30828a0827ff27084d723d096c7a3b44b01b04b22e4cf8db2f60d48e49298bca8fb66cf0c9d15b55f998a5741bf46034e1e9cadb41c1c8a1a0a71a91b1e16c5ca08426bdd681ed2036482cb8408d33c9483be85430090dffea6af0defa5f7067eb2079c03b43b33a33579d2b224742eeaef3b115da48e3cd6fd7366bcd1973e06f71e59ffc862c6911a170028f6cdfcea5a22d21d47cb0ae7e41e781747f5a83d515863de2530bf32157fd2274cc42220b4004dbae9662b0a9b83392dbb827102ea8f37a5b63e2dfb63684c66d48fd352a61bd3999b51ce073da7533d466da26f867c43e001889057d3bacbbc3c8eb4769e878897a9cab5e9b07c54c3258f251d860b8a8aa1ccea8c0225f22092c27c0ba7a0ef539b02750a6ecb954f90a6d75e2f7641b841e100059c336ea1af6c094e881347cf49c4e34fc82777c55e7361e04e79b8459eb767076aec211954d0141a20a0d14fcde9e057bf4015504bffcaa139b9d5918b24f216b88b1a6d85f50104cc5fff493cbeb2e8b85ebc166d8139c52debf4979960ff1ab856f77897b450e656d6d1f724de113a98235ad54631efa14ef9736f481c4eae9967edd2cfc44c5c3eaa28b00a81ad27ed5c4b5cbf245f8fde3b231941cf148e7f43d6e463c35599e38e99268223d7fa12b907518ee98319a0931a49b618c436b945c78218d55dc2daa3c8e3241138542a4c54db7db77376f525ebbeadfe05197cc5a1b1f0ba0b71032ec0ba796594286205aad34238df67ebf64dd1ec78016439167d263859384167ad9832afc8ab39b6b94a275c0e39e875ef74eff0c1f7ff8751187dd4aef24edc6c81523cc09e01a9b9d7f996f6731c43c02251413d6eb77a90d7ddf4ff4bcc5185dcba6118d6e923016fac05429efc6a9b6b9c5ff21d4b73109f7b5c70cf5762dba011b3237a0a8b6171158f5d7f5929c1b33915f7e275bc64a763a883c5735fd43d73ff281bf55ea65692c9d543ff64daadddec3d25e3a0c00f6fd0ed0e4fcaef98c7a77da61101e600a77ba1ca4db73c8d618848b5f11212e1fe1f8bd4de3c72b06115c1ffa955315c0e77c112af1b3e81ee13e4434ed3fd73a0a09fd8277643dfd525d809a0"}, {0x50, 0x111, 0x1, "d377f9a760f791af6b7e62158b8582be8fe923ba803f0b8c53c493dbc8bfbeaa8d9aba3f1f7ef3817587b61185d86ffe861dbaa6aaa77bdb143d0c"}, {0x38, 0x110, 0xf7, "9bda69bc12021bbd3214bd54b648dc820fe06883cb5e7a42923e1d9b611e731c91a21f190f91"}], 0x12b8}}, {{&(0x7f000000a740)=@pppoe={0x18, 0x0, {0x4, @remote, 'ip6gretap0\x00'}}, 0x80, &(0x7f000000ad80)=[{&(0x7f000000a7c0)="203ec81b2be5f6ac7bc6e6a3779ffafa108123f54fa1b6d1b5f2", 0x1a}, {&(0x7f000000a800)="ff2c3565c897f13ed4807813dc88cad90f5e6424ea9b9f26de425dd67cf00ab23c3bbf86", 0x24}, {&(0x7f000000a840)="975e68f95e975ccc8720238934b14099834d146ce828300e2c22d8afe1f97e636f991042032bd3c31d505a43ef8b6fc10b31aa1f5932c4ff2eb6639a5d20a4396789e47399552089fba0849a61559bd0a172b19900fa68e62f2b199c084502e8f13984d30e6c99f19da362878db2abf3944acb485df33e29887afd5bbc341cbfc0266c1c8d05f8186bd0a71b217188b34fb0a6d16f1ca29b7aed110b040136561a81f2003618c1", 0xa7}, {&(0x7f000000a900)="28dbc5eee5469bd42d66b8ff2e53f8061584a25b755841c8388b68aaade10c2d8a536d5dff671dd49fcea611bc5ac0bb601c4c52be91adc9328eaea9f2ae3f768508efc7e16eda61d5f025191e26c744abc90083dcb9eb99eee2d932edc0611417dbd03a55a2b222bfda0feef4db26b0e1d6c349a9230f3fb1bcd091acf5828cf71523e1219958cd4067d5cd0116c3822b0721dbc894a4acf1ba8e2a20d34ff9a5fc62059e4a4a6970e41b15f7ebd6b3dd11fce99e50c1b485939720853dc56b9ecafd1d06", 0xc5}, {&(0x7f000000aa00)="6be1e2852daca1b8e1e376a196ef4168483fe8fe931651febedc30e10c26605ddc5f79c167b60d6d0b7b931b18e9abe05f1250d1322d21fcaca1f428bbb795260d45c4caf38a7a", 0x47}, {&(0x7f000000aa80)="757f2e05c58f56a2ed6e10b32b68049ca15c012000bca44cc975a57a5b669582768c844c09447079386224be757eed75daa009076e2fd912f6317550298209c3268a29ffe2f6f277103e29af4dd7f7167d62c51ea05e84c4e1c8f03ede332f381a99568088a9cf3aa0f5916c7b20abf258e73ef8c4c61066af3304d1f5aec25dddbbd35f6dd94654445e97da2621e64ff2bd7aef72e709c7367e34d20f8ab92c2e89ac35a8b262cf7b77e27e0bf93c11c33d83219ed6", 0xb6}, {&(0x7f000000ab40)="c72fb2609d1b80c37c81769ba28a6e0cb6494bfcfbfcd06fe662a220ec87a171adfec1ccb4991bfdd41b74af44d176b59a4a635792076dd02eebba5b5d79600cb9b861593b98b4e7f710adf01af91bb15dbc902edd54fe682072c25090d7b4962b98982e28c3c1d0be1cc2476dd93252c28d104a0381b7f4ff40d3fdaf16df96dbfe9eac8789f27611f62488602f0f2ab7ed8316515dceb10bd1c4d40f5dab763e9122b6635c9971f3bb07e7d8eaec6f8ea9fc6b69869c9519017455", 0xbc}, {&(0x7f000000ac00)="4c5d4f5227db3df7441679ecc2f754bf10a1e244477ab7b124be2aaec142ca6b6e62845f1fd1eae7d3cf77658961c9e3fa233f96e726658967832c5f58688c71bd7053082fecd0ff5b6d6093614f93f1fe68bdb13f57b23e62e515da44dc0a5f3b0ecc0ccd27031eac387b064f11a616cc92804dbb", 0x75}, {&(0x7f000000ac80)="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", 0xfb}], 0x9, &(0x7f000000ae40)=[{0xf0, 0x116, 0x8, "9401648fd7749ede85cdd0c71840efa4656e2b911a53476741da901d84904fadd9af44561be978c912546495447eca0992eb2a065945e030b002a130a1b23a416db0eb0f9d300802c9be5194c0f19981ed3f1dd12d85c34f43bec744492ebcce1f6a2a625b330d10762adfb9a744b1575195af7045a48670f4c0a261272bdf4876b21f20e54e7dd0bc12355a299cbe7776ef255308e5b8e0fd69ed63bacea5378bd70fc84c5b07c7298e72a6474bac3402de0a095d241ef0e90d12921b025f31193cbac83593b1585b069fd5f1affa963954e7cd8650b3f49924325a"}, {0x38, 0x105, 0x101, "3f5f86281cae31c7e40748812d17b2d84e23e306c57ef69fb1423308c4199c4ac6538c"}, {0x18, 0x0, 0xe0f, "62b12c282f"}, {0x98, 0x199, 0x101, "4e15966183adce27daaf272ea8714fde06175ff8f82e5d638d682b09f14147c806d3edfea6814e2b299de8242fb4e9de252e73603306d18a1abec36c362539403d6016e8f85a61c9e0fe6fccd415a32053365bf3f87f066e25700475cdf9f7ec9171b89cb60dea4320ada18e557ef5efb331f08aa3a986fa8bede556a2bf7c3557"}], 0x1d8}}], 0x4, 0xa3c4edd46574aa09) r10 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r10, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r10, 0x4, 0x100000427ff) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r11}) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 669.736419] binder: 31731:31760 ioctl 4018620d 0 returned -22 06:11:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:12 executing program 5: 06:11:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:12 executing program 3: 06:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000001c0)={0x3d, @rand_addr=0x8, 0x4e21, 0x1, 'dh\x00', 0x4, 0x6d3, 0x57}, 0x2c) write$9p(r2, &(0x7f00000000c0)="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", 0xff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:12 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:12 executing program 5: 06:11:12 executing program 3: 06:11:12 executing program 5: 06:11:12 executing program 5: 06:11:12 executing program 3: 06:11:12 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)) [ 670.120715] binder: 31775:31802 ioctl 4018620d 0 returned -22 06:11:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:13 executing program 3: r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000080)="1f0000000202fffffd6f9d47e29a840aec51193b54e8cad211c007110000f3", 0x1f) [ 670.341797] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.515499] binder: 31812:31820 ioctl 4018620d 0 returned -22 06:11:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/115, 0x73, 0x400023a2, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket(0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'vxcan1\x00', {0xffffffcf}, 0x9}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:15 executing program 3: unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) 06:11:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) 06:11:15 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:15 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) io_setup(0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000002e80)) 06:11:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000200)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13", 0x93}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x682, 0x0, 0x0, 0xfbff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 06:11:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x5}}, 0x0) timerfd_gettime(r2, 0x0) 06:11:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000100)=0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000140)=0x9, 0x2e1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:15 executing program 1: setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x15, 0x80005, 0x0) accept4$packet(r0, 0x0, &(0x7f00000002c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x15, 0x80005, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 06:11:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x2, 0x1, 0x0, 0x5, 0x3f, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000003a00) [ 673.146445] binder: 31836:31872 ioctl 4018620d 0 returned -22 06:11:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 06:11:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000788000)=0x4000, 0x3e2) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:11:16 executing program 3: unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) 06:11:16 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup2(r1, r0) getsockopt$inet6_udp_int(r2, 0x11, 0x1, 0x0, &(0x7f0000000280)) 06:11:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) 06:11:16 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080)=0xe, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 06:11:16 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 673.712809] binder: 31906:31912 ioctl 4018620d 0 returned -22 06:11:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) 06:11:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 06:11:16 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000180)) 06:11:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x1d}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000482) 06:11:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:18 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 06:11:18 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:18 executing program 5: pipe(&(0x7f00000003c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000003c0)=""/4096, 0xfffffd24) 06:11:18 executing program 3: unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) 06:11:18 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{0x0, 0x686}, {0x2}]}, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003640), 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd96, 0x3ff}, 0x1100, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 06:11:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="480000001500197f09004b0101048c590188ffffcf5d060000427a000000033057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028215bffff9b2264520405a3000000", 0x48}], 0x1) 06:11:19 executing program 5: r0 = memfd_create(&(0x7f0000000180)='\t\x00\x00\x00sW\xcd\x03C\xe5\xa2>v 5\xcd\xc0\xa7K\xe4\x1e&\x98|\x8f\xb3\x91\x80H\x93\b2tj\xf2AW\x10@\xecA\x00\x00\x00\x00\x001[\xd0\xa2s\x9e\xd0\xe2p\x9b\xd4S\xae+i\xd9\xfd\xff\xff\xffsT\x11$\xe3\x90!m\x02\xd5\x9f$P\xbb9\xb3q\xff\x9e6\xf9a\x85 \xd0\xbe\x9f', 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 06:11:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @loopback}, &(0x7f0000000100)=0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) tkill(r1, 0x38) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) [ 676.417777] binder: 31945:31975 ioctl 4018620d 0 returned -22 06:11:19 executing program 5: memfd_create(&(0x7f0000000180)='\t\x00\x00\x00sW\xcd\x03C\xe5\xa2>v 5\xcd\xc0\xa7K\xe4\x1e&\x98|\x8f\xb3\x91\x80H\x93\b2tj\xf2AW\x10@\xecA\x00\x00\x00\x00\x001[\xd0\xa2s\x9e\xd0\xe2p\x9b\xd4S\xae+i\xd9\xfd\xff\xff\xffsT\x11$\xe3\x90!m\x02\xd5\x9f$P\xbb9\xb3q\xff\x9e6\xf9a\x85 \xd0\xbe\x9f', 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 06:11:19 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000100)={0xa, 0x4e22, 0xc9, @empty, 0x7ff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="aadcf3d5612bb5f7b3beac5265e4a02d110d", 0x12}, {&(0x7f0000000180)="8e793d0b1d636f616f", 0x9}, {&(0x7f00000001c0)="1dcbe0b654987b733861d82fc3d416a4f82f25dbf3c7b83711d513374d8d7c119fd9afb14bb410a5f1d7405fce936f9548b21a7f8974e285342ec9aef23d95b068e8be9e0c290c5866826b283f7c9016f3c2a4", 0x53}, {&(0x7f00000002c0)="c26a8d76070ac474348832eb18bcad568cb622c2e4c1d17bcc404cb2e6b273a1a91a35261ca525bd815d7fe56aabdfab58d39a7ce344ff50240db32202d6c029a1d6c9f1d097549b5b51502b5c5431ee4bdb2948e59ecab62025ccdfb0b2d8f5a4bc7a66cfa08f18c4b6cad2e1357ef7299a7041bdb1b0c9c854f2a525fa4f0a8157a6e821e1cff8501775c53fe0e2c178847c252ceae880a4a89886940a4f22bf173260aa6d9895080f5a8dbfa3525a11fd94c2adb29b71bd4946f30b4d5761d3cd04fe695722bc10e9cbd78530978bfb0703b31d9830b1d994e2448792424575581f17a4ef016adcffe6572189f527fb6e3a81c1", 0xf5}, {&(0x7f00000003c0)="b298b90c0a7505d657f0a3ada2045f8bd3d45b5a0400d013b1ff3486828ebd9a433d7da73e2048c0d80f9d9d4afa79f54d35ff0d1cebb9698db4366ffc9b9d519f88b623022676f8780f6ebad29240a0000ee72d8be15dda8bdcb38e1094669385b5e21a4fb357f9d5055eb2d158ab8e825a5c326ddf41ac27804288de5fb313517129d183a27ba0b080a4be28528bdd660ed00ac9f307ffceb40c73b415363409e1c199413542a371d9f4a1a3b86ad9ac6a29aa3dcd27d44837797790e3d1f90d481cfff65e2bb544d1a4b377e24dc095ee5d2491a7662a3442db9ec18247f8c3f8f58611c99ed97d", 0xe9}, {&(0x7f00000004c0)="9dc161435bb687b8a6b24839f93404717d888f2f7ceaff8261af02323218d1a9e330a61d3ccf649ac25e0e814990517cdd65d97530cc038036f7c7894bc2d548becf1b39abe2172d5989d55865c9e7ddfc188ee88a95e8198da65f9befc1e3ff1eefd83301077174c20e508250de92dae2120fd1b7f3d08b53d9d620441853bb98d5099b1bb8a1fbd6fc0ae3b0f7c74374a2", 0x92}, {&(0x7f0000000580)="cf0c42e5e081eac65ca75f2e031c3471d056947d624ed4734bfd880227a2b0eb1a31d2e1891ca9d697a5dd0b09b09186590d1dee72248e7f9a22d9406d6e8aff784ad95d16c2cc91c29e481720fc96afd81bfd357456554fb513616428ac15158794821ee1b1e782db2afc7f907a980f38bd3567f48b175ef998ae7c854106ecf43c1cc2f6d508512c94afdf151e983ed777be26b30a1330c7db7f5c7fa2636783c36fe71abfe14e4e8fbad3ff22ea5ffba389b1cd83c2904f76f2e1ef81f5ce8e279ec09bcf4bb184e08bccfe83", 0xce}], 0x7, &(0x7f0000000700)=[@tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x0, 0x8e, 0x0, [@empty, @mcast1, @mcast1, @loopback, @dev={0xfe, 0x80, [], 0x10}, @remote, @remote, @loopback, @mcast2]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x1c6851c146ed129, 0xc, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @dev={0xfe, 0x80, [], 0x24}, @remote, @rand_addr="1b43c8a3bed248bdb33f63a8858a25b5", @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0x138}, 0x20000004) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0x5, 0x2b85}, @window={0x3, 0x200, 0x3f}, @sack_perm], 0x4) r3 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000840)=0x9, 0x4) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "d26d85707668abe4", "3a8494f7c795c3d0c0f45040ebc0807b3c9a30356c8d228cf923e5e5ec1a0cf8", "ab46bfa1", "bfc0aca3c855f166"}, 0x38) tkill(r3, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) prctl$PR_SET_TIMERSLACK(0x1d, 0x3) 06:11:21 executing program 3: unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) 06:11:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:21 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:21 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) 06:11:21 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 06:11:22 executing program 5: listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff}) 06:11:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r1) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x24) tkill(r2, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:22 executing program 5: listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff}) 06:11:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff020000000000000000000000000001000000000000000014b5b0d4c99d9f9ce9e8588fa2643b96978a968fd14acab31636b4600815a21afea23d0d108338ff2846db4a790724761fc5dd75570213b46c6146af006afd6db53967542222c3952a6e49e92030bb6d2229aeb14ab8931914b5474868c739bd904357a89f994748b2b166efe73044c52ada8a4ff2cdc9ec0c81a0631f74fd06620c044e54be7ca92b57269cd4891485a6b9f1188bcbdb75"], 0x98}}, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) creat(0x0, 0x0) 06:11:22 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) [ 679.451300] binder: 32012:32042 ioctl 4018620d 0 returned -22 06:11:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = dup(0xffffffffffffffff) open(0x0, 0x141042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000000)=""/191, 0xbf}, {&(0x7f0000000840)=""/166, 0xa6}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') renameat(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00') r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) listen(r1, 0x2) sendto$inet6(r0, &(0x7f0000000100)="b4", 0xfffffe46, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) setns(r2, 0xf6000000) shutdown(r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 06:11:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, 0x0) 06:11:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:22 executing program 3: poll(&(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x80000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2928, 0x0, 0x0, 0x800e00507) listen(r0, 0x0) recvfrom$inet(r0, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) [ 679.939343] binder: 32073:32079 ioctl 4018620d 0 returned -22 06:11:22 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) creat(0x0, 0x0) 06:11:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x501000) readahead(r0, 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, 0x0, 0x0) accept4$unix(r1, &(0x7f0000000480)=@abs, &(0x7f0000000400)=0x6e, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) getpeername$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xa2ffff) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) link(0x0, &(0x7f00000003c0)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 06:11:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 680.432268] binder: 32085:32106 ioctl 4018620d 0 returned -22 06:11:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getpeername(r1, &(0x7f0000000b80)=@xdp, &(0x7f0000000c00)=0x80) 06:11:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe) 06:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'\xaa\'\x00', 0x3}, &(0x7f0000000140)='D', 0x1, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r0, 0x0, r2) 06:11:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) r2 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0xdc, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6825}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004110}, 0x20008010) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r3, 0x794, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xca4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0xb0fa1ec7173bb84c) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:25 executing program 1: socket(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000003c0)=""/4096, 0xfffffd24) 06:11:25 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 682.552482] binder: 32120:32151 ioctl 4018620d 0 returned -22 06:11:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 06:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:25 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) pipe(&(0x7f0000000300)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) io_setup(0xc020, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @dev, r3}, 0xc) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)) io_setup(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) accept$packet(r1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 06:11:25 executing program 3: 06:11:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r1, &(0x7f0000a16000)=""/71, 0x47) 06:11:25 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 683.306155] binder: 32186:32189 ioctl 4018620d 0 returned -22 06:11:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @mss={0x2, 0x1ff}], 0xae) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000008c00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$packet(r3, 0x0, &(0x7f0000000040), 0x80000) accept(r4, 0x0, &(0x7f00000000c0)) 06:11:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) pipe(&(0x7f0000000300)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) io_setup(0xc020, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @dev, r3}, 0xc) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)) io_setup(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) accept$packet(r1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 06:11:28 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:28 executing program 3: 06:11:28 executing program 5: 06:11:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:28 executing program 5: 06:11:28 executing program 3: 06:11:28 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 06:11:28 executing program 5: pipe(0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) 06:11:28 executing program 3: 06:11:28 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:28 executing program 1: 06:11:28 executing program 3: 06:11:28 executing program 5: 06:11:28 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 685.608669] binder: 32203:32238 ioctl 4018620d 0 returned -22 06:11:28 executing program 3: 06:11:28 executing program 5: 06:11:28 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 685.989277] binder: 32251:32255 ioctl 4018620d 0 returned -22 06:11:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000002a101700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) pread64(r0, &(0x7f0000000140)=""/200, 0xc8, 0x87f) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x3, 'ipddp0\x00', {0x8001}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:31 executing program 1: 06:11:31 executing program 3: 06:11:31 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:31 executing program 5: 06:11:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:31 executing program 5: 06:11:31 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:31 executing program 3: 06:11:31 executing program 1: 06:11:31 executing program 5: 06:11:31 executing program 1: [ 688.663195] binder: 32261:32286 ioctl 4018620d 0 returned -22 06:11:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x2, 0x7}, @window={0x3, 0x1ff, 0x6}], 0x2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4200, r1, 0x7fff, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:31 executing program 3: 06:11:31 executing program 5: 06:11:31 executing program 1: 06:11:31 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:31 executing program 3: 06:11:31 executing program 1: 06:11:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000164f48f4781d706e63e7ef39a5bc8080aad56a444fcd052483c7a54f8ac74c61a85c2e82c2f284879c2e379b8394dfdc29b052c9c833265e27ce53b3b110898fffd0cd37763d0947341667229b759ffc2fcad72a48ba6aab6c1660"]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) pipe(&(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:31 executing program 5: 06:11:31 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:31 executing program 5: 06:11:31 executing program 1: 06:11:31 executing program 3: 06:11:31 executing program 5: 06:11:31 executing program 3: 06:11:31 executing program 1: [ 689.156034] binder: 32320:32342 ioctl 4018620d 0 returned -22 06:11:32 executing program 1: 06:11:32 executing program 5: 06:11:32 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$inet_opts(r3, 0x0, 0x1d, &(0x7f0000000100)="d4c2f7b60d8697e4de157e2f37d72e57209f784ae5427f50813d5c4a30f6562ee9562714725e16b8cf0837a0dfbc3934ba6eed41a77ff3201e8ae5f0395dbff4fd62538ff415bbae2e591c5d72956c65fb03f656b84ffa05e281db448078b2c3363487af70efae0d0abc4a1aab372f6dbc97d3c6fb5d36dc2222ea5c42baff8a9853d68796d85ffed95594abc543d676e41f843f2bc32e74a7e861b11b30675645879302fd419641f55650e2024c53a8d6a0564a536d1efc86cf7cb788bccb4fbd65655534d2dc853013ad1ce5f09ed4cc", 0xd1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0xb342a2b24bbe7407) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0xa0800, 0x120) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:34 executing program 3: 06:11:34 executing program 1: 06:11:34 executing program 5: 06:11:34 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:34 executing program 1: 06:11:34 executing program 3: 06:11:34 executing program 5: 06:11:34 executing program 1: 06:11:34 executing program 5: 06:11:34 executing program 3: [ 692.165029] binder: 32356:32384 ioctl 4018620d 0 returned -22 06:11:37 executing program 3: 06:11:37 executing program 1: 06:11:37 executing program 5: 06:11:37 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) tkill(r3, 0x11) fcntl$setstatus(r2, 0x4, 0x80000000002c00) clone(0x600, &(0x7f0000000340)="cb8de7657abd5639e079008a952bdebb06f17c8c4e5b419ed43db0ba4be4a7b6e9f99fe7ad79bcb18d97c24ddb405bc430105eec0d1c505ca52fc7f052885a4f159e017e84d052bda7053856d13c9fff48a19f3564128d53c6efa838d1c668661786a2063568fc123b890c5b491fc2e20a2f198212ac5230cb2e764a7dec314a48019ff4b064305eadc75b6a84ced0fdcbff81abd08125ae12859ea10ce4a93949941e0bcc912f494210b5a92ace47cfbeb87b92c8ba55e636ae731953bb90b67f408c9a9a1197b7d647cca710bf5701b29b0600725c3e60e0bf4514", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="91d827f6d6cc7fd3abb271f016d3e317720df0adbee66601c276c3ec8c476862f845bf6b3a258527fc502f17e4bd263e3c164a795f36011e56de6beb5538f8bbe44cefe2") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r5, 0x4, 0x100000427ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) dup2(r6, r6) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r11 = eventfd2(0x0, 0x1) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r9, r13, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r10, r12}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@remote, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r12}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r8, r12}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in6=@loopback, 0x4e23, 0x5, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6, r8, r14}, {0x3fc, 0x7f, 0x5, 0xfffffffffffffffd, 0xc7b3, 0x4, 0x1, 0x8}, {0x7, 0x8, 0x0, 0x100}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x6}, {{@in6=@mcast2, 0x4d7, 0x2b}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x3f, 0x800, 0x3f, 0x3}}, 0xe8) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r15 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)="3bb1826fd75682d5edce68c92aeaf1b61a0e180ffe6b4a098cf4b1b4783fe078e57e26757c43faa7e96f23a79ef2d0554867194c673c0c4d8d225783e07d1bd54261178e24a80a2ba2febfb35af9eb01ece8c18ceeb309abc7ef3f24df53c01872806f5cdeaf02398814fc544d99c85e0800cb76d19bec2b3e0912ad959128701660df21ccf9151650b07c50536f6480c372ebecdda05ce8d20ac19eb2a9fb1551d48ff831801f0b5a3f1d37b370a7c9cf50a9e3958847f5d756110e34ac932cebced76c7730bd97afa8ef6d7a9663746a22294344df19e90e0a3300"/240, 0xf0, r15}, 0x68) 06:11:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 06:11:37 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003040)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0) 06:11:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000df8ffc), 0x4) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 06:11:37 executing program 1: 06:11:37 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000080002, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0c0583b, 0x0) setreuid(0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) setresuid(r4, 0x0, r7) 06:11:37 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 06:11:37 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 695.185202] binder: 32392:32427 ioctl 4018620d 0 returned -22 06:11:37 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:37 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000580)={0xa000201b}) [ 695.601983] binder: 32461:32462 ioctl 4018620d 0 returned -22 06:11:40 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:40 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:11:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000000c0)=0xa54d, 0x4) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:40 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 06:11:40 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 698.236238] binder: 32473:32500 ioctl 4018620d 0 returned -22 06:11:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0xa000201b}) 06:11:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 698.745379] binder: 32520:32534 ioctl 4018620d 0 returned -22 06:11:41 executing program 5: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0xa000201b}) 06:11:43 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 06:11:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) dup2(r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r4, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r4, 0x4, 0x100000427ff) getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x200000000000029a) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:43 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 701.173101] binder: 32564:32566 ioctl 4018620d 0 returned -22 06:11:43 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0xa000201b}) 06:11:44 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0xe2a1}, 0x4) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x48a040, 0x0) syz_open_pts(r2, 0x408200) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000040)='bridge_slave_1\x00', 0xbe, 0x1, 0xa9c}) r4 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 701.637426] binder: 32601:32618 ioctl 4018620d 0 returned -22 06:11:44 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) 06:11:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) [ 702.136481] binder: 32629:32635 ioctl 4018620d 0 returned -22 06:11:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:11:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 06:11:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000280)=0x400100000001, 0x211) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x1) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 06:11:46 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) 06:11:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:11:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0xffffffffffffff09) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r3, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r3, 0x4, 0x100000427ff) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) [ 704.396079] binder: 32649:32678 ioctl 4018620d 0 returned -22 06:11:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = fcntl$dupfd(r1, 0x203, r0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "798e3be3ae96b95e", "746fcc02e7fd7edec8832f66e6cf1db19a860f9e15189c1bea08e744838d0c8b", '\x00@\x00', "eedb5127d43322ef"}, 0x152) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x6e00, 0x0) r6 = dup(r5) fcntl$setstatus(r6, 0x4, 0xc00) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r7, &(0x7f0000000080), 0x1c) r8 = dup2(r7, r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r8, 0x29, 0x40, &(0x7f00000000c0)="c45c25da5b56a69379be8a4f0642505d48c7751ab7ddb8d30470c85ec48821c9f037f27eee931f7c7db2de5d02de1fe3ea869d6f47ffb358245db3568685db5a26ce450f7d08b81b353c996b73d5cf10f1054f78acb52ec1b989bdd31cf81697bf786396b857e939c205e157579f70bdbe29cd57c2e210f7b9664d6bda22b8a5f8a85c3d50df8e5e6e13b2beaafecb0fcde06b2052c48027226c2317ac3c3704154dc8a159d2f1c8f63b4e96fccc223fead9adb213579c1592f17e5b20f99adeb9da776d9145061b0cbd4294e65c96ec046a2de160fa6f4c4c20c7289a3bc258a107bbed534832ed91c032cb4759d93673cc40ccfb7cb64b5438e7c75937b2ed9de542bc7aee2fd37dc0985662e2f6176ecfacc5d1211c10f8df135da264c841aa6cb5cbfcc05701ad0148e05006fb8851e2731afa27628dea04b80000000000", 0x140) fcntl$setstatus(r8, 0x4, 0x100000427ff) 06:11:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) [ 704.883551] binder: 32686:32693 ioctl 4018620d 0 returned -22 06:11:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)) 06:11:47 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) [ 705.365208] binder: 32697:32713 ioctl 4018620d 0 returned -22 06:11:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 06:11:49 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 06:11:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)) 06:11:49 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 707.417327] binder: 32717:32739 ioctl 4018620d 0 returned -22 06:11:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f0000000740)="89fb374b2681dc4540cb1dd56fb3ab57fdb17d238b18370ab5a1c0e6f595f3971bda024d428b636a86fb2f955886d0594c2e166466209d9b576ed81b803169af1a2ed2e25ff003fb91a2cb62f051bd2ec1c25c01f6525c9222a7aeb9c51cf6dffbaca51b881f0fcd7ea28d5562efbe4795086d2f000f73e10c0d3688e87db52f11b94d80ddcebc722bf57a964676b164612fb466eadde84a66fad7f2ae6e91d0a3d2c91d5d4830b8bfa06fda4d905ffeca980bdb9170d8ecc67bea26d9a6b242f24000ad7fc0e7e99b99fbf110c3a314bf2adbd6d5518288c673cfc948a6b9e5fa87a29de5fac6a954b0cae14e5547ed3a994101fe24d2647014e46d407c9ff0d396ff614ea2c636411b65472e5a3790f8f7d4af006d96a732ae495e44ccf740a27ca08553245664ce9f1fdf0b3dc36207ba5c6a8e6c33f60c93a266c9fe210bb8cc5b031e18b955582b942eb382ba60181fdc77324f6ea0dade0f789408d09a5f4968e8276c9ced32956000a6fb04b63f6478", 0xfffffffffffffe87, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2}, &(0x7f0000000300)=ANY=[], 0x0, 0x0) r3 = add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="a8bd00c5188bdcfb7e08963401e74a467eac8bf0003f4b0dc3825891653407cfa401408a45ba29dfffc769444ceba6e1e93b0d57162a1e5839c4b30933515268f3f53fad12a714e93f4d2e224af121a4fc3146322f51ac1f6193826959b4acb0ddc01a73841d239638ca9e9dcce176ba0a761df849", 0x75, 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x9, r3) 06:11:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)) [ 707.876175] binder: 32746:32751 ioctl 4018620d 0 returned -22 06:11:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) creat(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') 06:11:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xd}) 06:11:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) 06:11:50 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) tkill(r1, 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x17) 06:11:52 executing program 2: mlockall(0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0) 06:11:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) creat(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') 06:11:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) 06:11:52 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:52 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) open(0x0, 0x0, 0x0) 06:11:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:53 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) 06:11:53 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ptrace$cont(0xffffffffffffffff, 0x0, 0x20, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{0x0, 0x686}, {0x2}]}, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioperm(0x81, 0x0, 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='jfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd96}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="efb09059ce7990bd2820608e1e55b90194b0a7f3580c1f4133") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:11:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x4fff}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 06:11:53 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) 06:11:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x4fff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 06:11:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:55 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:55 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) 06:11:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x100000012) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x400080) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f00000002c0)="36044609072198b05d", 0x9) recvfrom$inet6(r1, &(0x7f0000000440)=""/31, 0x1f, 0x100, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 06:11:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:56 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:56 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:56 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) 06:11:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035004060060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 06:11:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:59 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x4fff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 06:11:59 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:59 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) dup(0xffffffffffffffff) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:11:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:11:59 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:11:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) syz_emit_ethernet(0xc0, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @remote, @local, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) 06:11:59 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x9, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x4000000000000ce, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x102) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) 06:11:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000100)=0x400100000001, 0x4) 06:12:02 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x256, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000291fa5f40a00020000000000aac407d901461b426f4cea879a0e00000000c4f9d0ba872fbdf27eac3603152ee6c9da72438af4fbc95d9d5ed6faaddf1a836670ba252e939a8f4f8e1c31b799444befeabb848e12cd56538c9b5da111ac9849ce04a8d7e15975c2947033601ed2086a4cb857cd900ff2bb20766d83076b85621438d4fa3934"], 0xc}}], 0x55f, 0x0) 06:12:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'ifb0\x00'}, 0x18) dup3(r1, r0, 0x3a7de4d3b7b73429) sched_getparam(0x0, 0x0) 06:12:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) 06:12:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000100)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000000180), 0x0) 06:12:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003040)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0) 06:12:02 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x102) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) 06:12:02 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)=@v2={0x2000000, [{0x0, 0x686}, {0x2}]}, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd96, 0x3ff}, 0x1100, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 06:12:02 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) 06:12:05 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x10, r4) ptrace$getregset(0x420b, r4, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f0000001080)={0xffffffffffff0001, 0x1, 0x6}, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}]) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setsig(0x4203, 0x0, 0x7, &(0x7f0000000080)={0x28, 0x25}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, [0x0, 0x20000340, 0x20000370, 0x20000e44], 0x0, &(0x7f0000000100), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x21, 0x883e, 'nlmon0\x00', 'batadv0\x00', 'ip6tnl0\x00', 'bpq0\x00', @local, [0x101, 0x0, 0xff], @local, [0x0, 0xff, 0x7f, 0xff], 0x9e, 0x9e, 0x1ce, [@vlan={'vlan\x00', 0x8, {{0x3, 0x6, 0xe897, 0x3, 0x2}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffff7, 'system_u:object_r:audisp_var_run_t:s0\x00'}}}}, {0x9, 0x20, 0xa01, 'hsr0\x00', 'gre0\x00', 'bridge_slave_0\x00', 'bridge_slave_1\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0x452531914b1129f8], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0x8, "2ebe3b609419e4f14eea89f057158ead0a0eb9bd4c2bb9bf44117588584e"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x2, 0x8000000000000002, 0x2, [{0x12, 0x0, 0x1125e, 'bond_slave_1\x00', 'team_slave_1\x00', 'veth1_to_bridge\x00', 'rose0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0x0, 0x0, 0x0, 0x7f], @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0xff, 0x8}}}}, {0x1b, 0x40, 0x9100, 'irlan0\x00', 'gretap0\x00', 'dummy0\x00', 'netpci0\x00', @empty, [0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0x7f, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"e51289ac1139511c5550e9fb88d23d5a511d267bdb3c6b04930bcec6d8f1"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1f3f}}}}]}]}, 0x560) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 06:12:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300031300000025bd70000000000005000600000000000a0000200000000000000000000000000000ffff000000000000000000000000050009003d0000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) 06:12:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:05 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000200)={'lo\x00', &(0x7f0000000040)=@ethtool_dump}) 06:12:05 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'\xaa\'\x00', 0x3}, &(0x7f0000000140)='D', 0x1, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r0, 0x0, r2) 06:12:05 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) syz_genetlink_get_family_id$SEG6(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 06:12:05 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000006c00)=[{r0, 0x22}], 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:12:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 06:12:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:05 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) 06:12:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0xfffffffffffffffd) 06:12:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup2(r1, r2) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x82de42, 0x0) 06:12:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:08 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:08 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 06:12:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x130853, r0, 0x0) 06:12:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETA(r1, 0x5405, 0x0) 06:12:08 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlinkat(r0, 0x0, 0x200) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x0) 06:12:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091300000025bd70000000000005000600000000000a001b200000000000000000000000000000ffff000000000000000000000000050009003d0000000a0000000000000000010000000100000000000000000000000000000000000002000100000000000000070b0000000005000500000000000a00000000000000ff0200170000000000000000000000010100000000000000"], 0x98}}, 0x0) 06:12:08 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) r6 = socket(0x10, 0x400000000080803, 0x0) sched_yield() write(r6, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r7 = accept4$inet6(r6, 0x0, &(0x7f00000001c0), 0x81800) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000002c0), 0x4) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="fc98f3c142e25d27a97bfafa1de80a02df980eb4772c6f4a32490c7588e23f678d3ad59a4a1fc24e067c101d6a4137cb67810c94f3cc4a3dc8baacc04c8a69867f229dfb87a77c6ac3511035d65e2be1b9945cc32870a7d23d892e4cc0d74dcc89ea9c73a48472e458ba91df8689548e9ac596200c04d0bbc7e617533c649b811cec3c426e35add33d5de1b32ada726f5757492f5441fc004e4c6d5185b4ed791e8ae46c05e3a5a3b096740fb427fc43297586c2ca40d400546342ce7e7ca56181679319b9d2b01f81d8827f85828e4221cbb1b7e0ad79e3264f28ff90d048d78f41cff00fe7fe1fd1185e63e203e541bc5d96b04493"], 0xf6) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r2, r3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10200}]) socket$inet6_tcp(0xa, 0x1, 0x0) 06:12:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) [ 725.684585] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.923272] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.4'. 06:12:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) 06:12:11 executing program 5: 06:12:11 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:11 executing program 2: 06:12:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:11 executing program 4: 06:12:11 executing program 5: 06:12:11 executing program 2: 06:12:11 executing program 4: 06:12:11 executing program 5: 06:12:11 executing program 2: 06:12:11 executing program 4: 06:12:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) 06:12:14 executing program 5: 06:12:14 executing program 2: 06:12:14 executing program 4: 06:12:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:14 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:14 executing program 4: 06:12:14 executing program 5: 06:12:14 executing program 2: 06:12:14 executing program 5: 06:12:14 executing program 2: 06:12:14 executing program 4: 06:12:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28) 06:12:17 executing program 2: 06:12:17 executing program 5: 06:12:17 executing program 4: 06:12:17 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:17 executing program 5: 06:12:17 executing program 2: 06:12:17 executing program 4: 06:12:17 executing program 5: 06:12:17 executing program 4: 06:12:17 executing program 2: 06:12:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:20 executing program 5: 06:12:20 executing program 2: 06:12:20 executing program 4: 06:12:20 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:20 executing program 4: 06:12:20 executing program 2: 06:12:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:20 executing program 5: 06:12:20 executing program 5: 06:12:20 executing program 2: 06:12:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:23 executing program 4: 06:12:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:23 executing program 2: 06:12:23 executing program 5: 06:12:23 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:23 executing program 2: 06:12:23 executing program 5: 06:12:23 executing program 4: 06:12:23 executing program 5: 06:12:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:23 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) 06:12:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) recvmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffe5}}], 0x400000000000440, 0x2, 0x0) 06:12:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0xe679749aa0da8083, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005780), 0x4000000000000d2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 06:12:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100045}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100), 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) 06:12:26 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:26 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, r2}, 0xc) 06:12:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:26 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:29 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r0+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r0+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:29 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r0+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r3) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 4: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:35 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:35 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:38 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:38 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:38 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:38 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:41 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:41 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x8}, @local}, 0x6) 06:12:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r1, 0x4, 0x100000427ff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r4 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x198) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x100, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0xa000201b}) 06:12:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 5: pipe(&(0x7f0000000540)) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:41 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) [ 758.843693] binder: 1080:1103 ioctl 4018620d 0 returned -22 06:12:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:44 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:44 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:44 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:47 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2b56431d58a5300d, 0x44) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:12:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:47 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:47 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:47 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_buf(r5, 0x29, 0x40, &(0x7f00000000c0), 0x0) fcntl$setstatus(r5, 0x4, 0x100000427ff) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:12:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:47 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:47 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:50 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:50 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000002c0)={0x0, 0xfffffffffffffe00, 0xa, 0xff, 0x3, [{0x400, 0x5, 0xffff, 0x0, 0x0, 0x800}, {0x1, 0x7fffffff, 0x3ff, 0x0, 0x0, 0x211a}, {0x1, 0x9, 0x1f, 0x0, 0x0, 0x500}]}) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) sendfile(r1, r2, 0x0, 0x4e68d5f8) 06:12:50 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a73"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:50 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:50 executing program 2: 06:12:50 executing program 4: write$nbd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x2000) 06:12:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, 0xc6, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) 06:12:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:53 executing program 2: 06:12:53 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a73"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:53 executing program 4: write$nbd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x2000) 06:12:53 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:53 executing program 2: 06:12:53 executing program 2: 06:12:53 executing program 2: 06:12:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x0, @random="6a81caaffd37"}, 0x0, {0x2, 0x0, @dev}, 'rose0\x00'}) 06:12:53 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x400000000001, 0x2c5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8c, 0x0) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0xb01c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x22, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) 06:12:53 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in=@local}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xffffff7f) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340)="0ef6197b1739c65157d55559bba8ba54e4af375f217e9c033b89517d4349ccac586d8000846d93ad3c1ba6cd0e0a3a63b727", 0x32) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) socket$inet6(0xa, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x4) write$smack_current(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r3, 0x0, 0x2008000fffffffe) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x2) 06:12:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) prctl$PR_SET_FPEXC(0xc, 0x0) 06:12:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 06:12:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:56 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a73"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:56 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2c18635d40a2f8d000000"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) 06:12:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000080002, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setresuid(r4, 0x0, 0x0) 06:12:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) 06:12:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0), 0x10) 06:12:56 executing program 4: creat(&(0x7f0000000140)='./bus\x00', 0x0) 06:12:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x224) listen(0xffffffffffffffff, 0x3) write(0xffffffffffffffff, &(0x7f0000000200)='}', 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 06:12:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a000f000000006803f5000000000000ef38bf461e59d7", 0x243}], 0x1) 06:12:59 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 06:12:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:12:59 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:12:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 06:12:59 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @remote, @local, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) 06:12:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 06:12:59 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) timerfd_create(0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, 0x0) 06:12:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000004000)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 06:12:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 06:12:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:12:59 executing program 5: r0 = open(&(0x7f0000000180)='./file1\x00', 0x84c0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/11, 0x61) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) 06:12:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, 0x0) 06:12:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendfile(r0, r1, 0x0, 0x320f) 06:13:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:13:00 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:13:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 06:13:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:13:00 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) 06:13:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_int(r1, 0x0, 0x8, 0x0, &(0x7f0000000000)) recvfrom$inet(r0, 0x0, 0xfde6, 0x42, 0x0, 0x800e00521) shutdown(r0, 0x0) 06:13:00 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 SD'], 0xd) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:13:00 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000000ce, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) 06:13:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_int(r1, 0x0, 0x8, 0x0, &(0x7f0000000000)) recvfrom$inet(r0, 0x0, 0xfde6, 0x42, 0x0, 0x800e00521) shutdown(r0, 0x0) 06:13:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:13:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xd}) 06:13:02 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000000ce, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x3c1) 06:13:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r1, 0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 06:13:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:13:02 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:13:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlockall(0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x7fffffff) 06:13:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 06:13:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x2}, 0x20) r3 = gettid() tkill(r3, 0x38) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 780.245768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket 06:13:02 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0xf0ff7f00000000) [ 780.326888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket [ 780.363894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 06:13:03 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) [ 780.390966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 06:13:03 executing program 5: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}, 0x955f}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 780.434573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8301 sclass=netlink_route_socket [ 780.485931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12852 sclass=netlink_route_socket [ 780.511248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 06:13:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:13:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x1e8}, {0x0, 0xfffffffffffffec3}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b7", 0xd1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:13:05 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 06:13:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, 0x0, 0x320f) 06:13:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:13:05 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x0, 0x0) 06:13:05 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xdc2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x40000000000007a, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x6, 0x0, 0x0, 0x8000, 0x80, 0x9, 0x8}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x79d1, 0x0) io_submit(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:13:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x6) fcntl$notify(r2, 0x402, 0x80000014) 06:13:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003040)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x0) 06:13:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x400000000001, 0x2c5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0xb01c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x22, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) 06:13:06 executing program 2: ustat(0x0, 0x0) pipe(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) write$FUSE_OPEN(r5, &(0x7f0000001440)={0x20}, 0x20) r6 = epoll_create(0x4) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000014c0)="acd5668b8c5bee44b8a28ff7b476033f93ee135220404a5ca2731348595ff69eb91ff08b5c82b3358b400b30ad083858228702685d786887df9b9c8711c89c275a8b234fd6bdd45c3e16189ab2ef959c040a4c0a6381742bc7087b7c52737b9e6a1f2f377707491eeed97cce55c494bc40f65cf2e7b041c7aa7eec9ff4d60407c41604a22fdd4198413b811ed0bee8caec150039da855a46419aa16207c9952bfa86433db46fb3f5df2d2a31b7945a557baa4c40dda8225cc5fa7560dcd016d2c4ed17322f57841de2af4f8b8634aa0f34e86ff0962073d4b76ae512d8751b1005ba35e6469d7da3fd995af5ac19181a168c12624bf68f078c34f86f39290ba6") ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000140)=""/41) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='\x00 \x00\x10\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x40051) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.current\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x13) 06:13:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000000140), 0x0) pipe(&(0x7f0000000040)) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04720f056160c41f20e91ca34d88944922c9038ce4de987146107b8fda244fbd586ef8cff93bd0604cbe5253a2816dff2df545cd9b7c3da787e93a1e"], 0xe}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:13:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="1b0000005e001f00145847000000000000000000020000000f0600", 0x1b) 06:13:08 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x1c1040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f6db3a3f2c5c3ed0d74d2bc59a20ae54db89267600be7ed00e0e6906fac1a5d2196b8e3cefc25a739adff8c25619cce76bf10a5119c534773e8b89c74d82a3e3f8d00a28c392e2"], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, r4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) socket$inet6(0xa, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) 06:13:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007df, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2d9, 0x0, 0x0, 0x883ec286b61b281e) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r1+30000000}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) ftruncate(0xffffffffffffffff, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/98, 0x0) 06:13:08 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 06:13:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x10) socket(0x18, 0x400000000002, 0x0) socket(0x0, 0x400000000002, 0x0) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 06:13:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setresuid(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) 06:13:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) [ 786.224844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=94 sclass=netlink_route_socket 06:13:09 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) 06:13:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000080), &(0x7f0000000140)={0x9}, 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x8}, &(0x7f0000000280)={0x9}, 0x0, 0x0) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 06:13:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000000), 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) 06:13:09 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\x00\f', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 786.445883] kasan: CONFIG_KASAN_INLINE enabled [ 786.462117] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 786.496814] Modules linked in: [ 786.500138] CPU: 1 PID: 1652 Comm: syz-executor.2 Not tainted 4.4.174+ #4 [ 786.507058] task: ffff8801d1804740 task.stack: ffff8800b92b8000 [ 786.513110] RIP: 0010:[] [] netlink_unicast+0x1cb/0x700 [ 786.521831] RSP: 0018:ffff8800b92bf7b8 EFLAGS: 00010212 [ 786.527275] RAX: dffffc0000000048 RBX: 0000000000000000 RCX: ffffc90002969000 [ 786.534545] RDX: 0000000000000833 RSI: ffffffff822eee24 RDI: ffff8801d6281358 [ 786.541813] RBP: ffff8800b92bf870 R08: 1ffff1003a250682 R09: ffffed003a250687 [ 786.549078] R10: ffffed003a250686 R11: ffff8801d1283437 R12: dffffc0000000000 [ 786.556471] R13: dffffc0000000000 R14: ffff8801d6281280 R15: 0000000000000ecd [ 786.564432] FS: 00007f64409d4700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 786.572655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.578529] CR2: 00000000200d2030 CR3: 00000001d59c0000 CR4: 00000000001606b0 [ 786.585803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.593071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 786.600332] Stack: [ 786.602471] ffff8801d12834c0 0000000000000030 0000000000000240 1ffff10017257efd [ 786.610536] dffffc0000000006 dffffc0000000048 0000000041b58ab3 ffffffff82c9f14a [ 786.618641] ffffffff822eec60 ffffffff821f812c 0000000000000000 ffff8801d1283400 [ 786.626694] Call Trace: [ 786.629468] [] ? netlink_sendskb+0x60/0x60 [ 786.635360] [] ? skb_put+0x12c/0x170 [ 786.640726] [] netlink_ack+0x236/0x4c0 [ 786.646299] [] nfnetlink_rcv+0xbdd/0x12b0 [ 786.652097] [] netlink_unicast+0x4d7/0x700 [ 786.658083] [] ? netlink_sendskb+0x60/0x60 [ 786.663973] [] netlink_sendmsg+0x6b6/0xc80 [ 786.669952] [] ? nlmsg_notify+0x170/0x170 [ 786.675779] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 786.682271] [] ? security_socket_sendmsg+0x8f/0xc0 [ 786.688848] [] ? nlmsg_notify+0x170/0x170 [ 786.694646] [] sock_sendmsg+0xbe/0x110 [ 786.700178] [] ___sys_sendmsg+0x769/0x890 [ 786.705971] [] ? copy_msghdr_from_user+0x550/0x550 [ 786.712546] [] ? _raw_spin_unlock_irq+0x28/0x60 [ 786.718863] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 786.725702] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 786.732458] [] ? check_preemption_disabled+0x3c/0x200 [ 786.739296] [] ? check_preemption_disabled+0x3c/0x200 [ 786.746132] [] ? __fget+0x13b/0x370 [ 786.751405] [] ? __fget+0x162/0x370 [ 786.756678] [] ? __fget+0x47/0x370 [ 786.761868] [] ? __fget_light+0xa3/0x1f0 [ 786.767583] [] ? __fdget+0x1b/0x20 [ 786.772777] [] __sys_sendmsg+0xc5/0x160 [ 786.778405] [] ? SyS_shutdown+0x1a0/0x1a0 [ 786.784201] [] ? SyS_clock_gettime+0x118/0x1e0 [ 786.790428] [] ? SyS_clock_settime+0x220/0x220 [ 786.796661] [] SyS_sendmsg+0x2d/0x50 [ 786.802061] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 786.808630] Code: ec a7 01 ff 48 8d 55 98 48 89 d9 4c 89 f6 4c 89 e7 e8 fa f6 ff ff 83 f8 01 0f 85 e6 03 00 00 e8 cc a7 01 ff 48 8b 85 70 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 16 04 00 00 48 8b 85 68 ff ff [ 786.836737] RIP [] netlink_unicast+0x1cb/0x700 [ 786.843100] RSP [ 786.847366] ---[ end trace 322a8e0ab83f7434 ]--- [ 786.852958] Kernel panic - not syncing: Fatal exception [ 786.859013] Kernel Offset: disabled [ 786.862629] Rebooting in 86400 seconds..