0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:02 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000380)=0x4) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x10010, &(0x7f0000000300)={[{@index_on='index=on'}, {@index_on='index=on'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_on='xino=on'}, {@xino_on='xino=on'}, {@metacopy_off='metacopy=off'}], [{@measure='measure'}]}) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x366, 0x9, 0x32314247, 0x7, 0x7ff, 0x6, 0x7, 0x7fffffff, 0x1, 0x7, 0x2, 0x6}}) lseek(r3, 0x0, 0x4) 13:42:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x400, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$FBIOPAN_DISPLAY(r8, 0x4606, &(0x7f0000000280)={0xf00, 0x320, 0x690, 0x5e8, 0x90, 0x0, 0x8, 0x2, {0x2, 0x10000, 0x1}, {0x1}, {0x4, 0x7fff}, {0x6, 0xff, 0x1}, 0x2, 0x1, 0x7fffffff, 0x6, 0x3, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x101, 0x8, 0x12, 0x200, 0x2, 0x5}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x51, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008100}, 0x801) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendfile(r1, r9, &(0x7f0000000040)=0x8, 0x1) 13:42:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x6ef0f000]}) 13:42:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:02 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x58, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x3f00, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xe7ffffff]}) 13:42:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:02 executing program 2: unlink(&(0x7f00000001c0)='./file0\x00') syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00edff000000000014000300626f6e643000000000000000000000001c0012000c000100626f6e64000000000c000200080003007f000000"], 0x50}}, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'}, &(0x7f0000000040)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00', 0x167, 0x0) [ 1156.271206] overlayfs: unrecognized mount option "measure" or missing value 13:42:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x1000000, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xfdfdffff]}) [ 1156.397453] device bond0 entered promiscuous mode [ 1156.419320] device bond_slave_0 entered promiscuous mode [ 1156.459898] device bond_slave_1 entered promiscuous mode [ 1156.670631] overlayfs: unrecognized mount option "measure" or missing value 13:42:03 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x3}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) setxattr$smack_xattr_label(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)={'secur.welinu\t\x00'}, 0xf, 0x3) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x1) 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xfffffdfd]}) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x3f000000, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:03 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:03 executing program 2: r0 = gettid() tkill(r0, 0x3c) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "a7dad0afac896800"}, 0x11, 0xf5132afc28fd0357) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) syz_open_procfs(r1, &(0x7f0000000000)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\x00\x00\x00\x00\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xbe\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[\x9e\xad\xbb\x9f\xeb,\xb9\xdc\x15X\x00\x80\xfacg\x1est\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcdV\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E#?\xcd\xe8B\x8a\x95') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000010002000000000000000500000000000000020000000000000004000000000000000000000000000000000000000000000000000000000000000800000001040000070000000000000078730000000000000100008000000000fb07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000bcb10d2779c5f77a0000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000"]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfe92) clock_gettime(0x0, &(0x7f00000050c0)) recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003b00)=""/146}, {&(0x7f0000003bc0)=""/102}, {&(0x7f0000003c40)=""/166}, {&(0x7f0000003d00)=""/90}, {&(0x7f0000003d80)=""/127}, {&(0x7f0000003e00)=""/190}]}, 0x913}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003f40)=""/151}, {&(0x7f0000004000)=""/233}, {&(0x7f0000005140)=""/4096}, {&(0x7f0000004100)=""/202}, {&(0x7f0000004200)=""/95}, {&(0x7f0000006140)=""/4096}], 0x0, &(0x7f0000007140)=""/4096}, 0xfff}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004300)=""/78}, {&(0x7f0000004380)=""/119}, {&(0x7f0000004400)=""/50}], 0x0, &(0x7f0000004480)=""/170}, 0x1000}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000004700)=[{&(0x7f00000045c0)=""/95}, {&(0x7f0000004640)=""/171}], 0x0, &(0x7f0000004740)=""/178}, 0x800}], 0x55c, 0x1040, &(0x7f0000002ac0)={0x0, 0x1c9c380}) recvfrom$l2tp(r3, &(0x7f0000000280)=""/30, 0x1e, 0x4002, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) 13:42:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r1 = gettid() tkill(r1, 0x3c) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7, 0x82, 0x8, 0xe0, 0x0, 0x40, 0x8204, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x471, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x1004, 0x613, 0x7, 0x1, 0x0, 0x6, 0x8ce9}, r1, 0xc, r0, 0x0) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0xfdfdffff, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:42:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffe7]}) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0xfffffdfd, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:03 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff]}) 13:42:03 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x300, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x100000000000000, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:03 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000300)={0x2, 0x1, 0x1f, 0x11, 0x99, &(0x7f0000000640)="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"}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @loopback}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100001082cbd70000000000000000000b8e634705259d8f5bdcbf879121763877ace4d849b2850c940803c051340e3449b7c0a10a064a0d353b946c5503535d68fe8385131eec4587e6295612b0c67592fce59fba222b12ba8cd84d7f86dfc57261b6f3fa6bf1f53c60fcf5069c60915e57a3b0fb5be2b50ae4f1ff541168467de1b6b9ec184fba398c8dda794d404337ee0eb1128e77db787cb78406c5895136025cfce4cc12f0e678abde71c080441521e3b8af50cc8820af1", @ANYRES32=0x0, @ANYBLOB="10820e000000000014000300626f6e64300000000000000000000000140012000c000100626f6e640000000004000200"], 0x48}}, 0x0) flock(r0, 0x6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm_plock\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000bc0)=0xe0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000108000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e643000000000000000000000001c0012000c000100626f6e64000000000c000200080003007f000000"], 0x50}}, 0x0) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000002c0)) r9 = socket(0x100000000011, 0x2, 0x0) bind(r9, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r9, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r12}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="1000"/16], 0x10}}], 0x2, 0x0) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r14, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000340)={r14, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0xbc}, &(0x7f0000000400)=0x90) 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) [ 1157.483223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x3f00000000000000, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0xfdfdffff00000000, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) [ 1157.648757] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 13:42:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x00\x00\x00\x00\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x91F\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83P\x84\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\xa6\xf9y\xea\xef\f\xc77\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfa\x8a~\x1a\xc5\xb9\xc0\x95\xbdcg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj\xfb\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00\x00\x00\x00\x00\x00\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='/dev/vcsa#\x00', r0}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200800) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r2, 0xf2, 0x63}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'poly1305-simd\x00'}}, &(0x7f0000000240)="125de497d9b2fbd6a2aa876b873a2281f4f38754cb42c9c1555ad1da58e6e7a6eeb90dee84d297d131ad8bd300903127f8362602413d7768f3732b5665de9bb11726d943f76135cb359f8edfac5ce96e108caf170fde718eb7ce7e273c6461ddc4612db20cec00d948c76fb72ba2ffb4474c4c750df9b38c7fb6f827a5c7b51ef3418f617fe95c0b5eb875435ff04611ab61911d2a90e5bb96127b533a153a41121c79fb520eb6fac08c488b79377b2acd8c59cbc7b87eee2ffeb7efc3305c664db9b87fc391e25152bae35a8d12496998437d6bc17acdaa89cd312fe9c2c14b296ec8e03b6fe75874efa5efcdc3c48e54bd", &(0x7f0000000340)=""/99) 13:42:04 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f00000000c0)={0x7ff, 0x1, 0x3ff}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x2]}) 13:42:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x630b}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:04 executing program 2: r0 = gettid() tkill(r0, 0x3b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x167, &(0x7f0000000000)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/rt6_stats\x00') 13:42:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:04 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1f00, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1158.287225] binder: 23767:23773 unknown command 0 13:42:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:04 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xe7]}) [ 1158.313505] binder: 23767:23773 ioctl c0306201 200000c0 returned -22 13:42:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x630c}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:04 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xbc99, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1158.538341] binder: 23785:23790 unknown command 0 13:42:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) [ 1158.564082] binder: 23785:23790 ioctl c0306201 200000c0 returned -22 13:42:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xe7ff]}) 13:42:05 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 13:42:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x630d}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:05 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xf000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:05 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) io_setup(0x200, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) 13:42:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1158.995871] binder: 23812:23816 unknown command 0 13:42:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfdfd]}) [ 1159.016260] binder: 23812:23816 ioctl c0306201 200000c0 returned -22 13:42:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40046302}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:05 executing program 2: r0 = gettid() tkill(r0, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000100)='projid_map\x00') 13:42:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xffe7]}) [ 1159.261486] binder: BC_ACQUIRE_RESULT not supported [ 1159.282662] binder: 23834:23839 ioctl c0306201 200000c0 returned -22 13:42:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = gettid() tkill(r4, 0x3c) r5 = syz_open_procfs(r4, &(0x7f0000000140)='numa_maps\x00') getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x4, 0x1f, 0x40, 0x7f, 0x0, 0x401, 0x8000, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x64f}, 0x4, 0x0, 0x9, 0xc, 0x1, 0x6, 0x7f}, r1, 0x0, r3, 0x5) 13:42:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40046304}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1159.479761] binder: 23849:23852 unknown command 0 13:42:05 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1159.520217] binder: 23849:23852 ioctl c0306201 200000c0 returned -22 13:42:06 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) r0 = epoll_create1(0x0) r1 = socket(0x10, 0x2, 0x4d) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x980001]}) 13:42:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:06 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89{\xcf\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o:\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40046307}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:06 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xfffff000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f900]}) 13:42:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) syz_open_pts(0xffffffffffffffff, 0x165382) [ 1159.987893] binder: 23869:23879 unknown command 0 [ 1160.004589] binder: 23869:23879 ioctl c0306201 200000c0 returned -22 13:42:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x4008630a}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f901]}) 13:42:06 executing program 2: r0 = gettid() r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1000) tkill(r0, 0x3c) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_tables_matches\x00') [ 1160.206484] binder: BC_ATTEMPT_ACQUIRE not supported [ 1160.211735] binder: 23893:23896 ioctl c0306201 200000c0 returned -22 13:42:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086310}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:06 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xffffffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:06 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl(r0, 0xffffffff, &(0x7f0000000040)="b1c3537bcbf07cfc665ce8320918e255f187ac45d1b98d5542487352fe14dda6ab7c2830fe18a3f946f58c1a47f05456fc3ce9c304365c807cd72a3024512286d53449f56c2dbaf02d1fef702b72304eb6a6d75dae94265d481b2a52f28fe8855db0d5d0b7f69b343172d2378708361d0bdb487418f71fa22ca795015770531fc2a26363b8f299637fe98e6d9eb2c741402e2a523fbf177d67134b92b0f04e7e76d24e52c59fca74093a64f46d4fbc8c6a9b5982e6439839795e") 13:42:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f902]}) 13:42:06 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x4431e555fadbed4f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'bond2\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3f}]}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340)='gtp\x00') ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000100)={'bcsf0\x00', @ifru_flags=0x1000}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61, 0x2000, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) io_setup(0x200, &(0x7f0000000080)) r2 = epoll_create1(0x4a15605a937c515f) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000240)={{0x0, 0x80, 0x7f, 0xfd, 0x4, 0x8}, 0xfff}) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = semget$private(0x0, 0x3, 0x40) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r10 = getegid() chown(&(0x7f0000000140)='./file0\x00', r9, r10) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r13 = getegid() chown(&(0x7f0000000140)='./file0\x00', r12, r13) getgroups(0x6, &(0x7f0000000480)=[r13, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01]) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000004c0)={{0x1, r8, r10, r11, r14, 0x2, 0x400}, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r17}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000280)=""/75, &(0x7f0000000300)=0x4b) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) lseek(r4, 0x0, 0x4) 13:42:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086312}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f903]}) 13:42:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x5) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0xf8, 0xb2, 0x7, 0x0, 0xffff, 0x5, 0x9, 0x7, 0x1f, 0x3, 0x2, 0x1f, 0x0, 0xbe7e, 0x6000000, 0x1, 0x8, 0xb9, 0x1, [], 0xfb, 0xffffffffffff0000}) 13:42:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 1160.752577] binder: 23932:23937 unknown command 1074291474 [ 1160.765870] binder: 23932:23937 ioctl c0306201 200000c0 returned -22 13:42:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f904]}) 13:42:07 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x101c, 0x2a, 0x300, 0x70bd26, 0x25dfdbfe, "", [@generic="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", @nested={0xc, 0x7, [@typed={0x8, 0x8b, @u32=0x5}]}]}, 0x101c}, {&(0x7f0000001680)={0x11cc, 0x39, 0x8, 0x70bd2c, 0x25dfdbff, "", [@generic="e1c15ce89a4f4aa3e12141e5e9ecc26b40450bb7d8", @typed={0x14, 0x76, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @typed={0xc, 0x44, @u64}, @generic="9a71935e9698abb251d3939209532c3d635c074d44689f93a96cc4e2fbc068300ece171d85561574a57415dd46802390ef46d49a08f69c2aff3564ffa2d5f65c7b3e4f15821b69f333245c516fc5a43266ecdd9164559b2efc60e978efe682d7dab4e923d995bd107609ba6f13dc1e13672e2f01342b59713a85b3c948587abcdf04ea4a3df296d686652130fb8ac90793c3f9b6e5b660ea06908c8bc66faa8b7a944c26d20d28e04d9b09d0c4bc3a3ee6109900381bd0636f9b4868567f6d80867b7d5587", @typed={0x8, 0x3f, @pid=0xffffffffffffffff}, @typed={0x8, 0x79, @u32}, @generic="756f546a4a04053fda4ad0615efead991d4421e3fe49678a948e2a8ef8cb80786692b954c061d106106bf254f603e44e1a19b1e9cab40592e3d88e16e6a846c43189f8e992c26d850e72ded45d420bfe2d0b85173141fa90bdc1acc0b01ca20762e0b99904ab8cba59f0c5ba62f1f9a9771b637722988f84150a8a83f02ad15616ee0dfa4fceeb62b347b007fdacb2bd85df3efd5243b1bbbe8e676d9376874bcb", @nested={0x1010, 0x5e, [@typed={0x1004, 0x1d, @binary="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"}, @typed={0x8, 0x7a, @u32=0x7}]}]}, 0x11cc}], 0x2, 0x0, 0x0, 0x40000040}, 0x4) 13:42:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x400c630e}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) [ 1160.975844] binder: 23947:23951 unknown command 0 13:42:07 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xfffffffffffff000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f905]}) 13:42:07 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20c001, 0x0) signalfd(r0, &(0x7f0000000040)={0x9}, 0x8) [ 1161.002333] binder: 23947:23951 ioctl c0306201 200000c0 returned -22 13:42:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f906]}) 13:42:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x400c630f}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:07 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x80) inotify_init() write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'}, {0x20, 'cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'}], 0xa, "c9c41cdcd30ca63c1f7f2293463e3cda90dd0e798e713aa0d97996e41d48e3f9ef78c923a44ff55c3ec64a2ee1395337003dcf8e45aee18d157e4439b0cd96e18114e18356cd6f93b0746692658efa8e7ef34ec4602b49e584331d18fb5958e883d2ae69e712113e5eb888ba8e05a91f08ffc7a8820df319e4a7d81e39ebd73fa0057824e13f1e9b0136dbf8b16451915b66454761c3338400b3041d8c47aa88e1bc8b023b157a646d9520b2a63d4da0c3a31c71ef85810c3388d95863ba1ac956822361b04fb258eb1598e588f06c4cbdc955071cfe2ab80720"}, 0x3b5) syz_open_procfs(r0, &(0x7f00000001c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:07 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xffffffffffffffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:07 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$getown(r0, 0x9) r1 = gettid() tkill(r1, 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10100, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r4 = epoll_create1(0x0) r5 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1a000, r5, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r6 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) 13:42:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f907]}) [ 1161.527105] binder: 23979:23985 unknown command 0 [ 1161.541194] binder: 23979:23985 ioctl c0306201 200000c0 returned -22 13:42:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:07 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x77, 0x208006) 13:42:07 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e643000000000000000000000001c0012000c000100626f6e64000000000c000200080003007f000000"], 0x50}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x57b90968e880bde2, 0x5, 0x47f1, r0, 0x0, &(0x7f0000000100)={0x9c0907, 0x49, [], @p_u8=&(0x7f00000000c0)=0x1}}) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000200)={0x88, 0x3c5c4bb1914c4f27, &(0x7f0000000180)="a332ead614bb8c5d422f24f580706b39d685e6ce1778d2c4e82a07bc1724182cb195d7a439fdb814586c16fb802b7afc7d67717721d41706f00aeb6f6c261d6615ec65cea1b63a73254759d485dbf684370c250c7f9953dcaf250da4378c2fbe0339e9a58e0b361d44332bb233c372a0b33273a34fd7b188107f77d9a7406927", {0x7fffffff, 0x8, 0x41414770, 0x9, 0x81, 0x6, 0xc, 0x1}}) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r5 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r5, 0x0, 0x4) 13:42:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40106308}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f908]}) 13:42:08 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0xffffffffffffffff, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1161.774659] binder: 23999:24002 unknown command 0 13:42:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x98f90a]}) 13:42:08 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xe093f352088c2244, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) [ 1161.796503] binder: 23999:24002 ioctl c0306201 200000c0 returned -22 13:42:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40106309}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf00001]}) 13:42:08 executing program 2: r0 = gettid() tkill(r0, 0x3c) r1 = gettid() tkill(r1, 0x3c) r2 = syz_open_procfs(r1, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) r5 = gettid() tkill(r5, 0x3c) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x384, 0x21, 0x10, 0x70bd27, 0x25dfdbfe, {0x1d}, [@typed={0x8, 0x8e, @pid}, @generic="d98d8ad738930b9bd0ed2a401476ebd2c85504f80245d67bd5d45736067b1c7d07b90f0b5dd8474829a1f940532f5b706b", @nested={0x88, 0x8b, [@typed={0x8, 0x46, @uid=r4}, @typed={0x14, 0x65, @binary="e93e62d02ddcebab6bb5650cb7008b"}, @typed={0x14, 0x85, @ipv6=@dev={0xfe, 0x80, [], 0x2c}}, @typed={0x24, 0x3, @str='&proc$trustedsystemmime_type\x00'}, @typed={0x8, 0x3d, @pid=r5}, @generic="dc24665a5c4e004c54833c83cdc7db5f08a3e0414ea5919363a43396dfd74fbbfdce9d16465fb5"]}, @typed={0x20, 0x0, @binary="b8bc5583feeb3fc2051beffd355df5345bccad89cf7c46b4dc"}, @typed={0x8, 0x84, @ipv4=@multicast2}, @generic="8266959870c61ea7d1ee1852d8ea5c7aa3f752e9b9c170a755da1a945e14ace3035ca68138203c7572e36000adb0107d4f4753e188bc9cabe2b1b85656c990c971b160c0a9e66f32dc7a98451a1427f8decdb9b9a32e10e274f28f2a9c67bce3ef989f0a1575c860c96d9a6287ae5a01567785b506568cb6e77bcdecba3c92ab3a95557401b2bb6aae23d117b66126dad0bf5e81415856368dde0df9b5a41e5954eb654dda26793c184fe887eec438b4ff5449d48c848fa6a697221bd90b41f9bf02c80f5a2fd421ac43cd1e85893e6568737939edea6244bc41abc863b94583d1b9f97b64ba401617ddd049373b", @typed={0x100, 0x53, @binary="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"}, @typed={0xc, 0x8, @u64}, @generic="70f4e320a9fb257c1fe7f955a0cd86db8d9436d3e7e6e24e90f48b83802df18460299deaaa4de9370e1a2c989769ac2877595d5a5d94b239e5eff1de31a8e37f0254c1ced520da0ffd8ca10dc811d4", @nested={0x3c, 0x52, [@generic="a8c696f5895368005c0efac2eb74e163f2d5556e36c3b970b0262dddfd87a34758fc1f39a69d5c283bfff9e9bff0e4c8ed04edd6b0"]}]}, 0x384}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0x4e22, 0xfff, @remote, 0x99}, 0x7, [0xfffffff9, 0xffffffff, 0x7f, 0x4, 0xfc1, 0x200, 0x1000, 0x1]}, 0x5c) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10e70000000000005b52f713af44f37423b5"], 0x10}}], 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x0, &(0x7f0000000000)=0xffffffff, 0x4) [ 1162.000172] binder: 24017:24018 unknown command 0 [ 1162.019994] binder: 24017:24018 ioctl c0306201 200000c0 returned -22 13:42:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40406300}, @acquire_done], 0x0, 0x0, 0x0}) [ 1162.565762] device bridge_slave_1 left promiscuous mode [ 1162.571305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.626019] device bridge_slave_0 left promiscuous mode [ 1162.631534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.789111] device hsr_slave_1 left promiscuous mode [ 1162.849502] device hsr_slave_0 left promiscuous mode [ 1162.891261] team0 (unregistering): Port device team_slave_1 removed [ 1162.933006] team0 (unregistering): Port device team_slave_0 removed [ 1162.971488] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1163.040237] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1163.175038] bond0 (unregistering): Released all slaves [ 1164.553656] IPVS: ftp: loaded support on port[0] = 21 [ 1164.624886] chnl_net:caif_netlink_parms(): no params data found [ 1164.659383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.665897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.672842] device bridge_slave_0 entered promiscuous mode [ 1164.683980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.690496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.697958] device bridge_slave_1 entered promiscuous mode [ 1164.715974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1164.725467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1164.744580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1164.752210] team0: Port device team_slave_0 added [ 1164.758274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1164.765771] team0: Port device team_slave_1 added [ 1164.771113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1164.781880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1164.826912] device hsr_slave_0 entered promiscuous mode [ 1164.875399] device hsr_slave_1 entered promiscuous mode [ 1164.920846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1164.928050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1164.947938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.954288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.960945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.967311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.005848] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1165.011946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.020444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1165.033160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.040811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.047729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.054635] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1165.064684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1165.071201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.084466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1165.092361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.098816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.115525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.123115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.129504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.138830] device bridge_slave_1 left promiscuous mode [ 1165.144309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.185661] device bridge_slave_0 left promiscuous mode [ 1165.191104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.277816] bond2 (unregistering): Released all slaves [ 1165.316763] device hsr_slave_1 left promiscuous mode [ 1165.357981] device hsr_slave_0 left promiscuous mode [ 1165.410092] team0 (unregistering): Port device team_slave_1 removed [ 1165.421541] team0 (unregistering): Port device team_slave_0 removed [ 1165.431687] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1165.471083] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1165.545343] bond0 (unregistering): Released all slaves [ 1165.608410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1165.616548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1165.624054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1165.631982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1165.641420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1165.648421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1165.656256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1165.668052] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1165.674070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.696026] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1165.703331] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1165.709836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.716832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.729180] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:12 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x9, &(0x7f0000ffc000/0x1000)=nil, 0x0) r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) fadvise64(r0, 0x100, 0xbd59, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x40000) getsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000300)=0x4) getpid() tkill(0x0, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000180), 0x0) syz_emit_ethernet(0x14e, &(0x7f0000000180)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @remote, {[@end, @ra={0x94, 0x6, 0x7fff}, @ssrr={0x89, 0x3, 0x80}]}}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"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"}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf0f027]}) 13:42:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40406301}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:12 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) connect$caif(r3, &(0x7f00000000c0)=@dbg={0x25, 0x1, 0x8}, 0x18) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) 13:42:12 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40486311}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf0f042]}) [ 1166.114981] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.120092] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.138937] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:42:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) [ 1166.164824] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 13:42:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40486312}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf0f045]}) [ 1166.412864] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1166.455182] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.460301] protocol 88fb is buggy, dev hsr_slave_1 13:42:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf0f06e]}) 13:42:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x630b}], 0x0, 0x0, 0x0}) 13:42:12 executing program 2: r0 = gettid() tkill(r0, 0x3c) r1 = syz_open_procfs(r0, &(0x7f0000000000)='status\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 13:42:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) [ 1166.731937] binder: 24092:24095 unknown command 0 [ 1166.807512] binder: 24092:24095 ioctl c0306201 200000c0 returned -22 [ 1168.492049] IPVS: ftp: loaded support on port[0] = 21 [ 1168.556134] chnl_net:caif_netlink_parms(): no params data found [ 1168.589570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.596122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.603046] device bridge_slave_0 entered promiscuous mode [ 1168.610270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.617122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.624068] device bridge_slave_1 entered promiscuous mode [ 1168.641804] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1168.651159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1168.668695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1168.676299] team0: Port device team_slave_0 added [ 1168.681838] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1168.689228] team0: Port device team_slave_1 added [ 1168.694599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1168.702277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1168.757959] device hsr_slave_0 entered promiscuous mode [ 1168.795258] device hsr_slave_1 entered promiscuous mode [ 1168.855986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1168.863171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1168.882913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.889301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.895967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.902320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.936580] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1168.942726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.951701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1168.961825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1168.969827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.976830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.983768] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1168.993750] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1168.999974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.009029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1169.017023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.023367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.033135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1169.040993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.047382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.063830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1169.072045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1169.087668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.097700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.108272] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1169.115371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1169.123037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1169.131655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.139624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.152626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1169.160973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1169.170934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1169.181098] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xf99800]}) 13:42:15 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:15 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xeca9, 0x8, 0x18}]}) 13:42:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x630c}], 0x0, 0x0, 0x0}) 13:42:15 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x8001002, 0x3ff}) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) [ 1169.616998] binder: 24127:24132 unknown command 0 [ 1169.633620] binder: 24127:24132 ioctl c0306201 200000c0 returned -22 13:42:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x1000000]}) 13:42:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x630d}], 0x0, 0x0, 0x0}) 13:42:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', r3}) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) [ 1169.891985] binder: 24147:24152 unknown command 0 [ 1169.914812] binder: 24147:24152 ioctl c0306201 200000c0 returned -22 13:42:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x1009800]}) 13:42:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40046302}], 0x0, 0x0, 0x0}) [ 1170.108366] binder: BC_ACQUIRE_RESULT not supported 13:42:16 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:16 executing program 2: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PW_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x30080000) syz_open_procfs(0x0, &(0x7f0000000040)='cwd/./\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\x97u\xf3:\xc83]H!\xe7\x81~\x85\xb7\xf1\x8f\xf1E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe3RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7\xacD\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\b\t\x00\x00\x00-\xb5\x0f^\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed\x00~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01\bY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk(*\\@\xf9{\xbb\xfb#\xb4l\t\xac\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x85\xb1r#\x8aH]W\x06\x1d\xceV\xaf\x81&]\x03\\\x05i\xd4`\xcb%\xde\x8e.\x8c\xf2+\xb5v_\xb8\x84?\v\xae\xfb \xc7\xab\xfc\x91\xe7\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xdd?\xfa\x9d\x05\xc6\xe0`\xfa\xf2\tX\xbaUBl\xc9\xe0\xaf=1\xce\\\xdfRTO\xeb\xe3Ug') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x100, 0x7, 0x1, 0xcb3c, 0x4, 0x4}) 13:42:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) [ 1170.135798] binder: 24159:24161 ioctl c0306201 200000c0 returned -22 13:42:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40046304}], 0x0, 0x0, 0x0}) [ 1170.325489] binder: 24172:24176 unknown command 0 [ 1170.347371] binder: 24172:24176 ioctl c0306201 200000c0 returned -22 13:42:16 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x4000000000296042, 0xac247f0592cdb902) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5, 0x3f}) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x100f000]}) 13:42:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40046307}], 0x0, 0x0, 0x0}) 13:42:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:16 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fcntl$setflags(r0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002240)='/dev/snapshot\x00', 0x500, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000080)) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) 13:42:16 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1170.666650] binder: 24188:24190 unknown command 0 [ 1170.681651] binder: 24188:24190 ioctl c0306201 200000c0 returned -22 13:42:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40086303}], 0x0, 0x0, 0x0}) 13:42:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x1f99800]}) [ 1170.872991] binder: 24211:24214 unknown command 0 [ 1170.894970] binder: 24211:24214 ioctl c0306201 200000c0 returned -22 13:42:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x2000000]}) 13:42:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x4008630a}], 0x0, 0x0, 0x0}) [ 1171.094716] binder: BC_ATTEMPT_ACQUIRE not supported [ 1171.111367] binder: 24224:24226 ioctl c0306201 200000c0 returned -22 13:42:17 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x2, 0x81}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup(r0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x8, &(0x7f00000000c0)='oom_adj\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xde8, 0x6}, 0x4022, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r6, 0x0, 0xffffffffffffffff, 0x8) r7 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fcntl$getown(r7, 0x9) syz_open_procfs(r8, &(0x7f0000000b40)='oom_adj\x00') r9 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) r10 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r10}, &(0x7f0000044000)) r11 = open(&(0x7f0000000340)='./file0\x00', 0x208400, 0x141) setsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f0000000380)={0x7fff}, 0x6) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000003c0)={0x8, 0xf1, 0xff, 0x0, 0xfbcb, 0xe4, 0x58, 0xdc, 0x7, 0x80, 0x9, 0x1, 0x0, 0xffff, 0xff, 0x20, 0x2, 0x0, 0x2c}) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r14 = fcntl$dupfd(r12, 0x0, r13) r15 = gettid() ioctl$BLKTRACESETUP(r14, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x0, 0x1, r15}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='\xc3\xfa}\xcb/vcs\x00', 0x800, 0x0) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r16, 0x0, 0x0) getpgrp(0x0) 13:42:17 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x2f99800]}) 13:42:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40086310}], 0x0, 0x0, 0x0}) [ 1171.417827] binder: 24236:24243 unknown command 0 13:42:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3f99800]}) [ 1171.444350] binder: 24236:24243 ioctl c0306201 200000c0 returned -22 13:42:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x400c630e}], 0x0, 0x0, 0x0}) 13:42:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x4f99800]}) 13:42:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) [ 1171.655286] binder: 24256:24260 unknown command 0 [ 1171.684978] binder: 24256:24260 ioctl c0306201 200000c0 returned -22 13:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x400c630f}], 0x0, 0x0, 0x0}) [ 1171.839148] binder: 24268:24269 unknown command 0 [ 1171.863653] binder: 24268:24269 ioctl c0306201 200000c0 returned -22 13:42:18 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) keyctl$invalidate(0x15, r1) 13:42:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x5f99800]}) 13:42:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106308}], 0x0, 0x0, 0x0}) 13:42:18 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000600aaaaaa020000004291aaaa63e87156be52533c26ff83863ca9aaaabbffffffffffffaaaa0600000073"]) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6, 0x8) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106312}], 0x0, 0x0, 0x0}) 13:42:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6f99800]}) [ 1172.361800] binder: 24298:24304 unknown command 1074815762 13:42:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7f99800]}) 13:42:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) [ 1172.402559] binder: 24298:24304 ioctl c0306201 200000c0 returned -22 13:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40406300}], 0x0, 0x0, 0x0}) 13:42:18 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:18 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x24040, 0x0) r1 = semget$private(0x0, 0x4, 0x20) semop(r1, &(0x7f0000000380)=[{0x1, 0x0, 0x1000}, {0x4, 0x3, 0x1800}, {0x4, 0x8001}, {0x7, 0x3c, 0x2800}, {0x3, 0x3}], 0x5) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000200)=""/113) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) 13:42:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8f99800]}) 13:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40406301}], 0x0, 0x0, 0x0}) 13:42:19 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f00000000c0)="6e36e7f47c32ec1a91d60e0cabc5e617f87ef8e305d10e168511bfdad40122d37485", 0x22, 0x20048000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xaf99800]}) 13:42:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x10000, 0x1ff, 0x3, 0x3, 0x6, 0x7f, 0x6, 0x6, 0x9, 0x40, 0x1f, 0x6, 0x573}, {0x20, 0x8228, 0x10, 0x3, 0x40, 0x8, 0x7, 0x6, 0x6, 0x7, 0x5, 0xff, 0x8}, {0x80, 0x9a4, 0x82, 0x1f, 0x1, 0x21, 0x1, 0x9, 0xff, 0x7f, 0x1, 0xdb, 0x8}], 0xd1}) 13:42:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40486311}], 0x0, 0x0, 0x0}) 13:42:19 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x27f0f000]}) 13:42:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40486312}], 0x0, 0x0, 0x0}) 13:42:19 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000000004000001000000000000002534aa428976c65ec2e09f1fb4fd8fbfeacc39194778e4984f489d67c7c72dd94a5985e9534e6e866b3bf1be1a42c33e2128ebd726024dcce98a2f824cbe5b770639b3d3019d"], 0x10}}], 0x2, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 13:42:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:42:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x42f0f000]}) 13:42:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x3f00}], 0x0, 0x0, 0x0}) 13:42:20 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x1000000}], 0x0, 0x0, 0x0}) 13:42:20 executing program 2: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x28e, 0x0, 0x0, 0x0, 0xfffffffffffffdb7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01001e3d0000000000000000000000008226"], 0x10}}], 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0), &(0x7f0000000040)=0xfffffffffffffe08) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) 13:42:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:42:20 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1174.155905] device bridge_slave_1 left promiscuous mode [ 1174.161449] bridge0: port 2(bridge_slave_1) entered disabled state 13:42:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000004c0)='limits\x00') [ 1174.246259] device bridge_slave_0 left promiscuous mode [ 1174.251804] bridge0: port 1(bridge_slave_0) entered disabled state 13:42:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x3f000000}], 0x0, 0x0, 0x0}) 13:42:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0xfdfdffff}], 0x0, 0x0, 0x0}) 13:42:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) [ 1174.663551] device hsr_slave_1 left promiscuous mode [ 1174.716133] device hsr_slave_0 left promiscuous mode [ 1174.814610] team0 (unregistering): Port device team_slave_1 removed [ 1174.866765] team0 (unregistering): Port device team_slave_0 removed [ 1174.903834] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1174.948922] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1175.070581] bond0 (unregistering): Released all slaves [ 1175.160792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24404 comm=syz-executor.2 [ 1176.206506] IPVS: ftp: loaded support on port[0] = 21 [ 1176.268370] chnl_net:caif_netlink_parms(): no params data found [ 1176.303229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.309761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.316728] device bridge_slave_0 entered promiscuous mode [ 1176.323550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.330012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.336986] device bridge_slave_1 entered promiscuous mode [ 1176.356040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1176.365148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1176.380299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1176.387883] team0: Port device team_slave_0 added [ 1176.393407] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1176.400799] team0: Port device team_slave_1 added [ 1176.406320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1176.413679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1176.470018] device hsr_slave_0 entered promiscuous mode [ 1176.515091] device hsr_slave_1 entered promiscuous mode [ 1176.555453] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1176.562560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1176.582104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.588491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.595178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.601521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.634626] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1176.641121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.649560] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1176.661853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1176.669571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.676631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.683581] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1176.693554] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1176.699729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.708742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.716837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.723180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.732608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.740403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.746808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.765316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.772938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1176.783010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.796076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1176.806701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1176.816198] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1176.822201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1176.837489] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1176.844906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1176.851594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1176.862219] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x45f0f000]}) 13:42:23 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0xfffffdfd}], 0x0, 0x0, 0x0}) 13:42:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x20004580}], 0x1, 0x0, 0x0, 0xfffffff0}}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="c51c51fcd62f869f9374acfa7efcae05156160f2304f716fd00526ab5dfcd668c4c89693bb7f3b17aab76530a89454131720b2c4b7cd", 0x36}, {&(0x7f0000000180)="51720989860ff0e3cef0438c732ecd412f077a963718b97340c0f2c77aec02509c90ec3875228c40448ecf62af7274a1eec9f6b9110469e02454cfa2e670cc7ab879ac1852588e8ee29f20e596b35ea4a9f6451c07fe13f1dd2d72eadbd52559ab25be4d545789d01778955049cac4fe3862964ac1714afdbdb2ae5b22f863cb3fedc2ac423c0641aae40149207746ae046f7300ffb94e6a51fbdd45f0b15c8ee81f56f8429420abb8bad9", 0xab}, {&(0x7f0000000240)="6f03657449637511b5925133eae5892a01fad9e9551f44bd5f979b40213b04eceb01a9eb62fb91123cda133f0355173e3aef3e76b8c71abb24835a2c5b512526a7ead30a4862c5548e04c762a1e5a0d2c0978a1395363cd27be0b3c223d86f1f1cb67fe1b622d23c7da51537e6c5502c9791c56f5d68d31a58e4ec7d8054729d2a308ed396d5d9995807ea2f9c1329d9aee6e81cd242f6f9589815c17e36bcceed2d27b1f7e307aab4e694882dce7e014cf684d382b7890a123cb9937110de118d0a49073d49ba6d7f719e98527e2fe7cb917cb70bfa61cf035942", 0xdb}], 0x3, &(0x7f0000000400)=[{0xb8, 0x116, 0x800, "37c2ac84d9eddbd906e7b656d10b035a9c1b40b893609b073e5df09ecf71ee431aefa2ce6b1cc889953b83560e3af8cd8acf2ccdea5b391780eba82ff445df320b21ea49fe2fa5c09477dcfc688cc05aaae6e768e721842c8786eda9d8a2d670cbded15ac68ba6db88e1e8ff919e9579e11dc067b5bae3ea839615f1d9e4d9d3329b2afe7423cd52e03891a2a408019af7110e164bf0c00b3ec0ed5917d92fb944deaecfc6"}, {0xb0, 0x10b, 0x10001, "7eeb1c4f4083664b19c566970a11794ada784b1300793ea0313b7ef3f88d83d6d715a0fd4b437bfefe6ab9d0437d52fcab5bebfce1622a9b363fb36b47adc3ff6efb02f1a488b95b73701cffcbaf28ae12d2a1b8a299262c38ab64999122904457a84238379185cf4c04be54e4fce0870e051b8eb8ba462cfcaa44f5584205bbb03feb98301a00ec2b8544c85937b67f382b4ec64e2778044297eb6cfa"}, {0xf0, 0x192d996a1f9ec1b4, 0xffffffff, "b6b7f61156882bd71a43b06d4cdd7e303df94e8f2ba5cdbb36368f0c4fd2445e114630e6adcb024992b7b5bcd3d8b659ae387b751454d62feb5f24773e433422b5e1e314dafa67265485dffe81f78708153b5c8ae6a02fd3f66ecc413a9e9cf6e73a4725823f638bef0fd70d79e050013812eac43c6eb3e76a2fb6f82057530dba719da2babd9d65cd94dd09ea5b673dd328276ad07dffcd882611f0fe320b184cc34e98f39c8125dba08a71d52db667165763c5e92c498f6fa5d0c0d8241cb30e4e78b61972262644842e165952048dc86721b674f91fe32c1cc304"}, {0x33, 0x105, 0x10001, "d363c297b8f726e713cbb27ae63a80016d3400b30c16849a7e1ba0bd4cc39243f89d1ee491e65e49e7b911922d9641bf38b54aefcb3d7c4da12b3c687fce7439d7febf2447d22853980913bab5d999eda5cbce35a87c08aa9f8e6b8796fe9dd55e901fb8ef1a3f9dae763b8efbc263"}, {0xc0, 0xff, 0x4, "ecac2868b8fbf65f9d495522239e2d947cb4284243a61946d2fa5aa48fd229e512e61d5f676c270a38829731b1faf816bb0c95b4c9d3e8558da01bc9d8b57e1703e26c487e4dc5aff657672a2ec5b75baae4ec16dfb8d1655f06d68b9a934d7127d1aea062775c8fe8e470f113a20fab9bd24e8e2e13247187002c15c30bd4d046b91d61cfe41bc58f465f3a8d1cb1ac5f38c84e9a101f145b1c1d0b291426b2c3f3618db8db39a3065a"}, {0x28, 0x0, 0x0, "f405ca7a8a22ed3195a4b32ee49999a132b1d077f2"}, {0x20, 0x100, 0xac0b, "6af2ffac4fcd17f0acd0bf93"}, {0xffffffffffffffe4, 0x116, 0x3, "6775a526188294000a5e1a3c3a4fc067f7f554a5889116279a7d92f747ff44039fde59f87bd8ce3673312ceea998286781b074c56261f4458d38d0fb8fce33"}], 0x430}, 0x80) lseek(r4, 0x0, 0x4) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000100)={'exec ', 'secur.welinu\t\x00'}, 0x13) memfd_create(&(0x7f0000000840)='vboxnet1\x00', 0x0) 13:42:23 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) pread64(r0, &(0x7f0000000640)=""/4096, 0x1000, 0x323) 13:42:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x100000000000000}], 0x0, 0x0, 0x0}) 13:42:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6ef0f000]}) 13:42:23 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r1 = gettid() tkill(r1, 0x3c) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x7, 0x2, 0xa3f, 0x9, r1}) 13:42:23 executing program 2: syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 13:42:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x3f00000000000000}], 0x0, 0x0, 0x0}) 13:42:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:23 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xe7ffffff]}) 13:42:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xd7\t\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xd6\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$TUNSETLINK(r2, 0x400454cd, 0x447910c6b95e43e2) 13:42:24 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) socket(0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)={0x4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) 13:42:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:42:24 executing program 2: tkill(0x0, 0x3c) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') 13:42:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfdfdffff]}) 13:42:24 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0x3f00}], 0x0, 0x0, 0x0}) 13:42:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfffffdfd]}) 13:42:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0x1000000}], 0x0, 0x0, 0x0}) 13:42:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0x3f000000}], 0x0, 0x0, 0x0}) 13:42:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xffffffe7]}) 13:42:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0xfdfdffff}], 0x0, 0x0, 0x0}) 13:42:25 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0xa05, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @dev}, &(0x7f00000001c0)=0xc) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r8, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r11}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r13 = socket(0x100000000011, 0x2, 0x0) bind(r13, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r13, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r16}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) r18 = socket(0x100000000011, 0x2, 0x0) bind(r18, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) getpeername$packet(r20, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r18, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r21}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000ec0)=0xe8) r24 = socket(0x100000000011, 0x2, 0x0) bind(r24, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = dup(r25) getpeername$packet(r26, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r24, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r27}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r28 = socket(0x100000000011, 0x2, 0x0) bind(r28, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup(r29) getpeername$packet(r30, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r28, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r31}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000fc0)={@dev, 0x0}, &(0x7f0000001000)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000011c0)={@multicast1, @initdev, 0x0}, &(0x7f0000001200)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r35 = dup(r34) getpeername$packet(r35, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$inet_IP_XFRM_POLICY(r35, 0x0, 0x11, &(0x7f0000002680)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002780)=0xe8) r37 = socket(0x100000000011, 0x2, 0x0) bind(r37, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) getpeername$packet(r39, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r37, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r40}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_mreqn(r37, 0x0, 0x24, &(0x7f00000027c0)={@dev, @multicast1, 0x0}, &(0x7f0000002800)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r44 = dup(r43) getpeername$packet(r44, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$inet6_IPV6_XFRM_POLICY(r44, 0x29, 0x23, &(0x7f0000002980)={{{@in6=@ipv4={[], [], @local}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000002880)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003100)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000039c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080840}, 0xc, &(0x7f0000003980)={&(0x7f0000003140)={0x82c, r5, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r12}, {0x224, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r22}, {0x58, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x5, 0x84, 0x81, 0x3}, {0x4, 0x1f, 0x8, 0x4ce}, {0x8001, 0x4b, 0x5, 0x8001}, {0xc9cc, 0x0, 0x6, 0xffe0}]}}}]}}, {{0x8, 0x1, r23}, {0x16c, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x9, 0xfb, 0x6, 0xd7}, {0x9, 0x3f, 0x20, 0x6}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r27}, {0x1f0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7d54}}, {0x8, 0x6, r32}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x400, 0x7f, 0x21, 0xfffffffa}, {0xb000, 0x0, 0x7f, 0x9}, {0x100, 0x8, 0x40, 0x7}, {0x3, 0x6, 0x3, 0x1ff}, {0x800, 0x6, 0x46, 0xfffffa60}, {0x8, 0x2, 0x40, 0x7}, {0x8000, 0x3, 0x6, 0x81}, {0x8, 0x80, 0x3, 0x8}, {0x3, 0xff, 0x4, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r36}}}]}}, {{0x8, 0x1, r41}, {0x1cc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r42}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0xde, 0x5, 0x4}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r45}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r46}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x82c}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r48 = dup(r47) getpeername$packet(r48, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r49}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) r50 = dup(r1) getpeername$packet(r50, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$UI_SET_PROPBIT(r50, 0x4004556e, 0x10) 13:42:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0xfffffdfd}], 0x0, 0x0, 0x0}) 13:42:25 executing program 0: connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe27) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(r2, r4, r5) r6 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r6, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r7 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r7, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r7, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r9 = socket$tipc(0x1e, 0x4710a32bc5389022, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x4000}, {r7, 0x40}, {r3, 0x180}, {r1, 0x208}, {0xffffffffffffffff, 0x8000}, {r8, 0x8100}, {r9, 0xe02a}, {0xffffffffffffffff, 0x6620}], 0x8, &(0x7f0000000400)={r10, r11+10000000}, &(0x7f0000000440)={0x4}, 0x8) write$P9_RSYMLINK(r0, &(0x7f0000000300)={0x14, 0x11, 0x1, {0x8, 0x2, 0x8}}, 0x14) 13:42:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0xffffffff]}) 13:42:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0}) 13:42:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:25 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0x3f00000000000000}], 0x0, 0x0, 0x0}) 13:42:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x2]}) 13:42:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r0}) accept4$nfc_llcp(r1, &(0x7f00000018c0), &(0x7f0000001940)=0x60, 0x50a6d051cb72ac33) 13:42:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:26 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4240, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done={0x40106309, 0x0, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) 13:42:26 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xe7]}) 13:42:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:26 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x3f00, 0x0, 0x0}) 13:42:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xe7ff]}) 13:42:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) [ 1180.112363] binder: 24625:24629 ioctl c0306201 200000c0 returned -14 13:42:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x1000000, 0x0, 0x0}) 13:42:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xfdfd]}) 13:42:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x3f000000, 0x0, 0x0}) [ 1180.285655] binder: 24636:24637 ioctl c0306201 200000c0 returned -14 [ 1180.389763] binder: 24643:24644 ioctl c0306201 200000c0 returned -14 13:42:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:27 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0xfdfdffff, 0x0, 0x0}) 13:42:27 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000140)={0x71, "c299619545742335789486d0077f66170726c65c1c092c145361d4f23d3d4f0afd4b3da42d9f6973bb2e52326ceefb154271375fa618db8ecac1088ea8de1595a94cfa0421ed8d77e5e5ca1a2b4a2fc957b9e2711d04a6f47ddfdf75d9223818e70fbd6270d04813a9747cfc6da6cb976a13fe22b6766c8782e2043d1970f73c"}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0xa0e01, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r3 = epoll_create1(0x0) r4 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1a000, r4, &(0x7f0000e47000)) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000300)=0x4) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000280)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r9 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r9, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r9, 0x0, 0x4) 13:42:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xffe7]}) 13:42:27 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4240, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1180.837801] binder: 24655:24660 ioctl c0306201 200000c0 returned -14 13:42:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x980001]}) 13:42:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0xfffffdfd, 0x0, 0x0}) 13:42:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f900]}) [ 1181.069616] binder: 24678:24681 ioctl c0306201 200000c0 returned -14 13:42:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x100000000000000, 0x0, 0x0}) 13:42:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f901]}) [ 1181.270280] binder: 24689:24691 ioctl c0306201 200000c0 returned -14 13:42:27 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:28 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) io_setup(0xff, &(0x7f00000000c0)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x3f00000000000000, 0x0, 0x0}) 13:42:28 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x9, &(0x7f0000ffc000/0x1000)=nil, 0x0) r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) fadvise64(r0, 0x100, 0xbd59, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x40000) getsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000300)=0x4) getpid() tkill(0x0, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000180), 0x0) syz_emit_ethernet(0x14e, &(0x7f0000000180)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x140, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @remote, {[@end, @ra={0x94, 0x6, 0x7fff}, @ssrr={0x89, 0x3, 0x80}]}}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"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"}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 13:42:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f902]}) 13:42:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:28 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x58, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1181.892618] binder: 24708:24710 ioctl c0306201 200000c0 returned -14 13:42:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0xfdfdffff00000000, 0x0, 0x0}) 13:42:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:42:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f903]}) [ 1182.099466] binder: 24724:24729 ioctl c0306201 200000c0 returned -14 13:42:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x3f00, 0x0}) 13:42:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) [ 1182.284349] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 13:42:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:28 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) getpid() write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f904]}) 13:42:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x1000000, 0x0}) 13:42:28 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:28 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x60, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f905]}) 13:42:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x3f000000, 0x0}) 13:42:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) 13:42:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:29 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x80000) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0xfdfdffff, 0x0}) 13:42:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f906]}) 13:42:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xa, 0x12) 13:42:29 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f907]}) 13:42:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0xfffffdfd, 0x0}) 13:42:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x10, 0x12) 13:42:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:42:30 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f908]}) 13:42:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x100000000000000, 0x0}) 13:42:30 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x3e8, 0x12) 13:42:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x3f00000000000000, 0x0}) 13:42:30 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x98f90a]}) 13:42:30 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:30 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000000c0)=0x4000, 0x4) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0xfffffffffffffffd, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r5 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r5, 0x0, 0x4) 13:42:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0xfdfdffff00000000, 0x0}) 13:42:30 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf00001]}) 13:42:30 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x900, 0x12) 13:42:30 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, 0x0) 13:42:30 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf0f027]}) 13:42:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x301200, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') pipe2(&(0x7f0000000240), 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfca3bd3eb548e10d}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x600, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x1b4, 0x11, 0x100}}, ["", ""]}, 0x193}, 0x1, 0x0, 0x0, 0x10008005}, 0x40446) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 13:42:30 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xa00, 0x12) 13:42:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf0f042]}) [ 1184.750817] binder: 24877:24880 unknown command 0 [ 1184.764789] binder: 24877:24880 ioctl c0306201 200000c0 returned -22 13:42:31 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:31 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xe803, 0x12) 13:42:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf0f045]}) 13:42:31 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x1, 0xc, 0x4, 0x70000, 0x9, {}, {0x2, 0x2, 0x1f, 0x0, 0x2, 0x0, "6f5227ef"}, 0x8, 0x3, @planes=&(0x7f0000000100)={0x2, 0x1, @fd, 0x9}, 0x40}) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x14}, 0x10) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x0) lseek(r3, 0x0, 0x4) 13:42:31 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x27f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x1000000, 0x12) 13:42:31 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = socket(0x100000000011, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) bind(r2, &(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x1abc5a92, 0x4) prctl$PR_GET_KEEPCAPS(0x7) 13:42:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf0f06e]}) 13:42:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x9000000, 0x12) 13:42:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf99800]}) 13:42:31 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x3c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="0963b7bec274c88d54e1007f0000000000000200e1c4d1f8133d626b22dd1777a4bb16bbcadc482289acd4f6d76b7f16dc3a7c9a4485cbf37b7bb77a2ab3102c0801000000fdc492002d215e7f41e9bcf96eac93b3a5d98d35410f937265274b"], 0x0, 0x0, 0x0}) 13:42:31 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/129) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x1000000]}) 13:42:31 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xa000000, 0x12) 13:42:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) prctl$PR_GET_SECCOMP(0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000005c0)={0x1, 0x0, @pic={0x80, 0xde, 0x3f, 0x80, 0x40, 0x7, 0x5, 0x0, 0x4, 0x7, 0x20, 0x1f, 0x9, 0x4, 0x73, 0x5}}) r5 = dup(r2) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000380)=""/219, &(0x7f0000000480)=0xdb) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)=0x1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r9 = dup(r8) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x1, @l2={'ib', 0x3a, 'lapb0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) r13 = accept$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c) sendto$inet6(r13, &(0x7f0000000540), 0x0, 0x44800, &(0x7f0000000580)={0xa, 0x4e22, 0x1, @rand_addr="658488502325618c8b80867e8f9d86a8", 0x2}, 0x1c) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x72960000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r14, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x8, 0x12, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000008}, 0x11) 13:42:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x1009800]}) 13:42:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x10000000, 0x12) [ 1185.941763] binder: 24964:24970 ioctl 400454dc 20000200 returned -22 13:42:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) [ 1186.028447] binder: 24964:24970 ioctl 400454dc 20000200 returned -22 13:42:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x100f000]}) 13:42:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xe8030000, 0x12) 13:42:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='\x00\b\x01T\xbcp\x00\x00\x02\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x1f99800]}) 13:42:32 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x408, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x100000000000000, 0x12) 13:42:32 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000351062, 0x189) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x40}, 0xf) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x800) bind$packet(r3, &(0x7f0000000240)={0x11, 0x11, r7, 0x1, 0xb0, 0x6, @random="0705d9daa27b"}, 0x14) 13:42:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x5, 0x0, "c6d77ab1f742bf3c728454f35c37d241190e6e37242fe7e53e16a6ef4cbf81c9b690421d093762c31e9206f6b089e5c971bb83405f9e18584cb33565ce7bced348750adca87a2219ca24b838ced36bed"}, 0xd8) 13:42:32 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:42:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x900000000000000, 0x12) 13:42:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x2000000]}) 13:42:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xa00000000000000, 0x12) 13:42:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x2f99800]}) 13:42:33 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x1000000000000000, 0x12) 13:42:33 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 13:42:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:33 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x71b2521340863ee0, r2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x3f99800]}) 13:42:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xe803000000000000, 0x12) 13:42:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:33 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:33 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:42:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x20000092) 13:42:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffef2, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}, @acquire_done], 0x0, 0x0, 0x0}) 13:42:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x4f99800]}) 13:42:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:42:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000200)=0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x10000) sendmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r4}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800001, 0x50, r0, 0xce3cf000) write$cgroup_int(r0, &(0x7f0000000080), 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) 13:42:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x5f99800]}) 13:42:34 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000001c0)=""/190) lseek(r3, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x1, 0x3, 0x3, 0x3}}, 0x26) 13:42:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:34 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x584, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1187.941877] audit: type=1400 audit(1577972554.169:191): avc: denied { map } for pid=25093 comm="syz-executor.2" path="/proc/25093/oom_score_adj" dev="proc" ino=191379 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 13:42:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @rand_addr=0x5}, @in6={0xa, 0x4e21, 0x5b, @rand_addr="9b599299d640a3ea67ed235f29c3ffd8", 0x1ff}, @in6={0xa, 0x4e24, 0x67e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @remote}], 0x98) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/216) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000000)={0x63, 0x0, 0x3009, 0x1, 0x2, {0x6f2, 0xa96}}) 13:42:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20202, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0xd5d, 0x2}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="003d94b9", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:42:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x6f99800]}) 13:42:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x400}, 0x4) [ 1188.218398] binder: 25118:25122 unknown command -1181467392 [ 1188.241012] binder: 25118:25122 ioctl c0306201 200000c0 returned -22 13:42:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x7f99800]}) 13:42:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x8f99800]}) 13:42:35 executing program 1: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r4 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={r6, 0x6b, "9604d8e763b1e080daecad05f9523856c4b9d8f7f92943f42940e7d0eacd635e2fa39044ecf397fba2b8283587a5094b1f291301e0f7f9551f58df89603a49380f06011458ba652f311c9b9dd8666e02fd60db944db1194370dec44282126be67c6325039d6442110fe3c1"}, &(0x7f0000000280)=0x73) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x5, 0x5, 0x4, 0x10, 0x62, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x0, 0x0, 0xda, "23d2e6f7"}, 0xffffffff, 0x1, @userptr=0xbcc, 0x2, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000100)=""/35) r8 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03918b0b5c7007c92c1145", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:42:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:35 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x20, 0x171) 13:42:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xaf99800]}) 13:42:35 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x600, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:35 executing program 0: r0 = gettid() tkill(r0, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r3 = gettid() tkill(r3, 0x3c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYRES64=r4], 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r6 = epoll_create1(0x0) r7 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1a000, r7, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r8 = memfd_create(&(0x7f0000000180)='secur.welinu\t\x00', 0x0) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x6f, 0x0, 0x5, 0xb, 0x1000}) lseek(r8, 0x0, 0x4) 13:42:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x8, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') 13:42:35 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) [ 1188.982601] binder: 25152:25159 unknown command 193696003 [ 1188.996255] binder: 25152:25159 ioctl c0306201 200000c0 returned -22 13:42:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x27f0f000]}) 13:42:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) [ 1189.047523] binder: 25152:25167 unknown command 193696003 [ 1189.059974] binder: 25152:25167 ioctl c0306201 200000c0 returned -22 13:42:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x240400, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0xffffff24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51902d4a1e8e884b}, [@IFLA_IFNAME={0x14, 0x3, '\x84et\xff\x00\x00\x00o_bridge\x00'}, @IFLA_LINKINFO={0xffffffffffffff83, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_NUM_PEER_NOTIF={0x0, 0x10, 0x7}]}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000450}, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0}) 13:42:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x42f0f000]}) 13:42:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:42:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0xffffffffffffffbb) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/28, 0x1c, 0x80000043, 0x0, 0x0) geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSACCEPT(r0, 0x89e3) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r6 = getegid() r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) chown(&(0x7f0000000140)='./file0\x00', r5, r6) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x4000, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1f}}], [{@subj_type={'subj_type', 0x3d, 'oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00'}}, {@fsname={'fsname', 0x3d, 'GPLvmnet0mime_typemd5sumlo:-,.'}}]}}) 13:42:35 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="096310c01527ea9d893400"/30], 0x0, 0x0, 0x0}) [ 1189.352533] binder: 25184:25189 unknown command 808464432 [ 1189.378056] binder: 25184:25189 ioctl c0306201 200000c0 returned -22 13:42:35 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x700, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x45f0f000]}) 13:42:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r3, &(0x7f0000000080)=0x6, 0x12) 13:42:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x6ef0f000]}) 13:42:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:36 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x202080, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000640)='gre0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$fb(r2, &(0x7f0000000240)="6425cc8f31cdcc542a05198e154a1d65039c6c76f8edbb25632c0aca3882f6f89f83201c3efb1005f93224a8338e06cc5715a7e691d930e91ab34446c8b933d3d66cc983ef9cd17cf17ba2ab17fd2d07ae267b95603d23d948b0d3f4fd6a9d5d9c1e94ec5086819534bebf0c6daeeb92597121af0803c55692beaff25746a89a158f5a22c0081b1b95907a3b48c62fb2ced42f42fb25d79615b179e84b80e02b3348b6007918c2722f375e6cde29f79d05082e5ed713abe53155d497b94abc77395e555ce402a570dcf23f984e8a66b8c7fa8308ddc0da", 0xd7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='\xca\xc1N\b\x00\x00\x00\x03\x00\b\x00', 0xa4202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f00000001c0)) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000016c0)={0x101, &(0x7f00000006c0)="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"}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xd81f, 0x0, 0x2008, 0x200, 0x102}, &(0x7f0000000400)=0xfffffffffffffe5b) write$P9_ROPEN(r2, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x41c}}, 0x18) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000200)) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)="e4e61249", 0x4}], 0x1, 0xffffffffffffff2f) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="82a60381000a001ff904008a7dbd9d9b0006000001c3af04"], &(0x7f0000000480)=0x1c) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x7bc778bf6da50b30, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000540)={@remote, @local, @local, 0xfffffffc, 0xffff, 0x68a7, 0x180, 0x2, 0x40000002, r3}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) dup2(r10, r11) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000680)=0xffffffffffffffc1, 0x29606338) fcntl$setpipe(r4, 0x407, 0x3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09631040000000000000000000000000000000000e7f588028d954712bc44e6be24db4ad435321739f705d6851f49d2aa4c5c03a1ab505c2ab84722c81007312a33a97e7f51e841f0f6efe5d81853a8d5e1f2a4dbb8399e7beb5fdb584de99d331b4f4299053e2a3220d42dbe065da9f2ab9b5469d8252cc55f8bfec4e"], 0x0, 0x0, 0x0}) 13:42:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') fstat(r0, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:36 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xe7ffffff]}) 13:42:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x1e) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getpeername$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r5, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=""/20, 0x14, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="0a32c31d70eead42e6a57969d46274b65aefe486b1527c6af932c420dee46c6bbf1c42905262205a6332ef259902f4c168953d38394480cf8ea7b9a798c18c429163c46b00e631fae5140b2d05b76ee63239225b3f14d967470634d2f3c7ad6f6ee94443d9e760199901ec4f4203e8f2f2df44e21e3cad89cf8c7dec083ee2b33e21e1bfe7a154336a64afa4f529", @ANYRES32=r2, @ANYBLOB="0000000000000000850000004400000095000000000000002053c0ff08000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1f, &(0x7f00000000c0)=""/31, 0x41000, 0x0, [], r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xe, 0x7, 0x1}, 0x10, r8, r10}, 0x78) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xfdfdffff]}) 13:42:36 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x16d, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x50d, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x552, 0x14ce}, 0x218c8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) execve(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)=[&(0x7f0000000100)='[eth1]@vboxnet0,}proc\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000180)='secur.welinu\t\x00', &(0x7f00000001c0)='$]trustedsecuritybdev%\x00'], &(0x7f0000000380)=[&(0x7f0000000500)='secur.welinu\t\x00', &(0x7f0000000280)='secur.welinu\t\x00', &(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='(*lo.lo\x00']) r1 = mq_open(&(0x7f0000000140)='securitysystem\x00', 0x1, 0x1, &(0x7f0000000200)={0x116, 0x3f, 0x20, 0x1ff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x836be000) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01130000000000000000040000000800090002000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80440004}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x8, 0x4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r6 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) 13:42:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x800) r4 = socket(0x0, 0xa, 0xd0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x1, 0xa5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:36 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x1000000000000017, 0xd8166422d4eabb52, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, 0x0, 0x0, 0x8) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000380)={0x9c0000, 0x10000, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa10902, 0x8, [], @p_u8=&(0x7f0000000140)=0x1}}) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000003c0)={0x4, 0x2}) tkill(r1, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) write$cgroup_pid(r6, &(0x7f0000000040)=r7, 0x12) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000400)={0xffff0001, 'syz0\x00'}) r8 = syz_open_procfs(r1, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r8, &(0x7f0000000080), 0x12) 13:42:36 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xfffffdfd]}) 13:42:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xffffffe7]}) 13:42:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) shutdown(r1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000540)) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000019420bfd8cc5555400000000004eab3f5e2deba4e4dc729c289b5cf2befe7f713988c57353ce1d317ba4c6ccaaa299e03cfcf731e7"], 0x10}}], 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd64) read$rfkill(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)={0xff, 0x18, [0x9, 0xfffffffc, 0x800, 0x4, 0x200, 0xc001]}) r10 = socket$netlink(0x10, 0x3, 0x9) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) sendto(r10, &(0x7f0000000380)="ffa4ba13db425fe174d67621f66405a1df56602492580d6da249b39c4f6252201ae0775b6d2b53fc304c3ac38ac5d183b594cfe0b2ad03e0722ec9ae2a7406bc285bd91a5cf727b2ee6d0a1b06b282fd2079da3546c7ef0f12a295b9b0785d3f9df9f83ac055a0fdfada7ff82da1b087b7e6fca8bc4970aef4aec420611598f31c05671532d326b2340f3999dc57ed2aaa047a3d18b677c7aab25ee136b87b3f9a5244e2de9190e3", 0xa8, 0x0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x3, @mcast1, 0x745}}}, 0x80) 13:42:37 executing program 1: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:37 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:37 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x2, 0x4) lseek(r2, 0x0, 0x4) 13:42:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xffffffff]}) 13:42:37 executing program 1: r0 = semget$private(0x0, 0x0, 0x40) semop(r0, &(0x7f0000000000)=[{0x3, 0x6, 0x800}, {0x0, 0x2, 0x1800}, {0x4, 0xa0c, 0x800}, {0x1, 0x3, 0x800}], 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x2000, 0x4000}) ioctl$TCSBRKP(r2, 0x5425, 0x6) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6ad5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="09631040008000000000c54c057d000000000000"], 0x0, 0x0, 0x0}) 13:42:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:37 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x6e6, 0x27503706d58bcac8}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x2}, 0x8) 13:42:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x3c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0}) 13:42:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4100, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x202000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x350, 0x4, 0x3, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x5}, [@nested={0x1f4, 0x88, [@generic="3000bde1dd52a26b7b636b4e4a21e507d831d28dae58857be3749a00ad2fbd581e2ed57ea11b4daa3809de970f6440d2fb2b3370bbb137cdc3263cb1e443915ea0e8722235ae1bc43b1aa1033aaed688629b5dd00095bcef484a19a091983147fe3e1f53e5b897c30aab7a0cd60f4ce74ce5592a16a66e455c56f44d3c48f041f067a01cd929fbd37628a377adae532ef12770c3dafafe36bebb1d3b019a1be3887b", @typed={0x8, 0x58, @fd=r2}, @generic="2aaeebba77687f8b2b886323632fe2cf81e3bce4f948299157f8864c67612fd364adc27d8010be446c8137e5ea0cc8677cb9f6e69b843b821348e9cc6bd7711c9aed89880daf70985c01a5ebd2d4f31431a7b91183c2703cbbd0093b959548c368c80b95add452ead8f5828f943d2f443cb718ad46d269beebfc3e5a9422120ec0b258af9c4b4d70792647248bbaee49b1ff00e9c1255f50cf8f50a0e1c7b31b107a0f7e849b6a8fb573371e58769026135dfe74786e668d5e2e3c14080e8d085242497f47bb9672f62cb508c669d1025937d9cfeff8ef154c5c4f8d2b9984268e830c58bda6d616e960aba79b2e357f26a5c511f60713", @typed={0x44, 0x74, @binary="0f20bb02eb5e02665e40f8002b0623d9db94c1a12d9e6eefbc5acbce6afd998d6671b2b539d154308c17f1d3e26ed910113f7beaa2589ae764aa12f05c6ddd58"}, @typed={0x8, 0x57, @fd}]}, @typed={0x90, 0x53, @binary="1ceb0880162014ea298447c9e9f0c038894433e598f60e05316f64a2ed806a1396b7c75e4ec247ced2a43b8c0c5f24a8ebb60ba273f3fbc6328989620d2a1cd451b8e929ecb9ce3db5937fa131e97f063ca272fbcb034c15fd3df581e8af572818e83aee1b92f3763e56d0b61da34ded07a9abd8751de7a59d6c921544ab7b2c52242dfa792f031bb646ea"}, @generic="611a24c468208ba7cc9cbed5640b6ef41b76d6aca64ff4f2b5cfc71757ecc450165bf84f47dd0e07cbbfb3b38cf66da15c1575a8d5a39c4ff579436bc91c852842497798eb90d1f371e1ab48e19462d925fdac4f2fc2d6acf01d6f742cf4c7f7017b5a2bd8c63a4d7e2074200a52b570861961330ff3b7b8b2502687fe8ec484ae84b6a54e2be34603e36b0c412bc23119529082ca804dfa26e169df31e122fe3eae7f17eead485a8bae4a8c9a2227919ba6bc34a0d70e"]}, 0x350}, 0x1, 0x0, 0x0, 0x40000804}, 0x80020) 13:42:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x2]}) 13:42:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:38 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x2) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:38 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xe7]}) 13:42:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:42:38 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000380)="7d77ab911ef803c7ca1eb0c625fbbddaf359950dc766052aabcfedd58aca1fd110a1533259ebf1054fc2165d027d1cb07fe15d39a1164e754b2c3411f596217c96b55d1dbd1e8d0ab1c065682b7e160901c08bb0f111ba4adb938fb70faf840c2c6fc5e8ca4aac046ceb318d3dd282b6b38ca90531805c3759aa2c04c032b16b014130", 0x83, r2}, 0x68) r5 = dup(r4) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$cgroup_int(r5, &(0x7f0000000080)=0x5, 0x4) 13:42:38 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xe7ff]}) 13:42:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) 13:42:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) read$FUSE(r1, &(0x7f0000000200), 0x1000) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09631040aa013ffd000000000000000000f5ffffe016"], 0x0, 0x0, 0x0}) 13:42:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfdfd]}) 13:42:38 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2000000000000, 0xffffffffffffff96) 13:42:39 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xffe7]}) 13:42:39 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x1, "654803", "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"}}, 0xfffffffffffffd03) r2 = epoll_create1(0x0) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000e47000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'lo\x00', 0xffffffff}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r5 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r5, 0x0, 0x4) 13:42:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') 13:42:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x980001]}) 13:42:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000000)={0x37f2f49857a6d6f8, 0x0, [0x4, 0x20, 0x4, 0x12, 0x507c, 0x390, 0x0, 0x5]}) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1400c008}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x52804) recvfrom$inet6(r0, &(0x7f00000000c0)=""/163, 0xa3, 0x22, &(0x7f0000000180)={0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, 0x1c) 13:42:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f900]}) 13:42:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:42:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09631040000000000000000000000000000000002c1a12a32763406c9669910ab696b0d3dfef1fcc8c9addad5428a8e3e37fb6aafd7e83cd05e8f4a1930f10043e48347274551f29e32412da5ee4e8771f731af1d8cff8c21fa21286e5ae08e5b0a7f453c2ceeef13599b179bac9f1f1a5dacff9bc8474eb6fac9ef4b68641923e049f8ecda7c8df083554e64e8a16fc608187"], 0x0, 0x0, 0x0}) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f00000001c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000010000006bdb27f7e633e651c3a41fbdddfa597b00000000"], 0x10}}], 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x7, 0x8) 13:42:39 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f901]}) 13:42:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:42:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f902]}) 13:42:40 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/de=\xcf\x83\x0en\x00er#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x40100, 0x0) close(r3) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0xf9, 0x7, 0x4, 0x100, 0x5, {0x77359400}, {0x2, 0x4453b1d20b7e797, 0xb, 0x2, 0x4a, 0x7f, "b5ec88b3"}, 0x39f69963, 0x3, @fd=r2, 0x1e9c, 0x0, r4}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:40 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f903]}) [ 1196.245443] device bridge_slave_1 left promiscuous mode [ 1196.250998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.325432] device bridge_slave_0 left promiscuous mode [ 1196.330897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.477337] device hsr_slave_1 left promiscuous mode [ 1199.540300] device hsr_slave_0 left promiscuous mode [ 1199.607813] team0 (unregistering): Port device team_slave_1 removed [ 1199.619803] team0 (unregistering): Port device team_slave_0 removed [ 1199.630063] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1199.665489] device bond_slave_1 left promiscuous mode [ 1199.674631] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1199.744897] device bond_slave_0 left promiscuous mode [ 1199.785884] bond0 (unregistering): Released all slaves [ 1199.851723] IPVS: ftp: loaded support on port[0] = 21 [ 1199.918872] chnl_net:caif_netlink_parms(): no params data found [ 1199.958830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.965558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.972613] device bridge_slave_0 entered promiscuous mode [ 1199.980696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.987299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.994822] device bridge_slave_1 entered promiscuous mode [ 1200.010929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1200.020471] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1200.037448] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1200.044972] team0: Port device team_slave_0 added [ 1200.050943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1200.058511] team0: Port device team_slave_1 added [ 1200.094983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1200.102830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1200.188703] device hsr_slave_0 entered promiscuous mode [ 1200.235642] device hsr_slave_1 entered promiscuous mode [ 1200.295382] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1200.302639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1200.332768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.339191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.345926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.352308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.421098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.434267] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1200.453137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1200.468616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.478616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.493935] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1200.503286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.521496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1200.532669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.539084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.574132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1200.582909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.589320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.603829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1200.628242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1200.642114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1200.650452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1200.668497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1200.685832] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1200.691893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1200.706517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1200.731311] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1200.749642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1200.762736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1200.781151] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:47 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f0000000100)='secur.welinu\t\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:47 executing program 1: ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000100)={0x1}, 0x8) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 13:42:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f904]}) 13:42:47 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000000)) 13:42:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f905]}) 13:42:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="93a93e24967c5b9a4bf03103630840", @ANYRES64=0x0, @ANYBLOB="09631040ffffffeb000000000001000000000000"], 0x0, 0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:getty_log_t:s0\x00', 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ptrace$getregs(0xc, 0x0, 0x1, &(0x7f0000000200)=""/22) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)="bf889a536b5631741481a2468d694a9cc799ee3d", 0x14}, {&(0x7f0000000280)="7d41a7f1c1fef5768ba217014358e21dd97aec025b66e618e67308d9fd46af0f150a11ca26d653d590137dcbab2c298cbb80aa9ccd7df305c5af14e1f0d966dc12f3c94f69029da496313de9cd3d842f64bec1fdaba7affdf65b2c1065", 0x5d}, {&(0x7f0000000300)="242caa9c5c5a4aca4f876610ba681fa97a085cc4f47aa0ff3ce01a6589f0bd468e223a2a8f71a45e46dade8fac19ed4f7aa9376fb8830cff861bcfa9fa4c0e200bfac91cf0022635", 0x48}, {&(0x7f0000000380)="649e85f63aa5ca4f8780d5204665e29d910ef4e513e0550c4e5c0411faa0596b0dd2ad610511ac818f60e8f89c220428d7141266b939fe9ee8bed6c0d4", 0x3d}, {&(0x7f00000003c0)="1b7d211e7a894c760b3748392b79d3aaef95b0fad9be0c74e4a499071ba22d1d5902d558c1b948ca558c0d1d463ee9e5ef640fdf2d17ff22b1efdc468fd33478ef8a33d9ae22ee5d80956cd818a4fb5a517f2e84", 0x54}, {&(0x7f0000000440)="9ac694f012be1eb833d2398824a26cfc950a2602ac15df010fef53d65645c801e422135b28c0f0c5346492", 0x2b}, {&(0x7f0000000480)="c53bb9975dd8dc5788feeefddb04bc4dd0e8bec0bff05c68f9333477db3ffb544b9a61d5b6b8d08c7a4e0ab00f9ae392a3f9ecf09991a47fd4f3a2cc93949e36b6e401647968373c50c9f59b4a526a3a12170ad226aa0c5a0459c4bc8d5d4de9b486dd0bdd01625bda5e5a0ee3395a97456d39424e98bc7f1eae06d9cfc733183fd0189c91143d29516a138b548157b26d4a54aa4340e2aa9e4981af03e3f4490fa73a55f273832d8cad816cbaca5e8f4e7092ef81180253603814722cfd125e3900eb0c9d31514847dfc44b099141abe01958b3b3bc66ecd82d96adbdd55ff93e08cde153fd3a", 0xe7}], 0x7}}, {{&(0x7f0000000600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000640)="30c0b4033f88f9730e34f99f31aa429c67f1d606e06db0ae6c6a06c99a29059078cd7b848c3eb2f522170d142451421b0e4715eacbd8545c66bdb737d7ee93c9485065f79797498f9ada0004081017dcc26360805dbec33386c4b7dab00469fce5426edbff4cc7aa483a1ebe4eac4aa4dc0befb06c7c8160a836b8ed0627d188d4407dddf1c55b98439aee580125dee83e1308ed099fb74ac0318eceb2114bbcfc7dbcd2d47f6487488d3bda90a3e9f6d49f1cf5975a046d2486f8ba531a1bd06f3ccffff3d87ab524578910298592b64b5cd8e9aae35d0661c89cfb426d280ccaf7572490fbede8dfc0821d2b5db8af1e06b3ed", 0xf4}, {&(0x7f0000000740)="19dcdca411a94683bc9feaaf697a632662b7219de6676226620b30e266f31cce894643ace8296584f0be554f579b4c45c95368c45848c8ae2f17a36742187c507114db4bdf4eac75e4880adc1f10cd846a3b67cca68bae45d89149", 0x5b}], 0x2, &(0x7f0000000800)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbacf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0xa8}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000900)="0b632bcd2d6d76836ada6c373dbaeb95c3159e23146c6671d6f49a89272a18057c85cf14878ef97f8cbe8ba252f767edf1d2ab5b7c27d398bc604783e1069e8d75b315dd75124e8b95f9d4d35e62e0f0b9aaf51c75747bbf208758cbdc274fc4c4db79154c0168d1de9786284131210e5201bfc54009dfe5fe88a58a5d10cc74a5130a0f7c9feb926579c3f03510126474859c0c1cef04246d17d12607f7f2bb", 0xa0}, {&(0x7f00000009c0)="d8ae020a58b232a181fe72151e28a76d1f71499516b7fff7cc82bd0a499217c99cf733282c46bc22326a1feec1a27598464d740f0466ce3e79ff4010d931c8f07904fd658ee50885c24e4cddbb45398349528c6e4de5cb47b19093e7dca9b6e70561389dbc81b3cc912e1858906a53b491c5c404c01304b56c3b45cb03728678ffa3712b2aa55db85264d72f810161c73ef086dbc029d5f9aa61a0a3b292cdde9b0ce9a455f865960070e82e6f1549f392ba67d8a924d994c22c5f88bfd8f8bdfe097e143309e1b8e69a8e389a80c15836", 0xd1}, {&(0x7f0000000ac0)="cc582725c102d2d50a0526a0dbbbd763e353230f9d45b12be7441550d90f7078654889d04c005e95a41ac0e275f5c6d2612bcfdf6d214a651ac7712828fd3efef74092f3249e2acfcecd47ad210ce3c3f12f94dc9cde2b048e063101790672964e8ffddec018d2811524aea57bad4091de8dad11ea6229a694caf01e3fd09f49ab", 0x81}], 0x3, &(0x7f0000000bc0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x83, 0x11, "6b09bfbef9a79390df405cc131c0c4"}, @end]}}}], 0x28}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000c40)="e918cfb7c4ca9365c4d1d2db2c02148495f681a7c74561e26b061a8cef38cf2fc86d8b7684f0cd516840fb2e4c5282444b60740ef263d35cd6696d8939d24117210031eb42849010d27d17f54cd4761bd16b70f0ea27a46be011b393b41f4fd5e0c4e0a00d8be3c977b96abfc6dcb1811d038f7020439aa6f0a4e33ea09a5af2c6eb5dfc0d5f1c5d2fafe04f4e4e10dd57ea7085f2e9839bbc95700e", 0x9c}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="749041cad2e18c54be3279899a0442e5859eb65a3d88289beb2c0d9d705865d25b26fc9122dac6d3886669f30d7f3e6a038367913009dcc98a1d20ef7053a172a911db64a8dcc1ca878a77dd5e1f82fbddd9f1037f24131a2c651c07c956b59086f18a89541bffa0bffe5b5c00b55674bb5930faa266c6d02b7ebd48f17de8080c3f8ab6856fd10390b2791f0c3cd7b9fb85ae7c3e30051b996bd459558f56d164c43b8475ad8b519f804f081b01f74ffee3880a1ca5ec878d9db1ef0f35d96013714c2aa9230489000b2ebd478a0adea845db", 0xd3}], 0x3, &(0x7f0000001e40)=[@ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x48, 0x4, 0x0, 0x1, [{[@initdev={0xac, 0x1e, 0x1, 0x0}]}, {[@loopback], 0x9}, {[@loopback], 0x3}, {[@dev={0xac, 0x14, 0x14, 0x21}], 0x3f}, {[], 0x3}, {[@empty], 0x81}, {[@empty], 0x4}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0xc6}, {[@rand_addr=0x401]}]}, @lsrr={0x83, 0x7, 0x6, [@loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0x78}}, {{&(0x7f0000001ec0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001f00)="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", 0xfb}, {&(0x7f0000002000)="73d5aa5fdd52f4f19b1fc2fab2734cceec13b1caea4d90d069606ce8e0fd28d2b7b27ad00aa9168b68a1efba0a39d06f4f0a6d69979aac18410b5a333f2834bce2ece0beca70873df1b166aa1bc57f4d5f6f82ebc9806ea47ac3e7923c1b9e917db6ab5ed538", 0x66}, {&(0x7f0000002080)="b4e316b971f0521e7f32795f7654c9f85f3253763f33ee600f6e81759ae55bfc3941e014d49a0286de59fd887fb2c986f1eda32e88c6a9edda4e70adeeb19302303d21c83811d6512d5def25e94777b28290ace51b36f6c8d543192b6277ab3f26f7e3ec4c5c2267c6fe463423ded922028117f27efe7f04d6911fe744234a2f3090c210614b7c8f7ceba3e15d799265674f15f2f76d5eebb5a9a9be2ecbf89532f7c53d9c0a8a350370ec54f4bca870472900774dd726c656f79c9c49210993f26ec47ae9f9504973ad9eeb133648516683736b06e1710d6e80b34c286a2c6e3ea97745d227782577f750", 0xeb}, {&(0x7f0000002180)="738663c9d5b3042df548ce1c4853feffa103c4338c553c782a0fbc9d7bad8d19b256b2b29da8bebd7759f6e6c348af2d42033b2e06e5c1780ef3ba300247e7040c4ac9f6e7dd655530936f28b657", 0x4e}], 0x4}}], 0x5, 0x94afd163ed26c9f6) 13:42:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:47 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r1, &(0x7f0000000000)=0x4, 0x250) 13:42:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f906]}) [ 1201.248462] binder: 25512:25517 unknown command 608086419 [ 1201.295613] binder: 25512:25517 ioctl c0306201 200000c0 returned -22 [ 1201.318389] audit: type=1400 audit(1577972567.549:192): avc: denied { associate } for pid=25512 comm="syz-executor.1" name="binder1" dev="devtmpfs" ino=18785 scontext=system_u:object_r:getty_log_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 13:42:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:47 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) splice(r2, &(0x7f0000000040)=0xfff, r0, &(0x7f0000000140)=0x1e, 0x3dfe, 0x4) munlockall() getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$cgroup_int(r2, &(0x7f0000000080)=0x6, 0x12) [ 1201.359035] binder: 25512:25517 unknown command 608086419 [ 1201.377953] binder: 25512:25517 ioctl c0306201 200000c0 returned -22 13:42:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f907]}) 13:42:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x20}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:48 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1a7e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xff7f, 0x84}, @window={0x3, 0x1ff, 0x3ff}, @window={0x3, 0x2, 0x1ff}, @mss={0x2, 0xfffffff7}, @timestamp, @timestamp, @window={0x3, 0x351, 0x3}, @mss={0x2, 0x91b}, @window={0x3, 0x1ff, 0x2}], 0x9) write$cgroup_int(r0, &(0x7f0000000080), 0x294) 13:42:48 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x3, 0x3, 0x7}) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) 13:42:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:42:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f908]}) 13:42:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x3e3, &(0x7f00000001c0)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}, &(0x7f00000001c0)}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xb0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f630c4000000000000000000000000012634840020000000000000000000000000000000000000010000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="8561646600000000030000000000000002000000000000001e00000000000000852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/52], @ANYBLOB="340000000000000002000000000000001900000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="bd5fbd018f2646e200634040060000000000000000000000000000000000000031000000000000000000000000000000000000008303000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="85616466000000000300000000000000a4ad252041093c3d45bb00000000000000002b0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0163404002000000000000000000000000000000000000001000000000000000000000000bfeffffffffffff1800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/168], @ANYBLOB="400000000000000001000000000000001b000000000000008561646600000000070000000000000000000000000000003200000000000000852a747000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/241], @ANYBLOB="f10000000000000002000000000000000100000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000002800000000000000b6fdffffffffffff"], @ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0}) 13:42:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x4d78, 0xfff, 0x8dd5, 0x400}, 0x8) r3 = dup3(r0, 0xffffffffffffffff, 0x40000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000380)={{0x6000, 0x100000, 0x0, 0xc2, 0xa3, 0x20, 0x9, 0x7, 0x93, 0x20, 0x0, 0x81}, {0xf000, 0x100000, 0x3, 0x1, 0x3, 0x0, 0x1, 0x1f, 0x8, 0xcc, 0x1, 0xcc}, {0x1000, 0x5000, 0xb, 0x4, 0x7, 0x5, 0x4, 0x9d, 0x80, 0x1, 0x5, 0x1f}, {0x2000, 0x2, 0xd, 0x1f, 0x6, 0xfe, 0x1f, 0x6, 0xa0, 0x1, 0x64, 0x1}, {0x4000, 0x3000, 0x3, 0x20, 0xf9, 0x3, 0x70, 0x0, 0x7f, 0x4, 0x0, 0x40}, {0x0, 0x6000, 0xe, 0x70, 0x45, 0x1f, 0x1, 0x0, 0x80, 0x7f, 0x81, 0x80}, {0x2000, 0x4, 0x8, 0x8c, 0x1, 0x8, 0x8, 0x58, 0x1f, 0x5, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x7, 0x72, 0x2, 0x8, 0x8, 0x9, 0x0, 0x1f}, {0x2000, 0x20000}, {0x102000, 0x2}, 0x2, 0x0, 0xd000, 0x80848, 0xf, 0x800, 0x10000, [0x2, 0xa1e1, 0xffffffffffffaf33, 0x3780cdbf]}) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x98f90a]}) [ 1202.164759] could not allocate digest TFM handle 13:42:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000640)=0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc0, 0x0, &(0x7f0000000440)=[@acquire_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x1, 0x2e}, @fda={0x66646185, 0x7, 0x1, 0x15}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x1, 0x2, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/145, 0x91, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @register_looper, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x2}], 0xee, 0x0, &(0x7f0000000500)="b039181b13c04e33d8033b2c4de56a1cc012b718c0beb1438a04be4d9702ac96d5144939cda782f5287f2edb5c07fb9a04f291b8eaa04c5dd348fed060e75b2ce0b5017fedd8eeabf21bc22d3ffa82d29d12d14844c1fefc718a7e7ff5cb3926083242fbcc0c46ff087f7abb657a815d5f35d4ed61b8055857bff5bd0d42ae20490e66de4d7d845de97b0f5df666f792e52b83105f5d04f16a022fa3de3104446c384b2667e37b39b705123f00fce8ced76f4188c7f48d5c13f1a792e86f340bb840855b0ae239ea2dff3c922584218867780bdacf7f944cc4e85f20aa3375bc391a1380797f60685e5b8deaaaa4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x90, 0x0, &(0x7f0000000200)=[@register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000100)={0x0, 0x18, 0x178}}, 0x2000}, @increfs_done={0x40106308, 0x3}, @register_looper, @decrefs, @acquire_done={0x40106309, 0x1}, @exit_looper, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 13:42:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{}, 0x5, 0x4, 0x800}) r1 = gettid() tkill(r1, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$cont(0x18, r1, 0x800, 0x5) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x81, 0x8, 0x2, 0x6, 0x0, 0x172, 0x2000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x1000}, 0x2, 0x800, 0x10000, 0x9, 0xffffffffffffff38, 0x33b7, 0x3}, r1, 0x10, r3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) accept4$ax25(r5, &(0x7f0000000140)={{0x3, @default}, [@netrom, @netrom, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000380)=0x48, 0x80000) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:48 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1b5e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf00001]}) 13:42:49 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x9f0000, 0x3, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1799692, 0xffffffff, [], @p_u16=&(0x7f0000000140)=0xfff}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0), 0xffffffffffffff81, 0x0, 0x0}) 13:42:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x1, 0xb) 13:42:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf0f027]}) 13:42:49 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1b6e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf0f042]}) 13:42:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0xe0000, 0x1, 0x8, 0x9, 0x81, 0x5, 0x7}) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f00000000c0)) 13:42:49 executing program 0: r0 = gettid() tkill(r0, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r3 = gettid() tkill(r3, 0x3c) r4 = gettid() tkill(r4, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r9 = gettid() tkill(r9, 0x3c) r10 = gettid() tkill(r10, 0x3c) r11 = gettid() tkill(r11, 0x3c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYRESOCT=r10, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0], @ANYRES32, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESDEC=r4, @ANYBLOB="bdf2f78f6fa79f17df7fd8eaf68b5a43f813821a68cb4eff480358bb9fddaa24a44376aec4a7f04298a18d610df14e5e36122f9f5927f3da7495a47417429ace75cf9e13c3ba3f689dfcc824a29520b9463d7bce9b7a6fa7cab735b16b49084f96b7d8b5680b8cfdafae19a2615b66fc0dc30e40be7a0ee6a8dba8d25ea5b6d263c432494d57b798a4", @ANYBLOB="45f8498d03c3964c3d7e26950ae95a6da872b2ae094e2fac8649ea02777688", @ANYRES64=r1, @ANYPTR]]], @ANYPTR64, @ANYRES64], 0xff71) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r12 = epoll_create1(0x0) r13 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1a000, r13, &(0x7f0000e47000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$FUSE_INIT(r15, &(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x7, 0x2110900, 0x8af, 0x400, 0x80, 0x6}}, 0x50) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r16 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r16, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r16, 0x0, 0x2) epoll_create(0x1) 13:42:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:49 executing program 1: syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000400)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'eyz', 0x0}, 0x0, 0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3694ad19fc0100efd42df97fd1df115731d6753ff551d29989b100000000000000000001adc48c84612b707792f7b856f5fdd0916e1a96f9ea7ff437289a13003928ede8a966c84f25d1589ba965f3ccb290a05de1e8bf34bd302ab906a0fba912c6b86eba7e66d469e2b2c8cea52de1afb371dae3dad25495e4e7474d1c1692100fa19dbfaf4a1ec283cd6519772e2de543784ef84cdcce9f11dedb46783a12de37820714ca28e9499f00a1bd5b2d9602e47f9f34bfad2a8fc5baf22ecac73bdafb9b6e332323040d7db402d77f617f6a433d0a9edab1862524c2e52fbf0a874614b0dcf6776fa0d5bf5570aa26f8d96c4dd00d0b7845dd778934e09891a3e6c02d2d608fc8802de2fa9e34c296d14d4100f4919803db15880e4c16bcff1bdfd49b83ae94131a28a6cea364d9bb6aafe8b7fbc02e56", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000400080005000100000008000600000000000800070097f03300f40a8f2ac0c27c5ba05fb4ecbe9555cf44b6498b947efcd24e214756c2a0db4e7c7aa1aea8ea7924472b9baa53d5b01bb340092e8e33043b099c063ea30d208489cc4b738de94f0bb6daf934de4d66729868393ae511a2b51de66cc48b7f88af389e65a69d716c009df75a8de2b793e48728bdd50bd9a50b08535193a68d13d0fea19b93a2985771b83e750976e660d288ee713505c85e226bb831c38b749308b1aef68fff525601ceb93fcc1e95bf1eccd4c580d3ff7694ae10f68d8f80dbc7ca22750482"], 0x9a}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0397f2f0680d109a8d", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf250300000010000400eb58019c0500000001800000"], 0x24}, 0x1, 0x0, 0x0, 0xc0814c4}, 0x20000000) r4 = dup(r1) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000340)=""/174) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x801, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x286, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}], @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r7}) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f00000000c0), 0x4) 13:42:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf0f045]}) 13:42:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x6, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC], @ANYRESDEC], 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$snddsp(r5, &(0x7f00000001c0)="eabb5680303aefdb44ec4f1eb531afd1af604a40b639bae4f27059e7df831d6a6e619cef05ed4bdfd697a5edbffe7d15b107fb4669e4e6491ce580dc9651f9c7743b9403271cdae7fb59721a6db61e40e7b477a659c7a56bc561175d62f36ff3980883f87ba7e58dca084abc25ff49e6cd303a0343cd11245fcd23bc52e2929ba549ad5ff75a7c9c79ea", 0x8a) lseek(r3, 0x0, 0x4) 13:42:49 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x324) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000a80)={@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, 0x40fc7559, 0xf4, 0x4, 0x200, 0x9, 0x80000, r1}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40410c1) [ 1203.428412] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0xba, &(0x7f00000000c0)="f4749a756f39e3b78bafb06a1612ab89e4419a5855a08364a29c8d8239167f727e7ac9fb1bb998cb9025635976d21f3bfece4b38ecda7d8171cf1ec4cfa2aeed5f4032db22c9aee4af70ca09a1af55b2b74fb2994c96a13b70a8474a4016d93c53b01d26e0e306bb59c7f8d66f60c4def5c6588d12c9634116fd12a30e23b63fc99efd418ae326adcf68f023786137a4ea9a5921a570d3428d05f85ac65d9bfe957d19a4fa9aef906fe43249d40f1bfc8b6da9b694ef72ef3b75", 0x5e, 0x0, &(0x7f0000000380)="b4362a7c483c4fc34c02765dd33d677ff814f3dd86b25d4d4cf676b87d658995d65b3f269ed2f793e31fe8904306c3aad0f88add2989b7efd9e4451e3ae5c4cbc9323ca2d200c9e35db4c05507a630a6907394adeef8c114ab940d39e336"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x20, 0x2) 13:42:49 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c26, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf0f06e]}) 13:42:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xf99800]}) 13:42:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000000]}) [ 1204.057569] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1204.097603] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) connect$netlink(r2, &(0x7f0000000300)=@unspec, 0xc) 13:42:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1009800]}) 13:42:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/204) 13:42:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x2}, 0x7, 0x6, &(0x7f0000000200)="09ab513c03cf5cc43eedcc4d947b69c7a11c17ef4d20e34c4def4de3cd2aaebe7bc1b77baaf3ec5b3785f845c694de5c88a4d26f28db8d833d7fdd7fa3157aecbfde6e79e93057ebdca59f787d27b7024f6cfb76664861019543445fd9615289710b2d6a5a632c10a584c25ed5be5c8d71352a71df206d0048667b6a5abbc602ba455d5ac0e92393bb54f938a7351d3c2dcfdc654602ed81a31f5ab37ebc034fb51d8728db109a03dabdecd84eccbda38d5b60d64f2552af752ee6b2f87dac86e4ea018c295b6b30951c553d7526d5c9e009c1c166c3fec37735a372737cc65c", 0xe0, 0x0, 0x3ff, 0x4a, 0xfffff66e, 0x40, &(0x7f0000000100)="be79b0140eab0b3f7158ebb15a27fd0d11175049242a32ef7e50e84067e05ea0994225f1ff96e7b0cea2b178bb2b8ce0ec56264c2351a50a8d9391882b95bf7c5e939fbb226d692ea3a560a48ff3f642a369ecf4a9c65c945da45cabc6", [{0x7ff, 0x7, 0x5}, {0x1, 0xffff, 0x8}, {0x1, 0x2, 0x7c}, {0x8, 0xa01, 0x6735}, {0x4, 0x0, 0x401}, {0xff, 0x7ff}, {0x0, 0x7fff, 0x165f}, {0xffffffff, 0x8, 0x5}, {0x40, 0x3, 0x20}, {0x7, 0x0, 0x7}, {0x0, 0xfb95, 0x9}, {0x5, 0x7, 0xfffffff9}, {0x81, 0x100, 0xffffffff}, {0x7ff, 0xbd212000, 0x68d}, {0x101, 0x5, 0x9}, {0xfff, 0x0, 0x3}, {0x7, 0x26e}, {0x800, 0x4, 0x5}, {0x0, 0xfffffffb, 0x80000000}, {0x7fffffff, 0x1f, 0x100}, {0x1, 0x4, 0x9}, {0x6, 0x3, 0x4}, {0x20000000, 0xfffffff8, 0x27}, {0x8, 0x0, 0x93ff}, {0x20, 0x5, 0x6}, {0x9, 0xdf4, 0x5}, {0x3, 0x8d83, 0x2}, {0x215a, 0x0, 0x6}, {0x1, 0x7fffffff, 0x1ff}, {0x0, 0xffff, 0x1}, {0x4, 0x2, 0xfc88}, {0x3, 0x5, 0x1}, {0x7, 0x6, 0x8}, {0xfff, 0x10000, 0x5}, {0x7, 0x6, 0x3}, {0x7, 0x9, 0xffffffff}, {0xe04, 0x0, 0x8fc}, {0x7, 0x21, 0x3f}, {0x9, 0xffff0001, 0xfffffffa}, {0x6, 0x7, 0x1}, {0xff, 0x4, 0x5}, {0x0, 0x4, 0x1ff}, {0x3, 0x7fff, 0x3f}, {0x4, 0x4, 0xff}, {0x1, 0x296, 0xff}, {0x1, 0x2, 0x4}, {0x9, 0x8, 0x5}, {0x5, 0x5, 0xb3}, {0x80000000, 0x0, 0xfffffff9}, {0x200, 0x3f, 0x9}, {0xcf, 0x5, 0x5}, {0x5, 0xffffff81, 0x8}, {0x101, 0x2, 0xffffffff}, {0x8000, 0x900, 0xb}, {0x71, 0x1000, 0x3}, {0x3, 0xb9e, 0x10f}, {0x6, 0x6, 0x38000000}, {0xfffffff7, 0x80000000, 0x1}, {0x6, 0x8, 0x7}, {0x8}, {0x64, 0x400, 0x3}, {0x8000, 0x2, 0x8001}, {0x6, 0x2, 0x9}, {0x5, 0x9, 0x9a7}, {0x0, 0x7df5, 0x3}, {0x5, 0x6}, {0x203, 0x3120, 0x8}, {0x93, 0x4, 0x3}, {0x7, 0x40, 0x6959}, {0x5, 0x3, 0x8}, {0x9, 0x8}, {0x735, 0x1ff, 0x9}, {0x6, 0x6, 0x3ff}, {0x100, 0x1f, 0x4}]}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x200) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:50 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c5e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:50 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) io_setup(0x200, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x100, 0x4, r3, 0x0, &(0x7f0000000240)={0x980922, 0x5, [], @p_u32=&(0x7f0000000200)=0x5}}) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x81, 0xaa, 0x0, 0xff, 0x0, 0xf581, 0x4002, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x82ea8b486e2bdae8, 0x0, 0x6, 0x4, 0x8, 0x1f7b, 0x3}, r4, 0x9, 0xffffffffffffffff, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x1, "f6fc93"}, 0x6) r5 = epoll_create1(0x100000) r6 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1a000, r6, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r7 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r7, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r7, 0x0, 0x4) 13:42:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x100f000]}) 13:42:50 executing program 1: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x6, &(0x7f0000000680)=[{&(0x7f0000000200)="2f5ffc5fe702620d80f5692d70a9c6191d0976f176b7bf01ef7f17d888a6de02f8b81e830f7b808810aad053bdc9ad6a0ff83c21d9e75a8db8c97ea5f0f8ec9725bdff13ac1e5622d56d578b9844d40d0851e3bbe803e150f5add172b5c5028aa09fbf5b3329bf592f6ac8b878281afd7106aa08144646b62bcb219e31de26acfd2d1a1144b43ba19ab0494dc0b3b374da0a2bea2afef65d9f7887bbd46a2f8ece603fb23e6839a1813a2fd0fb80651fc4b59effd5ed39050818561f6179e4fe306b92a39927c4093884189afdfa6b9ef15d7950f5c45b370e964fec27f9e5a17e", 0xe1}, {&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="cf01be53d7cd86686ddcbc549c96238be3a90eff4fce3e35231e48cebb55c09e42fba26eba983e04e06b96655a4f1a1c586af4778ffecbbd3de2abc199e8c853bdd60eca03e5762fa710107e8cdeb60b08558f8663e32937c7cb12440267dc0e1895850821b48d2699d1f5f738e95c07f7d8f561650dd6a9478fd931afa49935d1461cd50431ce799cca2d9ebce99796a788c0b2bfbed7b636a3488184ff21d6af4a00d805e1c3dcac52a1605eb7986745d91784c6a1c370e8166160c0d71d045523bade4a78f45e8ee7e30edf22b5", 0xcf, 0x2}, {&(0x7f0000000100)="dfce88a1b6acd068645ae3aaf33e24301daa0aa7c2754a199367215a9472533725950349012456358baaf4c48a1bef827a2b77d1523c97ed0f34fe5dcf1e93890befa20f5df6836d92a3f0036ec49e4ea42c6f29266125dbb73a83402b0e005e3166c8eaa31b7df44d1588f75b51f1dff38f1874f04111860fc2385e54bc91fe6e5ab1ca1c0db08603ea6ee1f8b9f27b89e19b3f7506daf0e2c1164c07c95d6f0f218119620621661354397bb064d83266d9be71c5d74ad5eaf225d3", 0xbc, 0x4280}, {&(0x7f0000000500)="e6b7599303704a5cffd2e25effa67358c013c5d0d43a09b95a14d1e58a53b688fc478f2c4741c6746d8645c9245cd9884ce14b0321b1fa360c55bd9cae8cf41dcfeb3b4456e675796e72fa055f546210dd6a444bc273b3291983e293a186d41db872d559e8202289a6c91822f6b34daa16b6a15c812b47284b2f1119d7df033c5047cace11d130ca37535376e4170de2b6363e25297c96cd021295c21951a1c3aed664d1c77a51efe025dacd3df78ce674359dc599bbf4a11e606742dd84237ddb55dec3f7b22b891767dc376d1fb9a3d412e7947de1478731b0acffe30e", 0xde, 0xfffffffffffffe01}, {&(0x7f0000000600)="9c74f08c177ebc563c836bbe2ef33f62a3efa3bb69335fbf1228a8c9339ebdfbca60b7d0b6385eb894f2bfaf228ad42e86379aae7043a9da34cf2b5a56dd5bbe4780aea3da818c9fe5033e6821a9a6d44a17ced5a3550b7d2282b39220f6b52c05", 0x61, 0x143}], 0xe663fc04a06e6967, &(0x7f0000000740)='[bdevmd5sumselinux\x00') r0 = syz_open_dev$binderN(&(0x7f0000000780)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="cb441451", @ANYRES64=0x0, @ANYBLOB="09631040000000000000000000000000000002007424c81b0cc4166076bf1ca9bef9fce6be26f1cda30f09c304eca905dcf42d91e87647111ae81868a0c7ebac1c3c858f9bba5715f8bf6639ce8915762824cf624dc1721e2a6250b5ab761c49d739951a1c11"], 0x0, 0x0, 0x0}) 13:42:50 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:42:50 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="10000000000000000100000000000000"], 0x10}}], 0x2, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r6, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r7, 0xffff}, &(0x7f0000000140)=0x8) 13:42:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1f99800]}) [ 1204.775408] binder: 25717:25719 unknown command 1360282827 [ 1204.781612] binder: 25717:25719 ioctl c0306201 200000c0 returned -22 [ 1204.848708] binder: 25717:25732 unknown command 1360282827 [ 1204.867369] binder: 25717:25732 ioctl c0306201 200000c0 returned -22 13:42:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:42:51 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fchdir(r2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000200)=""/229, &(0x7f0000000140)=0xe5) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:51 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x2000000]}) 13:42:51 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r2, &(0x7f0000000000), 0x12) 13:42:51 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1a000, r0, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r1, 0x0, 0x4) keyctl$session_to_parent(0x12) 13:42:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000108000000000000000000000089e95898bd9eba312df9ca9cd85b23a01a390a6060b379ef5534d2b2b23b3902a24d59d2875dbfc8eb6b434fdace604a3581d767cb40c1d20eb1bb460cf190489a1727d0c4e40a51a970f28992e3ed0d00000000445cd526052349305a5698841d01dc9b431722eca6928d7ab21900", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e643000000000000000000000001c0012000c000100626f6e64000000000c000200080003007f000000"], 0x50}}, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x4, 0xffffffff, 0x2) fcntl$setownex(r1, 0xf, &(0x7f0000000000)) 13:42:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x2f99800]}) 13:42:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x101, 0x1ff, 0xe6fb, 0xfffe}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r2, &(0x7f0000000080)=0x6, 0x12) 13:42:51 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2276, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1205.462633] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1205.501207] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:51 executing program 2: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x3f99800]}) 13:42:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="236300e1a80000000000009d6e7b583d667abdac94ebfbe9c7990efccc2a866191749aed5c7319c757a49d47709f3a", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x12200, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000200)={0x42, 0xa493ded3e354a112, 0x5, 0x1, 0x2d, 0x50eaa2dd, &(0x7f00000001c0)="3a0130787865ea96e9c677046f64ae655741003be8316387299adeff9835c9e22bb12296cf5e2dd2b44a2dbca9"}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 13:42:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x9adfeac8) [ 1205.748993] binder: 25793:25798 unknown command -520068317 13:42:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x4f99800]}) [ 1205.790228] binder: 25793:25798 ioctl c0306201 200000c0 returned -22 [ 1205.830576] binder: 25793:25798 unknown command -520068317 [ 1205.857184] binder: 25793:25798 ioctl c0306201 200000c0 returned -22 13:42:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x3f) 13:42:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:42:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630a5ef644a3cd00485d33d33bcc2eb485", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x4, 0x8, 0x7}) 13:42:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x5f99800]}) 13:42:52 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x236e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1206.177647] binder: 25818:25822 unknown command 1577739011 [ 1206.211778] binder: 25818:25822 ioctl c0306201 200000c0 returned -22 13:42:52 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') r2 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x6, 0xa022) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1846}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9c9}]}, @TIPC_NLA_NODE={0xfffffee6, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff6da4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x400}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff70}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x498f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) io_setup(0x200, &(0x7f0000000080)) r3 = epoll_create1(0x0) r4 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1a000, r4, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r5 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r5, 0x0, 0x4) 13:42:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x6f99800]}) 13:42:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) [ 1206.230730] binder: 25818:25822 unknown command 1577739011 [ 1206.249730] binder: 25818:25822 ioctl c0306201 200000c0 returned -22 13:42:52 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = gettid() tkill(r0, 0x3c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) 13:42:52 executing program 1: r0 = gettid() tkill(r0, 0x3c) tkill(r0, 0x3d) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffe3e, 0x0, 0x0}) r2 = syz_open_procfs(r0, &(0x7f0000000000)='syscall\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x44}, 0x0, 0x0, &(0x7f0000000380)={0x2, 0xd, 0x0, 0x10000}, &(0x7f00000003c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1f}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00', r3}, 0x30) 13:42:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x7f99800]}) 13:42:52 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r2, 0x10e, 0x19310de97b8d5fb8, &(0x7f0000000140)=""/82, &(0x7f0000000200)=0x52) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x8f99800]}) 13:42:52 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10868e0900000000000000000100000002000000"], 0x10}}], 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002800)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000002900)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@bridge_delneigh={0x1c, 0x1d, 0x800, 0x70bd25, 0x25dfdbfc, {0x1b, 0x0, 0x0, r5, 0x80, 0x4, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x9dd177ec063f273f}, 0x802c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0x7ff, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000240)="fbe840bb80d18fe92286c251ae28ef145a636b95ad9bd3aca31cb1c8a93ba5d0b259ec46", 0x24, 0x1}, {&(0x7f0000000280)="2fc87b4467349252118ed81bc1054a46be08dc9d9ca92a9325ac92d2e25603754771bbea51f8016e48c7d8664945b23025af1b7c68caaa83e535118e3b5d1a6ab15735a303f86f3451ce685aa15a7cef34511539ea2628578355a4342de5965bb5df71e7", 0x64, 0x2}, {&(0x7f0000000540)="957b70c6a0ea0cb6880f325f8feeec4a504f81945ca9229273492e0691565700261f0c4268afbe5401e8cbdbbe2cf5450044e6bce07580903cc67953fe4abba3eca1d35ad475f686d704fef5ccf711aafe20f43a1ce3e1cd7dc3ee32f12ca27523852fa7e7b347ca224ac782a3556154935aeda7172e29c69bdbdfe61ffd8c1a407dc10ba1ce371cd107c8d0f52e3129f20e", 0x92, 0x5}, {&(0x7f0000000600)="0208fe2ea41410afd2a73dd4dc6e700c3676dd28238a1d0ab0eb1a6b8d45b685cede30895bee6ee9a42a615ca574a526c24686c1ed37a07f747e8d27a8b332219de6340fc46c967fc736276ce2f51e534ccbe12f2f5deb834fe38b5b8a101f2bae9bca04d8921270e72170d0067be5f190be9e69f9c728c6772a4cd99f990064463d2a47bac295f7cd630da1953f4b3a5311bd689a77e433265039a041ce1f6292c652c5", 0xa4, 0x8}, {&(0x7f0000000300)="0d1e4ee583109ad15a88b43e77c63d8502222d83eadeb27f491cd78df38d", 0x1e, 0x7}, {&(0x7f00000006c0)="403ecc79f4aada7988115a9652dd21bf1771a062b46ed91e328955b5a8517086e6c563e4e0366da6f0a552e7af80574cec598f046294c377f6d305c72416a7bc5c188d", 0x43, 0x3}, {&(0x7f0000000740)="4bdfd5d2bbf2f7c3b6590cfd36c2a6ccfcea1cb2419fc58a5f02184411f5acf5d88a4cbacf099157f322959adabd313c28c8cd78658c0ee4b9bd9e1af5e4b4439b57355e3a8687de1ef3", 0x4a, 0x6}, {&(0x7f0000000340)="496366adbcd4d92ef0b16a64f5c7eb97b742c16636e9922de730d12d720c295b7189ba16692ef0c0107d", 0x2a, 0x1}], 0x800, &(0x7f0000000880)='bond0\x00') getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'\x00\x00\x00V\x84\x00', 0x20000402}) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = syz_open_procfs(r7, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r8, &(0x7f0000000080), 0xfffffe8a) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r11 = getegid() chown(&(0x7f0000000140)='./file0\x00', r10, r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r13) r14 = geteuid() syz_mount_image$ext4(&(0x7f0000000bc0)='ext3\x00', &(0x7f0000000c00)='./file0\x00', 0x101, 0x0, &(0x7f0000000c40), 0x202800, &(0x7f0000000c80)={[{@journal_async_commit='journal_async_commit'}, {@nolazytime='nolazytime'}, {@sysvgroups='sysvgroups'}], [{@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}]}) mount$fuseblk(&(0x7f0000000900)='/dev/loop0\x00', &(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='fuseblk\x00', 0x42080, &(0x7f0000000a80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@smackfsroot={'smackfsroot', 0x3d, 'selfsecurity'}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@uid_gt={'uid>', r13}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r14}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) [ 1206.679157] audit: type=1400 audit(1577972572.899:193): avc: denied { getopt } for pid=25856 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 13:42:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xaf99800]}) 13:42:53 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2376, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:53 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0xfff, 0xae63, 0x2}) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:42:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:53 executing program 1: r0 = msgget(0x1, 0x10) msgctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0xb8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x84, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x70, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, [], 0xe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_IKEY={0x8, 0x4, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="f27cdf99653f4e6d31da2051016e3ecc"}]}}}]}, 0xb8}}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000040), &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000000)=0x3f, 0x7) 13:42:53 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x247e, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'syzkaller0\x00', @ifru_flags=0x1}}) 13:42:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = gettid() sync_file_range(r0, 0x7fffffff, 0x71ff, 0x2) tkill(r1, 0x2c) 13:42:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:53 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:54 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'lapb0\x00', {0x4}, 0xf352}) 13:42:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, [], [{0xc8e8, 0x8, 0x6, 0x9, 0x1000, 0x80000000000000}, {0x4, 0x1ff, 0x5, 0x8, 0xffffffff, 0x7fffffff}], [[], []]}) 13:42:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:54 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x6ef0f000]}) 13:42:54 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x261c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) [ 1207.821934] binder: 25942:25946 ioctl c0c0583b 20000200 returned -22 [ 1207.860303] binder: 25942:25953 ioctl c0c0583b 20000200 returned -22 13:42:54 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:42:54 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xe7ffffff]}) 13:42:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x2ea}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0)) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x22000) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000001c0)=0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000080)=ANY=[], 0x224, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @remote, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x2008040) 13:42:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x7, 0x9, 0x4, 0x70000, 0x24a, {0x0, 0x2710}, {0x4, 0x0, 0x8, 0x7f, 0xf8, 0x6, "26e47602"}, 0x2, 0x3, @userptr=0x3, 0x9, 0x0, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000000c0)={r0, r0}) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000440)={0x9, 0x6, 0x4, 0x10000, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x40, 0x1, 0x4, 0x3f, 'F\fJ~'}, 0x40, 0x1, @fd=r7, 0x4, 0x0, r3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r11, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x4eaf, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0xe, 0x3, 0x1}, &(0x7f0000000580)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x81}}, 0x10) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000100)=0x4) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0xb7, ""/183}) [ 1208.236912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pig=25977 comm=syz-executor.2 13:42:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09631040454268c17a35f164657eb40bcf65d95e"], 0x0, 0x0, 0x0}) 13:42:54 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfdfdffff]}) 13:42:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:42:54 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2700, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) 13:42:54 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x43a8, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r3, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) 13:42:54 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r2 = inotify_init1(0x80000) fcntl$setpipe(r2, 0x407, 0x3c) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 13:42:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfffffdfd]}) 13:42:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:42:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000500)={@in={0x2, 0x4e23, @local}, {&(0x7f0000000440)=""/166, 0xa6}, &(0x7f00000001c0), 0x8}, 0xa0) r6 = dup(r1) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r7 = gettid() tkill(r7, 0x3c) r8 = gettid() tkill(r8, 0x3c) r9 = gettid() tkill(r9, 0x3c) gettid() tkill(r8, 0x23) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffe3f, 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0], 0x0, 0x0, 0x0}) r10 = socket(0x100000000011, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f00000000c0)=0xf239) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCBRDELBR(r11, 0x89a1, &(0x7f0000000200)='bond_slave_1\x00') getsockopt$inet6_int(r10, 0x29, 0x50, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r10, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r14}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="100000000000000001f2570200000000"], 0x10}}], 0x2, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480488}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r15, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000c015) 13:42:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xffffffe7]}) 13:42:55 executing program 2: r0 = getpid() r1 = memfd_create(&(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16>\x00*\x91a\x12\xc6\xff\x17\xf5\x9e\xdb\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\t\x00\x00\x00\x00\x00\x00\x00\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8', 0x3) r2 = gettid() tkill(r2, 0x3c) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x3, 0x0, 0x1, 0x4e41, r2}) ptrace$pokeuser(0x6, r0, 0x9, 0x317a) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16>\x00*\x91a\x12\xc6\xff\x17\xf5\x9e\xdb\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\t\x00\x00\x00\x00\x00\x00\x00\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8') r4 = gettid() tkill(r4, 0x3c) capget(&(0x7f0000000040)={0x20071026, r4}, &(0x7f00000000c0)={0x26ed, 0x0, 0xfff, 0x7fff, 0x3, 0x22}) write$cgroup_int(r3, &(0x7f0000000080), 0x12) 13:42:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09631040000000000060a079e6637f330b000000"], 0x0, 0x0, 0x0}) 13:42:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xffffffff]}) 13:42:55 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x27ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000180)={{0x3, 0x7, 0x1a, 0x9, 0x17}, 0x1000, 0xea0, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x10, 0x4, 0x33}, &(0x7f0000000100)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x60, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840050000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a68771e000000030000000000000000000000000000008561646600000000000000000000000000000000000000000500000000000000852a7470010000007f542e634c51c9f7ac29ca0200003120a31b6c3b7c32cd09d381c6f49e2e5e0bfc1ccb26897ab56b16109f555d5d1cd6caabb0424df5b85470fcfbd5afb5ba4980ec1337650cb7d988fdd2ab3c4ed278ab78c99e19022b34877c531d46972e3fd7b9cc779a505b5be9cbee8168762b9be29a48275527a292daaa5704455ed387957d9412191580218e96dfc5", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/173], @ANYBLOB="ad0000000000000000000000000000001b00000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="40000000000000000963104000"/28], 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x9, 0x0, 0x9, 0x0, 0x3, 0x27, 0x8, 0xfd, 0x8, 0x3, 0x3f, 0x4, 0x0, 0x0, 0x9, 0x1, 0x7, 0x8, 0x80, [], 0x5d}) 13:42:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:55 executing program 2: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '-ppp1mime_type-GPL)system$\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x5) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:42:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x4, 0x26c, 0x20}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x0, 0x2, 0x8, 0x4, '\x00', 0x2}, 0x3, 0x20, 0x9e, 0xffffffffffffffff, 0x1, 0x50b1, 'syz1\x00', &(0x7f0000000180)=['bond0\x00'], 0x6, [], [0x4dd6, 0x8, 0x9, 0x1]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @initdev, @initdev}, &(0x7f0000000480)=0xc) getpeername(r3, &(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000600)=0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@ipv4_newroute={0x2fc, 0x18, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x2, 0xfc, 0x2, 0x0, 0x8, 0xa00}, [@RTA_ENCAP={0x2bc, 0x16, @nested={0x2b8, 0x14, [@generic="741f8b2dc1e3f5e73102d0d6d9be4edcfccf3c3689ebc79e770e547b60e0965b7db4dbdc25537466a7867a69cbc8e0dc5aa335be981c5502cf221d78f181ce135ddf278d68b7bb906c6b5ca6e974d5cd8d50b4d06ccdf9bbf587c67335653b1580c9df75512a13734c03ff32549d6f190c4a03753bae690b657f74ea573d5d34f63cfcfcf8a1c8dad2443a6e41f2ef983e4cb62fa2f8ae02e1bab3492d713d9debaeca60740bea2da95f970c8316261252f0e3fd07ecc96fd7371b15ac9c21cd004c7a0fa21741286c44e255da2470bac911423f3211c9f75654cc5fe0152c79be1847a4", @typed={0x8, 0x6, @uid=r5}, @typed={0x14, 0x95, @ipv6=@mcast1}, @generic="76ec9b24679d7de408785e0e2ef9a7a7e9d50173533fba40ec16652220fcee6f3083e87a686d05b88e2e87b9bcb1df0b9cb9d7fca68d03a824ef3e041c8c61e26d89841812b9a8f2d99303a468458e624ac200cfe6e6ed6d285838d604785d8f88691a5749e5dcf49f910f522167bfe7173d11e8a42647af0d077af1e89dfff6a5d7889c4121fb8c0ef4a146388c72838c619f2c79250e1f38612a8dc3738739f91332", @generic="9966b138a44776f0856697285049f3b8660d0d44fbc1486d3cc6ae912c167f4a8a4ce415d98e7ff0fd6a227fd4b0943417443dfc1db5f6a58746db8a6c6fe814dbb3d99ecea2746f068b93beb4e7d47fdce431a8ebb4db42e8a4ef94e48720626d11208a1cd95d82ccdd4c611435064930684e7b036d3cf88143709b4a18266cea4ad64ee23d9efd", @typed={0x4, 0x25}, @typed={0x84, 0x73, @binary="f891b94b9e3d5186eea626482943091a62b3c0d45d49a15da414d60242683188c32e20f3a05e688e24eda9a379bd1456c024f9655ab8f9d045b412fc37d44703808560885f0c4eb0c5520b5a26984caf96eca6c7e30d7b6b79103073ee1e505880ff11c5a260c6d8e6e8d288784dc37475a1019e32460b58a43ce2a5b382fd22"}]}}, @RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x8, 0x8, r6}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_FLOW={0x8, 0xb, 0x7}]}, 0x2fc}}, 0x0) r8 = epoll_create1(0x80000) epoll_pwait(r8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x5, 0xff, &(0x7f0000000500)={0x3f}, 0x8) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000003c0)={0x9c0000, 0x7, 0x7, r3, 0x0, &(0x7f0000000380)={0xa00965, 0x0, [], @value64=0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r9, &(0x7f0000000400)={r11, r0, 0x9}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="2acde64cb3676c368f17d80861e678e6a5d55436c69f2c2728c25be3ad434996dc898284d12bdf7d9e", 0x29) 13:42:55 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2f89, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:42:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r2 = gettid() tkill(r2, 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r4 = gettid() tkill(r4, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYPTR64], @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYBLOB="8ea571f0690be0bd27b23fe0e935faa52984f15a96a4395d52f4292df6e08c6e9713a7a7c7452163e39230de9e4aec93c942fb5de1aa2b4764e2a31ff50ca7bd435e89e0826e8450142c147592ebcc3e633aa3a56be20ac86778c0842c7b7680d511989353a36aa584ea0bd52751d80500e12dd4f5e174a718a43b5d8a", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYRESHEX=r3], @ANYRESHEX=0x0], @ANYPTR64, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES16=r4]], @ANYRESOCT=r5, @ANYBLOB="5e4facc19786ce41e448b4cacdb67c5fce6f1b3d79242cf49943639312b34e46c1a5fdc12e768159a71f22b26979f685ead4d2a587aa0e974fb88c5de59d4072e027e85977644e8874333e5c84ee9748288d07d10a4c3214326eb33e656256fb7a55acaa7aff0bacd1c26e852cae40b81389c73b9dbda0012ad11132a3ae7fcd9d21d7be9b99773d3f87bd4e3c950f1ea581329ec4c65ff0179419fe50fbebd210a1cc73df44e9db2c96c024b6c7dd380896e43d1fa39602c76239edcf79e238d27ab254763f997957b3d1117f61f4e92d608408c64a63fdc908c1a2c241cb5351086558e8"], 0x114) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r6 = epoll_create1(0x0) r7 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1a000, r7, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r8 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r8, 0x0, 0x4) 13:42:56 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x468000, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x8, @raw_data="30c5126e5aa1377e04e2eac2c6f96cd62c0bc5071d69908c70f964740f2bf5f8948dd6eb33fccbd09159279967e5d5bf2dd71dde1d726fdacf1690ecf0ec9371cf0c25e61399319d0de88f4c44b45ea4a6b4a55ab33c1ac0119130f0d39063f68d9b7afd245e007d13e69e2b548cabb2e72a736e4f679bb10a7ac91da91486ddf7697b30e405e3a95d760967a2516ed0d0d715b0d27d7aa4678c53b6688bfc66511db8af850dac1846dee4dbb1a12b52b6508af63f0b86dc36fea6b6b51875f36d2ef5b399dbf246"}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/16, 0x10) 13:42:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x2]}) 13:42:56 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/adsp1\x00', 0x800, 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) sendto$x25(r0, &(0x7f00000000c0)="b2d9cdad7f38149099b3d0cc783ef05f5f3278ecb27f50d8", 0x18, 0x18800, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) lseek(r3, 0x0, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/29, 0x1d}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000480)=""/144, 0x90}], 0x6, 0x7fffffff) 13:42:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xe7]}) 13:42:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)={0xffff, 0x5, 0x4, 0x4000, 0x8, {0x0, 0x7530}, {0x2, 0xc, 0x3, 0x1, 0x4d, 0xd2, "2a568889"}, 0x8000, 0x0, @planes=&(0x7f0000000100)={0x3, 0x4, @userptr=0x8, 0x17e4}, 0x52, 0x0, r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f00000000c0)={0x7b, 0x1b, &(0x7f00000003c0)="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"}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x339) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 13:42:56 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x328c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:42:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000100)=""/170, &(0x7f0000000200)=0xaa) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000040)) 13:42:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 13:42:56 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8, 0xf512820c9f26080b) 13:42:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) recvfrom$rose(r1, &(0x7f0000000100)=""/165, 0xa5, 0x61c5ca37c228ca6f, 0x0, 0x0) 13:42:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 13:42:57 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) eventfd(0x1) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:42:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:public_content_t:s0\x00', 0x26, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r2, &(0x7f0000000080), 0x12) 13:42:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xffe7]}) 13:42:57 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3f00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x5, 0x0, [{0x31e, 0x0, 0xcd}, {0x10bc, 0x0, 0xffff}, {0x987, 0x0, 0x5}, {0xb27, 0x0, 0x20}, {0x341, 0x0, 0x80}]}) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x7a0a67c8d050cbc3, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}, {@posixacl='posixacl'}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_eq={'euid', 0x3d, r6}}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$USBDEVFS_RESETEP(r8, 0x80045503, &(0x7f0000000000)={0x9, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000500)={0xf000, 0x100000}) 13:42:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x980001]}) [ 1210.913076] audit: type=1400 audit(1577972577.139:194): avc: denied { relabelto } for pid=26131 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=195739 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:public_content_t:s0 tclass=netlink_route_socket permissive=1 13:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1210.967563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26994 sclass=netlink_route_socket pig=26135 comm=syz-executor.2 13:42:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000002a939767e56e275608ed4f69346388df7dd8b18b6314decbfd7d5d80b59e6524782ac5416729e18979bcca24eed8a0e23aaabbffa19861c3bed0c0480146b7784ec1619efac7400046952d1252a20262f8952f82f56fbd0d272289cb0876779ea918f523472be9", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:42:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f900]}) 13:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) [ 1211.171379] binder: 26157:26159 unknown command 0 [ 1211.235909] binder: 26157:26159 ioctl c0306201 200000c0 returned -22 13:42:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:42:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f902]}) 13:42:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/de\xf6/58\x97\x1a\"\x00\x80\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffff98, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0363bfdfd254090000005a6135a3b223f0004d", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:42:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:42:57 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3f01, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:57 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46818100fa01000000000000000300030001000080bd0100003800000087030000e2000000ff0120000200f7beaca307000000000050e57464ffffff7f06000000380b0000ffffff7f000000000300000036030000a9ac34147afdc84c616b1f2bb180a62c51bb421dee0951592033028d84dfc7c05d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000722939a583e500"/1912], 0x779) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40243, 0x0) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f612f003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54e432bd274068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0xb9, 0x4, 0x0, 0x2, 0x100000000, 0x1}}}, 0x128) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={r5, 0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000340)={r5, 0x3, &(0x7f0000000200)=[0x0, 0x3f, 0x80000001], 0x0, 0x5, 0x0, 0x8000, 0x0, &(0x7f0000000300)=[0xc97]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000c00)={r5, 0x6, &(0x7f0000000b00)=[0x80, 0x0, 0x1, 0x0, 0xf5b, 0x40], &(0x7f0000000b40)=[0x9], 0x20, 0x8, 0x404f98da, &(0x7f0000000b80)=[0x3ff, 0x1c16fdc1, 0xffffff00, 0x1, 0x1ff, 0xfff, 0x3, 0x6], &(0x7f0000000bc0)=[0x6913, 0x1f, 0x8, 0x3]}) write$cgroup_int(r2, &(0x7f00000000c0), 0x54e0a2b07e5a193c) 13:42:58 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x5) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f00000000c0)=0x1000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r4, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000100)=0xf63) 13:42:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:42:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f903]}) 13:42:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="091d15826800fce38c4a20888ebb49338e281e80"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xe8200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000040)=0x2) [ 1211.815714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33153 sclass=netlink_route_socket pig=26184 comm=syz-executor.2 13:42:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 1211.923300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33153 sclass=netlink_route_socket pig=26195 comm=syz-executor.2 13:42:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f904]}) [ 1211.992426] binder: 26197:26202 unknown command 0 13:42:58 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03015bd88de2af79eaa3b2348ea766467f630000290100ff7f00002102000000030000000000002009000000000000007f07002e2f66696c653020040000000100000000000000e3000000000000008307002e2f66696c65306003000000080000000000000007000000000000001e07002e2f66696c65308102000000030000000000000081000000000000000907002e2f66696c65308003000000040000000000000004000013c7dfd535adfdb52e2fbb673a4e1a2350ec0000030000000000000007000000000000000307002e2f66696c65300302000000060000000000000004000000000020000807002e2f66696c65307001000000030000000000000002050000000000000007002e2f66696c6530"], 0x103) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x76) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000180), 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\b\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="02000020010000000200008039020000f64777a6a867e55c9d76e91a8839cb07354e3946d63a7610c9351641b670ca616bcc50406650bdb26927ca9cead88363b09771a20e5722298691904f80787900"/95], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40040) fchdir(r0) r5 = dup3(0xffffffffffffffff, r0, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000040)) [ 1212.037731] binder: 26197:26202 ioctl c0306201 200000c0 returned -22 13:42:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f905]}) 13:42:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) [ 1212.144877] binder: 26197:26202 unknown command 0 13:42:58 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1212.173133] binder: 26197:26202 ioctl c0306201 200000c0 returned -22 13:42:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f906]}) 13:42:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:42:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xfffffe00, 0x0, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x0, 0x1, 0x0, 0x0, 0x7, 0x1, "5fe6d85d"}, 0x5, 0x1, @offset=0x3, 0x578f67b0, 0x0, r0}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7fff, 0xffff}) 13:42:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:42:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:42:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) 13:42:58 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x486d, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:42:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:42:59 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x6, 0x1, 'bond0\x00'}]}, 0x20}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000002c0)={'veth0_to_hsr\x00', {0x2, 0x4e22, @rand_addr=0x6}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000108000000000000000000000000518ac021ac7149ff7f837267ac4b9e7e1494613e01a5f2187234d411ae03d0acb7b501cd59f5d713ac78f531aec674743b1d82255fc9621dd8bbf68374b79e0e842a15700f58f710e2f11742749a83a92793c29f702f21b71469e137b15f4bbec96598ed0b0e68c38c9cb38d6f4069a1d508facb9162accbedddf90ddbb6cade21a1f209dbe1b4ef85e763d07f0f058718f48ae467bd44212debd67fc1a63b542ab74f4616869e9ab4829761866438417d1899ff3a3b876684f876655a9120103ce2dbaca487187a6661b500ed2202bc782cb8fe664b2cec825efc6e4056", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x45}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[]], 0x8) r6 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x20) symlinkat(&(0x7f0000000100)='./bus\x00', r6, &(0x7f0000000280)='./bus\x00') r7 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) lseek(r7, 0x2, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14, 0x80000) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="603200001d00000225bdc7ab9f5f47fbdfdf1bbe", @ANYRES32=r11, @ANYBLOB="1000800114000300070000004d06000005000000ff0100000800010000000000140003000200000008000000000400000000000008000700040000000c000200aaaaaaaaaabb0000"], 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$rds(r13, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 13:42:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x89c4b72c56bf8f, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 13:42:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f908]}) 13:42:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x8) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:42:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0}) 13:42:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x98f90a]}) [ 1212.964191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1212.984746] audit: type=1804 audit(1577972579.219:195): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir260092910/syzkaller.zjYIPo/41/bus" dev="sda1" ino=17769 res=1 13:42:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:42:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 13:42:59 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4f00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1213.143836] audit: type=1804 audit(1577972579.319:196): pid=26282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir260092910/syzkaller.zjYIPo/41/bus" dev="sda1" ino=17769 res=1 13:42:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/147, 0x93}], 0x4, &(0x7f00000003c0)=""/194, 0xc2}, 0x6}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/224, 0xe0}], 0x2}, 0x3}, {{&(0x7f0000000700)=@sco, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000000800)=""/112, 0x70}], 0x3, &(0x7f00000008c0)=""/72, 0x48}, 0x1f95}, {{&(0x7f0000000940)=@hci, 0x80, &(0x7f0000001a80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/188, 0xbc}], 0x2}, 0x9}, {{&(0x7f0000001ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/250, 0xfa}, {&(0x7f0000002c40)=""/159, 0x9f}, {&(0x7f0000002d00)=""/133, 0x85}, {&(0x7f0000002dc0)=""/116, 0x74}, {&(0x7f0000002e40)=""/224, 0xe0}, {&(0x7f0000002f40)=""/17, 0x11}, {&(0x7f0000002f80)=""/40, 0x28}, {&(0x7f0000002fc0)=""/154, 0x9a}], 0x9, &(0x7f0000003140)=""/29, 0x1d}, 0x3}, {{&(0x7f0000003180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003200)=""/239, 0xef}, {&(0x7f0000003300)=""/64, 0x40}, {&(0x7f0000003340)=""/168, 0xa8}, {&(0x7f0000003400)=""/182, 0xb6}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/37, 0x25}, {&(0x7f0000003540)=""/100, 0x64}, {&(0x7f00000035c0)=""/4, 0x4}, {&(0x7f0000003600)=""/115, 0x73}, {&(0x7f0000003680)=""/209, 0xd1}], 0xa, &(0x7f0000003840)=""/47, 0x2f}, 0x3}, {{&(0x7f0000003880)=@hci, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003900)=""/97, 0x61}, {&(0x7f0000003980)=""/28, 0x1c}], 0x2, &(0x7f0000003a00)=""/227, 0xe3}, 0x5}, {{&(0x7f0000003b00)=@hci, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/39, 0x27}, {&(0x7f0000003bc0)=""/30, 0x1e}], 0x2, &(0x7f0000003c40)=""/137, 0x89}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003d00)=""/12, 0xc}, {&(0x7f0000003d40)=""/85, 0x55}], 0x2, &(0x7f0000003e00)=""/255, 0xff}}], 0x9, 0x20, &(0x7f0000004140)={0x77359400}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000004180)={0x5, 0x80}, 0x2) 13:42:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:42:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={r1, r2/1000+30000}, 0x10) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:42:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:42:59 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3c) sched_setparam(r2, &(0x7f00000001c0)=0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) r4 = semget$private(0x0, 0x4, 0x20) semop(r4, &(0x7f0000000180)=[{0x1, 0x0, 0x1000}, {0x2, 0x803, 0x1800}, {0x4, 0x8001, 0x800}, {0x7, 0x3c, 0x1000}, {0x3, 0x3}], 0x5) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000000c0)=""/133) lseek(r3, 0x0, 0x4) 13:42:59 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') 13:42:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x2, 0x2e}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @exit_looper, @decrefs={0x40046307, 0x1}], 0xffffff66, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = dup(r0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x0, r5}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@default, @null, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) socket$inet6_dccp(0xa, 0x6, 0x0) 13:42:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf0f027]}) [ 1213.541313] binder: 26323:26324 ioctl c0306201 200000c0 returned -14 [ 1213.550737] binder: 26323:26324 ioctl 4008af30 20000100 returned -22 [ 1213.573809] binder: 26323:26324 ioctl c0306201 200000c0 returned -14 13:42:59 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4fff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1213.608922] binder: 26323:26326 ioctl 4008af30 20000100 returned -22 13:42:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket(0x100000000011, 0x2, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r6, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@ipv4={[], [], @rand_addr=0x5ec4}, 0x7c, r10}) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r13}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 13:42:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:43:00 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:00 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000240)={0x1f, 0x7, 0x4cbd, 0x9, 0x8, 0x3ff}) r2 = semget$private(0x0, 0x4, 0x20) semop(r2, &(0x7f0000000380)=[{0x1, 0x0, 0x1000}, {0x4, 0x3, 0x1800}, {0x4, 0x8001}, {0x7, 0x3c, 0x3800}, {0x3, 0x3}], 0x5) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000280)=[{0x4, 0xfeff}, {0xf4723de1dc986ea6, 0xfff8}, {0x4, 0x70, 0x2000}, {0x2, 0x1, 0x1800}, {0x2, 0x4, 0x1800}, {0x2, 0x7f, 0x3800}, {0x5, 0x9, 0x1800}, {0x4, 0x51, 0x2800}, {0x4, 0x7, 0x2000}], 0x9, &(0x7f0000000300)={r3, r4+10000000}) r5 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r5, &(0x7f0000e47000)) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250300000014000100080002003a0000000800090000000000080006000900000024000200080002004e2200000800090001000000080005004000000008000900820b00004800030008000400a97a000008000800ff000000080003000100000008000400ffff00001400020076657468315f746f5f6272696467650008000500ffffffff08000400fb040000"], 0x9c}}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r6, r6}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) keyctl$update(0x2, r7, &(0x7f0000000400)="95803c9391e8264fa499a3a24e1e8d14ab92b21838024af79657508e7ac1ae963ebe7a61feffb610b31011a0bc7e041e8af652960db4722ad45d72652c3eeca2a028d65da27426868be8e2a26fb6d098c41bcca28316e3117953d9509e9fb9dbadb268c09bd17260d9ae14f495af53817166fa7478c8fd6f4334c32163d38845d9aa11141e2fc56b", 0x88) r8 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000680)={[{0x4, 0x56, 0x7, 0x1, 0x1, 0xa4, 0x81, 0x5, 0x1, 0x20, 0x1, 0x9, 0x5002}, {0x7, 0x0, 0x9, 0x7f, 0x3, 0x4, 0xca, 0xb1, 0x81, 0x31, 0x8, 0x81, 0x3}, {0x3, 0x9, 0x7, 0x4, 0x4, 0x3f, 0x0, 0xff, 0x2, 0x0, 0x4, 0x76, 0x9}], 0x1}) lseek(r8, 0x0, 0x4) 13:43:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c4002000000000000000000000009631040ffffffffffefffff0000000000000000"], 0x0, 0x0, 0x0}) 13:43:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:00 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000380)={{0xd000, 0x4000, 0xd, 0x7f, 0x3, 0xde, 0xd2, 0x0, 0x3f, 0x2, 0x0, 0x17}, {0x2, 0x6000, 0x9, 0x0, 0x8, 0x7, 0xfc, 0xff, 0x1, 0x2, 0x4, 0x6}, {0x10000, 0x1, 0x5, 0x40, 0x30, 0x40, 0x4, 0xff, 0x3, 0x1, 0x1, 0x1}, {0x0, 0xd000, 0x9, 0x7, 0x6, 0x1, 0xf7, 0x7, 0x0, 0x7f, 0x7c, 0x3f}, {0x983145103b059ef6, 0x2, 0x3, 0x3, 0x80, 0x8, 0x3, 0xff, 0x5, 0x8, 0xf9, 0x7}, {0x4000, 0x2002, 0x9, 0x6, 0xda, 0x7f, 0x5, 0x3, 0x2, 0x9, 0x5, 0x3f}, {0x14004, 0x5000, 0xc, 0x8, 0x53, 0x0, 0x7, 0x2, 0x1, 0x4, 0x4, 0x3f}, {0x4, 0x2, 0x10, 0x1f, 0x1, 0xad, 0x0, 0x9, 0x8, 0x4, 0x1, 0x7}, {0x4000, 0x2000}, {0x4, 0xd000}, 0x20000, 0x0, 0x0, 0x118, 0xd, 0x0, 0xf000, [0x1, 0x2, 0xffffffffffffff7f]}) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf0f06e]}) 13:43:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x414000, 0x0) readv(r1, &(0x7f0000000800), 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xf99800]}) 13:43:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:01 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) open(&(0x7f0000000100)='./bus\x00', 0x1000, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r6 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) 13:43:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:01 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xfffffffffffffffb) 13:43:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:01 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5800, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000000), 0x12) 13:43:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) [ 1215.070197] audit: type=1804 audit(1577972581.299:197): pid=26422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir260092910/syzkaller.zjYIPo/44/bus" dev="sda1" ino=16557 res=1 13:43:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:01 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r1, &(0x7f0000000000), 0x3) 13:43:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x1f99800]}) [ 1215.895099] audit: type=1804 audit(1577972582.129:198): pid=26452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir260092910/syzkaller.zjYIPo/44/bus" dev="sda1" ino=16557 res=1 13:43:02 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/mls\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r7 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$binderN(&(0x7f0000000640)='/dev/binder#\x00', 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000017c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xb9a975e9532b561f, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/253, 0xfd, 0x2, 0x31}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x420}], 0x1, 0x0, &(0x7f00000007c0)='!'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000000)=[@register_looper, @free_buffer={0x40086303, r7}, @clear_death, @dead_binder_done, @dead_binder_done, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}, @enter_looper, @register_looper], 0x29, 0x0, &(0x7f0000000080)="a1dfe1c9b44871a585abc689723fb06b7fe5df9d184a2e13a154682bcd4dbff85400d5d7174bd0b0d7"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0663044002000000126348400100000000000000000000000000000000000000f6e2649a00"/60, @ANYPTR=&(0x7f0000001640)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000008561646600000000020000000000000002000000000000002f00000000000000852a62770100"/68], @ANYPTR=&(0x7f00000016c0)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="40070000000000000063ff40", @ANYRES64=r7, @ANYBLOB="0563044002000000"], 0xffffffffffffff9d, 0x0, 0x0}) 13:43:02 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5e1b, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:43:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:02 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x2799d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) read$alg(r4, &(0x7f0000000200)=""/83, 0x53) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000000c0)={{0xd000, 0x5000, 0xa, 0xc, 0x46, 0x1, 0x7, 0xff, 0x8a, 0x5, 0x7f, 0x3}, {0x0, 0x112001, 0xd, 0x0, 0x6, 0x1, 0x2, 0x3, 0xf5, 0x1, 0x5, 0x4}, {0x2000, 0xd000, 0xa, 0x1c, 0x8, 0x0, 0x5, 0x97, 0x0, 0x1, 0x3f, 0x3}, {0x3000, 0x5000, 0x9, 0x81, 0x8, 0x59, 0x7, 0x3, 0x1, 0x34, 0x40, 0xeb}, {0x2, 0xf000, 0x9, 0x3, 0x5, 0xfd, 0x3f, 0x7, 0x4, 0x5, 0x80, 0x3}, {0x10004, 0x5000, 0xf, 0x2, 0x9, 0x80, 0x1, 0x1, 0x61, 0x21, 0x32, 0x80}, {0x100000, 0x2, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x1, 0x2, 0x9, 0x2b, 0x1}, {0x3000, 0x2, 0x4, 0x80, 0x1, 0x4, 0x40, 0x40, 0x4, 0x2, 0x6, 0x6}, {0x0, 0x4000}, {0x0, 0x102002}, 0x7bbbedf4bb1bf081, 0x0, 0x0, 0x440029, 0xb, 0x1000, 0xd000, [0x0, 0x2, 0x8, 0x56]}) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:43:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x2f99800]}) 13:43:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x3f99800]}) 13:43:02 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x6000, 0x7f282d2e4b09d25, 0x2fc3, 0x4, 0x8c00000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) 13:43:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0963104000"/18], 0x0, 0x0, 0x0}) 13:43:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:43:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:03 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5e1c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a\x01C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)B\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00\x91=\xb2Y\x00t\x87\xf6\x84\xcbpK5\x9f\xf0\xb4\xfbNs\xa4\xea\xfb\x10#\x86\x8b\xd3\x87\xd0\xb6\x87\xc0\x1f3\x10\xf9#^\f\x01L\x00'/451) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x414000, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r3 = dup(r0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 13:43:03 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\x00\x01\x00\x00\x00\x00\x00', 0x5349005ea4e14ed6) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) lseek(r2, 0x0, 0x4) 13:43:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x5f99800]}) 13:43:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000380)={0x4, 0x7, 0x9, r0, 0x0, &(0x7f0000000180)={0x9a0902, 0x8, [], @p_u16=&(0x7f0000000140)}}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000003c0)) r3 = dup(r1) bind$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @empty, 0x4}, 0x10) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x7e, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0xff, [], @p_u32=&(0x7f0000000000)=0x2}}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r5, &(0x7f0000000080), 0x12) 13:43:03 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5fff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x6f99800]}) 13:43:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:43:03 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x5aa, 0x4) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendto$l2tp6(r2, &(0x7f0000000100)="c1061fd046dc45ec7517cb90482f99b37158d7bba4aac052ea00fbd8fa15d423", 0x20, 0x20040081, &(0x7f0000000140)={0xa, 0x0, 0x55, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x232e, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x8f99800]}) 13:43:04 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r4, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x7, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netpci0\x00', r7}) r10 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r10, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) socket$nl_route(0x10, 0x3, 0x0) lseek(r10, 0x0, 0x4) 13:43:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000540)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) 13:43:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:04 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xfef7, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYBLOB="09631040000000000000000000004000ff070000"], 0xfffffffffffffe1f, 0x0, 0x0}) 13:43:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x8, 0x1, 0x200c, 0x4, 0xb, 0x4, 0x2, 0x6}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) finit_module(r3, &(0x7f0000000180)='[\x00', 0x7) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) mq_unlink(&(0x7f0000000100)='ppp0security!%\x00') setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x2e3, 0x6, 0xa000}, 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) chdir(&(0x7f0000000000)='./file0\x00') [ 1218.327617] binder: 26590:26594 unknown command 808464432 [ 1218.347855] binder: 26590:26594 ioctl c0306201 200000c0 returned -22 13:43:04 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x1, @broadcast, 'bond_slave_0\x00'}}) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x5009}) ioctl$TUNSETVNETHDRSZ(r3, 0x800454df, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = getuid() getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='fuseblk\x00', 0x8800, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x3d}}]}}) r6 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) tee(r3, 0xffffffffffffffff, 0x3, 0xcb7a7c8cd1f041f8) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r6, 0x0, 0x4) 13:43:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0963104000000000000000000000000000000000509b0d5a45b01abddeb2c2c4aff86b35ddf1018eaa006dc8e1daa33032bdbaaa6416fe6f1e7f2f39f3af880779"], 0x0, 0x0, 0x0}) 13:43:04 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r1, &(0x7f0000000080)=0x80000000, 0x12) 13:43:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:04 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x67ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x6ef0f000]}) 13:43:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03430840", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:43:05 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0xa0001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r1, &(0x7f0000000080), 0xb) 13:43:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) [ 1218.952861] binder: 26644:26648 unknown command 1074283267 13:43:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400001, 0x4) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f00000000c0)) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x0) [ 1219.003695] binder: 26644:26648 ioctl c0306201 200000c0 returned -22 13:43:05 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) write$9p(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="02006800000f000000000005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x16f, 0x1a0}]) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000400)=""/10, 0xa}], 0x5, 0x10001) lseek(r3, 0x0, 0x4) 13:43:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:43:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x400, 0x4) 13:43:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 13:43:05 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl(r1, 0x5601, &(0x7f0000000080)="6442afdda6256a0cab61b7a062fdba8a9acaf3fd86440b90b7219d89d33f647857c9891f4948e67db65556260c5455aa7bd3aeb23be5015e269bebbc61ab17082e45edc4eace98574168ddc918691bb2cbb733bcc5c2f8caff76e70cfa79c02478c128a7f064fb4a110547c8e881dd7b669d7d7382c4c8cb07d9597864d3049d0da8c32dfc9fae35155a34016a69dd18859ebab2a4c1c9a6d5a4db4d13d113a81e09ab71d48233f6f777c8bdffe64db03e1564d541ce83a612e71e8dd8dd45514dcf3514da07ec5470649793a349c97feca17e11f62eb9b1245e84bcdb724791c5724e3283447fe742bd8ba1cd9041") r2 = dup(r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000380)=0xa, 0x4) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r2, &(0x7f0000000000), 0x8b) 13:43:05 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6d48, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 13:43:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:05 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="039de485", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x6, 0x5, 0x5, 0x6081}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0x3, 0x950}}, 0x28) 13:43:06 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x690400) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x12, r0, 0x8) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000440)='net/mcfilter6\x00') r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) writev(r3, &(0x7f0000001c00)=[{&(0x7f0000000280)="1bfa28d7546902c69c9b3f504c3011ff5077baf7ad840df9926fefeeecc7e6d3e4e64aba1fa448e188665ab1da252acd92477fe9c4b8a77f9d87948da84d1fc48b83ab131e25b1b9b168b28bbc04f49025e05f5454978e09116ba3e8dcfd780633f491b25d85051ff627309555a43df33bb22c1f8d868d44695cc5186866c438e30c0934022b4a1a11a93c89735186147cf075644f", 0x95}, {&(0x7f0000000c00)="1370a85d08ebf550f67bcb8047151a18e04d909be175ba789ac33429478ccbeb6d69d640f10da6fc01b989461c08a9e17101c2fbc22fc14ea4cb2e314149e130dd8ebc137a36f63d99830338f5665c8da629d3ccb4a5bd90525c1867b72313ceac5ca343fcacebeb6faa03ffa9313b5233006c564c5a8ec50fbcc5b0ac495cb35a35bc2d10d50ad41e270ad064344bbc793dcbc9130cb2c33e3447048b16f5c0eafa26ad3c4f628bcce78b0e01ec74e1df8f56fd404a1885fe0f6851b526a52538e92fdfd710bb8b5a257f6a0995e572c57ec9cf607ba16a343d9d255f63913a40100899fccb75b451a9a313bfb9b261c4dc3104adcc63755d7e1b1548161561e3ea304e73069c0bda7fbd7be6aaaa6172a0db440e9322b402c96f1aad230794a8a51a5f128964cbc8cbd760d16e89bbd1d397ee8dced8182bd2431e87854fde248d63c5180146c9d3e9f699e59f4e5db1806b5a0ddaace5466da00c2409e1c4b20969fbafd18177dfcb1dbd22966e406fa6586a980184958b7e993b1d01e84779efe5400bbe7bbdbd66f2389fb421b417ece925ce2c1891a3479ef8ebadc43817c5d97b0943e7661b1c9277ef02b4eb6b0543ed74b3cadb9762ec470e1be8b0637323b9c8c2df7bacf516866603bc0a4502b521d7cbe2a43fec3071ad48febe4e4983d61034f1521102811755f4843e1bce30239b1c924630cf0f3981d33232276f1eaa666cac5178c486546d3c3b25b0af2b3ded239587535dcfcabcdf383a8c4ac73d196bed83fc9ebb1cc62f9abb267ea5da0d6eda30b52ea307d0fe3cfdd436d63d99f643571ecb10f29758bc335f35e7ee93183f353ffce2e503f87f61cd5ade7445032aa36111eee7213f21c21243a44b7169491c3b14f5644aee82dba946e74a773ffd854e14c5b543c6e359493ceba770cd0d2089eb98348280e5fe42d3ff635bc46ab214a77f935e483a6a62eb918e21c6d339c33483499b02d061480e49409a609e39869a619579496e1cb1cfc970145788ef3772a5c3cfc3b7163f0230c6f6e29f01cc49bc95a5f80578fc1a1396e3c2f8308758070c2d4bb56f38417b6d73fda75e2ebcdd1125f5b512c27d6d5ef57ff2aa60e1153b7b1361740edf8e034da8afefadd3c8d95fa151fdb8561a28b8bbd622c09ac41b80576adacb2e18a1a583232cda584163c1835f01da063a8309fc6ba1d639e05909adbaa01e8f835bf4302419b4fd78c98fae5af202a99eed0867b82c6cd02b9c0a29d3c9682da2b7d4d63412e81275c7d3d3a953af403474185057295791324c3b93a408e7ac0103a9b697e1097f847ed4d0de967fae2d0d3d08aab020b4b3a49c400cec74cce7415fa33db305e0f1a6e009424008a079e2421ef529b81fd57e976191e70b9710d42f8f1545552aab4577f177ce022827fef20f7343486a41a8426a311d3dd5951cd9ca29144c19d0f70fe23621757c2ff0203dd93fc11a04eb2c0ea61885e5373621d4fb9fa077687c3f371da776c40165ce2f4defdbde4575225d60a0473c2d2b5caa0ee72542b11a10049686a9fc51b4bd38c953fbe992c337f3b58771f8b1a1f0b64de4655c8e4e9544d26b4f4acc717e8ab7777784c734a8c8e8e73dcae7b858f5ebb4cb28edf2cba5e4f9480d07af26af07ea408c1946c510d17d8a867ecd6a5ca876f46884caa4f7c7033dcf9b941ce8ebd6ddec6588775431abf15e23731168ab0bc10e9cd5e4be021f2f191759aaa9bf78c7fa453b9462e5ec86efeaf02240a3433d7dd519457bbbda23f63f80a23caf9e31ee5f2dc65cf0baa2028c83c35cc287eac7fea0f07cd59408cf63b7e2ad03ec48d0636cf9e0437e30bebcc951be775fd922b07d349a2b58e74e564b8eaac43312453a3840f64d5da9a68af7476e311a389873eb6e27d65cba5ad210ed55da95402c4ede65c574cfc7246ac4b16597f810d8fab8b8ec067704df57a621e361aec67b970961f7b8e04bde4d1a1a2e79654b3f5e26d6f9c5a13d57f2a0742e17ab4f8f436d4a3680b02860afac3249dce14282efdbc92511ab84c50a87c9d6fd7eb0d5c18d785e98e593c12a90c440029fd456b5f537d1463455904b2bdbca9517dcedaaa7feb8876a4cd1d0ec2fdfbba88b3cc1180f3db6952dba630341796afad570c910ace983a28624fae836391db91eb66c33fda4f36f68d010ca8b6d0ce23c9e6c9ae0fd694a61f010c35a206009cd397643763c204b1ea9a1fee746e72f7eaea147dfc58237eff82385dba3f01a5ebd8bb229b7c44f86d1a57c07bab179857a40b555a04413324f76acda176927af11235ec09be7e94bf6158a028ba4581314c327c65f048b5d3c15797b1c8201252ef8d6407f9e2fa44c431b4a671d554490b58084379a0cdd6b824f4a82163dee00a95372e0bc29ad7a156ce5fc9dd7cbd54526cf7eac82a43566fa3d17bb63db3f2457d24ac9e72f6032a91a7cb87a249c8b5dbd20b883fe3c48a321c77f603fc9df764ce3b2d0785381f79c37c9fb34a5828728e0bb411bab87ce5fe9f05e62593b6e0873edc17222b916d12110fba5833ee3872f50e4ce8b4321323678cef0d9735058e31c99637849bb6c1a99270312750aa65b28a63b099ac33f8a8a25ac54c7e6c39a9fa62d2e78c5c18b422108bdea510e19716652135468d9c9429c41831b31322b354de39606595ade04b1f7137e1d3e041917a708bf664979ea7d7ac392f8c2f2b7ecdab388a4233f4f9547606638cd8edd48d52f448b897b8256edb77b24a75a935467b07b70a4251856693cdf0e19e6af834e183ec7d27cf4adb0c68dfe13d5f5b162fbdb87de9ec581de7248864e8b2b15c67d7a4cd794e203ba82c3625783c1f6daf1dcbcd23972ceef82362aaccd94da312700b44078180c7e23804bac3a8c3f06253251a55d68a03423e7b3cda05981829cb27e56d3c1e4515a7976b5ce63a57419b61fecc74d54bc9b807108e04d696b3365789b27c22464c52a84485df055619f0cdc3da9846096766473d0463d26ca2817aeffdf4461d874f0e8f60189da3762dddfd5e5ac7f3aad1dfb2f9c75963df4596179bae8d1ea6d56f4595f5038c14907a7ad31a9692c1b0b71be4529a7e4fe3863471459ad52d2128fef92de63197aab4b463bf408d12e6dd1c5ec6ec6a4de5d56870d4cc7688d9ba0aa00cffa7a64a3415277d407c274ee545d186152ee777556a460a0ebafd6498906edbad0610a98c5b4f5ea26946f024799f1909e615d41273fe87660ce99d5a80a68f642544694e5b0de50e4e2c34a4fca59bd30756c20706960c043df587bbafe978889e1b445cdfb0e4de680ddb836966d5162e1bdbdd7e66b288c1d9c12cd55bab0c6bced2a01af6523f6cae74d5365039e0c00e96d6cc52d07e7b9d1e46de7bd07af48843ee8d00fdbe9e51758781846e657657b8410154db49d58adfd76df4c35d80f86b0c57b13e2ece35f77fd5081058b415b0c4631385756bdf402ce0c5eeb57d55dc3faee8935616b3d2421a861f930766ee3841589d7368bec60a0fcfa39515caa37b7358cbe43dbe6aad9a4c41877023acaecbb3cf44fcb556cb04614043b05761b9996f3f6e74c150f1618e33690ffa5952240364cd7de1094aaa22d46f74fddcee54c573fdf9daea8ef8eb9ec455a930d6761a48c00aa6fc15d25bf0b1f2c50f4fe0f2ee29fb628dfca4629ac4f065c011d61dd120768433f10b957642c54be7a8f105939170f54c6be9aea94e2edbda16b7ac872a11a4a33fa8ef143a431333a13c92ece3c0ba185b10e403f894cfb0295bc92f32c445e8d0d467ceb5b701c9a71d863a27038d91f06562db5a10c74ff4bed3d3847b10ee4bf5b40d7672a4e3749efb698edcc2167d2154a85b67fed0bc2d932ea0dd65c261a23323b3093544db86ac10912e3a9e8903c72907646b60cb1711d5da9b032da0439f4fcd9c009e1771e64a5216bd6c72bf66fbce9393eda63adefa148ba5ea5fea9f6464f0baaf1dc5e353f1d064be1599611f3ead5ac3456f3981fa76d394e52ef5eb467a9fed45fde36ac4e7498c41f758611f997a1a7985faf1a927600b2e5b701f90d599f21b5134b04a6776b8bd80249f6c68a95e5b97787ba08b1e5fdd027912ce92882a25149caac5465649afd544b21b81151a4a4748972ad95865c834897ca203e91c8fda40a78730afc94237b98dfcd192ef481dc00f0c00c4aa775c007f3728e3775afb01133022eff6249c3fa4dd75098bafd76f79d52bfb08f4f901dfacd3abed5dcd2b41cd0242ed43e600989a1ab186463061f5e62bfe11fc7dc724a9ffdf67c87c553094109282f2b853f7f3e34cc4f13af75bb62156da5d389e1c69146fd38c9ede3510c86de7f4e60a227bdbdef2f0666356bca0967ecde54cf6350950d6369e2b1dbfa8e1812f31607d5b6a274eb8f9bd38577a3e1490a347ac1176fb33a3d8c559766a88517cac8ed92f9b2efc261ec5f23e2b70c162d06484146a3587b3111b66758b759d48c8a14d7877c35e904f6d5ca57c327c2c0bd5f6b4d09064fb3d2562928d67450a2acf4e6d07c3faf2adbb712e1b7490c4e7bdfc4338b94bd05db1618ff15d209425f55e9e12f2fa3ef7722b34e4d62f9f03a079e7e0b8bab832c4433a8f344629d90cfa746c93c53916ec5e1602eb23b1bba4b65fabd46893cc7a98f973cdfe776f492135714fc4269c5fd9abb50ede78b6c5ca6a98c6c153fc9486387847d40ba1e0e97467e52c011fbd8f02768acf8a3809bd2ba110ba79ac86f474e74f1f72951e546a906a1bfd587405b8c2c691c4ce813e095c084ec09f441f4f04e6a0c3f7af064fb554916e72c2e9d51c54d84c0c10f3d9da4a3cb20972b7c2a2e9966ac3ef93216f2d8ae6fca315ed49105acc3ea3e7c81865195c73aa3243ef087463746ce5802eeb09faf63ede99f28895a08a3a6013f709ef5c276df5e894c42220e9772a54ec9714e348c961fc9e512a331d48c3e1163d281ecba247718b2e7604d3c5cc0b0d0af2f200d9ef2c92e4fc8aa345af0e5d8923af89ce739eb5cc2d5b6b399187f28b1c7653cb7699ce2e354a77ee704a28e89abf37bf9ffc9bbb237ab85b934f642476a8c36669a233813ccd0d719dcd104542f92c618a815553deb59ac0a3c7dd2756faeb927d2072f94b9d49b9b84439f82298428918164b45c94a28b6751156210979c7fafa3095ef33e96214182abf98d1204ca7e3b242f459ce462e8ccfb8cd3aa325602f686921a77ba7ca24ac72456429021a52bececa4f9c2cbbff41ef571e0319ac01ac8203a927ab208e5c7b629ed2c04fa549124405422f6359fb42e32ffe1229ac2159663702857d8b849a645a35febf3efd623b99e2d45ab13bb474cd678c2847c3b3f74a71daca7a9c9b62063027736c6c93d7ef1759f1b2b6c2587bc15afaec8f1356911519678cda413e5b6a37c54b77e6feb25b3fd67c834d2317923162e474c2bb4a272b224374081edca96d16a0f8d679ab15ca07e5fa60e57e69e58a878d6c89058a5a51204f9c35cb2365849bf0ee6160aad67aff39840e1ecee82c34cd1529ce700", 0xf6c}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000000)=0x3f) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x6, 'ip6tnl0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000100)) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000000)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) [ 1219.826487] binder: 26690:26692 unknown command -2048615165 [ 1219.849144] binder: 26690:26692 ioctl c0306201 200000c0 returned -22 13:43:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) [ 1219.891138] binder: 26690:26692 ioctl c028660f 20000100 returned -22 [ 1219.927509] binder: 26690:26697 unknown command -2048615165 13:43:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) [ 1219.954441] binder: 26690:26697 ioctl c0306201 200000c0 returned -22 [ 1219.967409] loop0: p1 < > p4 [ 1219.988130] binder: 26690:26704 ioctl c028660f 20000100 returned -22 [ 1219.988706] loop0: partition table partially beyond EOD, truncated [ 1220.074929] loop0: p1 size 2 extends beyond EOD, truncated [ 1220.195853] loop0: p4 start 1854537728 is beyond EOD, truncated [ 1220.436161] loop0: p1 < > p4 [ 1220.439318] loop0: partition table partially beyond EOD, truncated [ 1220.446481] loop0: p1 size 2 extends beyond EOD, truncated [ 1220.453701] loop0: p4 start 1854537728 is beyond EOD, truncated 13:43:06 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6e1b, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x42, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) 13:43:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 13:43:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) 13:43:06 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/157) r3 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r3, &(0x7f0000e47000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000c80)="1819105e7912dc1855fe383cc15979c9fa5c4670654cebb6323b98db25b62be7dd83da48e4c2ebfe7d38808e161fdaaa2ef6034b8b153fa646266d2cc0b16bfc7fa78f90adfa8a7e322f2bb4e6323ea81ff0d212594b6a959e7cffa4d516831e0200129ca5c2d1d4f9cb5312977442b07a9d561d305436dda21a42610819a404923eebeb385a0815e5165ecc84150fe0bf0ee473e2e2c00480ace458e38f7658c3248f0af8300e506723a867d1d1a50367bf26f888738167f8bb0361c215b088a419f9b5fdac4c235e34b76123d188fe1bc356195ece68c6178b9535267f3e3b1d8ab374c4ab050c107dd3dbe4b7d44c38e93c64240c1621e6bfdb94bd69f0b6da62d9a04fa5bbcb07a6c990ded2bbf43884b6396bb694cf6cf6f9015ad6770144b11a5ddfc375b4418c914658d9fab32fd8a9730e576756d1843405aefc86ce6582d2986c07591664471e981aa3a67434df2a5bf3aa85c348be37cf72d42cf10f953bcf6809bd64a2b23e69da510565819514298533aaa20148bfb9867c1b5bd96eba7c0ae90310bd0f5d30115f36966ed625f86176a9b92b882b6d2774c9bc4a14e6c8aaece72b42629c61892bac98783d72512b4bcdd4fb93649d7d0d473fb93765230019d2e39e47dbae5cc0b18fabcaaae1711526e0a47ff71feadce4a1620b30b0d6d9092fa18f4c640d87acb3b7ba86079d999b1398208e9d3fb2f59ac81b580c3abaf0061de21f591dd938c8f3f582f126206f2deb07dc886b54113df0e7b57ca06e3bde022f4d9622dae3e4fe97131257ee00e4dd49325742b7407cf2b26ca494439f547dbed2dd8c96840349fefeb18a870190a280399f2ddd5abf8e453ea36ed0c2dbc281fbf928eb9d274d5605a11c54bfef9f3a8e631f0639e3e85cddf9eb713228db82d6d6d960264a52dcb946914a8f49372a3c1ee27d5cb63dfd66d2f3ecf4dce8573c119f651ce9ac1d264014158286a8420772780d49af998bd91813fc20c6a04ea6fc12c0bec1dd1055957836f674fee0a8e4c801c444ce97b5e23c792a0cf7034c7b35fabca3b0467f139397de89dc86e730f383df6fd847c47e38abe903374087606ee5b65c5aef14e07fbb22e9c12144e26ecd62dce2ecab809d7343cd62a268005af3522d004600144a0935526a976574156015006eb10cd7be5cfa1061b025160f170478662f1791b0ab64861358528f477c4d5f66229e4e56465308366c101772e9d29343447ea95a029f2fd1bc8255cfa0ede1d868b3e5649108007c3080e63d19b968bb92cfec5053c803ad0f8785d35f2f8bcc2474264eeb61f49155c357c189f2919568595a7c78af3d9a2026afe5cc572c7fe8ed8e4ad2792439e6abe2c37d72cb44adb45f4cbe9f210f5f082c782e1b9730978c607f7b47b3845c11ba44ff97331af38f1758e5335694237173efffb607b7960f2a007bc321ec78e8715b9f1c58ad4b98efc90680e5969cde046eb6246f94bf1215f9529fc0309dd0a1a2205d0ea68cce1c95c454e84d59c153dc3e94b53930f7d6ed5338d6e2b7fc72fbc214cdbaf4b9aa705a709230f04d64c904b2cd94bf3b524ca1b1816933b26f697f454054e913c46ec6733e0f13f47b6c8326c27af9c01f1895e1a25f1f52a42fb284ec79eb7b0ad36575e54aae87c39e7d96ac1b2736642ff0a845c280ed131c57637889cad6ffae507b0374cbf5f1341b4880d6d40bc72a3f5372be95194f9b83f3a482848909e20ac2195ec74acbe8fc605b2722a6a0d07ee77aa3e636e18d9e786d73eade1eaa0fc57fdec17af338a0b5d53180c582034dc11cadd03410d90ce86325ded7244082026b63f4eb607fa54fb5e38663abece9cd20333d98f0c52c78017fe9558a4cf0c79ea1d98198a367642ba55b6e0a95c0d04bec99d4f74e99e244fcb8438b6eccdd155cc9e7eff6db32ec147e73f2555a5da7d3b751bc497f600cbda8a0bb0d6e8b72a2ad15213dcc5b272dff6ab138b294d6e078134f6fbfb026097a0e0b284de84c3ac593680545b2f39d86c23967cd75d7966fc597dba2f6fddb32b9e70f9476bc9e150f359069b7c99b28182d450158b16f85e367da06ae8cc5557e66caca6f252e41eae9ef8864cb0c3569ee9beb0b3e49dfae87e5a2641cedf70ef7f39982958a2a6b0940bd2a4492e8102c090b0357d4a2183c7c2a314b3d8bda42fab38b5c3cd4801adc3038674b126d22f6baa63b520fd6aedef170936297e6b06a8b0adc803c69101ee0c3a8990c49d40693a44cfab394c5983a9a7f1f3572c7f0c817656e5d0dc4f604a19adb0ce3430631edca8e443b438f1333df38ac6e3cf8d53ff444b1bcbf726eeff5cccfbd990dad2fbb10724fb8419adb02b3fb1c00768c9be12fa2ccf08d0475e9570051fb5f6123ca0336388e2a19126de857303393d760a6c8e4d38e9b8d708abc17850588c016e0ef508579b4d5aa0bb3afed87f3b93f68c464014fea00c82885867496fcac6cce4481e5199b7474deb687403c5311d155ecd1a24c057b4e8043245b3ee89bde4515773e8861a335b40f69e7bf7c840f7822ca934d57c5ab0820495205814e2549f156231b9dcfd5baecd51c4f2cb8d305039cdabfab3f4d98b50937b62e5106adc3b61ef7af974e3792772bf4e3cb13820d75a7cd664e0fcb00e5b77615b2e4c535a36ee6d0df68c678b33024c6089d51bf79a4bae8dec816659c585a26c5f67331dca281ecea6f6fde215a098ad54bd095910bf21fa6c6805d2205b2c047d8877a04991a896f4871a29a8bbfc83d768094eb262e6a5d0527eb5b49868ef07f335e19a11d0efc9a2d325cd292741333b88e0571c24510fdd70b1d602539878f1fe1d8b3700f9b26d2a393919ce3e5f8a793d8e9eb5e4e68126479c1a70ac9e868c4b2687deffb782ab3fd0b6bd35e577c5b24adcff1186dd1dc27962cc0d5367efd05316d540651715e9eaf1dcff173548bdb3f13a3029be2f055c3b83b37f71de4b124bf61105b3b90c4002b4fb1e690d82fc05eb4d9dbe11fa3a43500e622e82526b124f8989a4d56db28b229a00e219ab6bd4b160946b3d9e5d526de6c44ef60962883ac59712aae4b4cc3e631a276b09bedc162b093097c28f5609d2e2146842a57a42db926e6b5d0e9f67ad8ac47e587c8901f2b09247e86de92f1b60704c4cf2fb5429d3c3ed45a98425ccee5c3e51ad9148bfef166fdf0f6e040a3cf442bddbdb35d2012b0d2271dd7b2d568bec2adc8417484857dd2f48ff1fe07affcdecb67140471bb506994ac547f6b6fb04d9840030b5f8535413802932ce93f47cde09e61a49c242080c9af8ae5ff3efbe2ff551c6d1d2fd7f7d235acc93cbfb8d570f5da8718e0516a319217c90c8ce4ee87fd293ab0909f5fec03e8c72ef7fb0816b72102ea8dea4a066221ba0f5e45b2b87309e9a3a0ba96a9e0a9014feaff77bdd15b1becc33388f63501dfb272478b3a55d4c2f9f22733e6027b15ecdf652cce939c58b1e82681a71cd82cb0b12ebb2bf7bdf23d8526cb6d46fea85f9ee2ea546d996f87f282d8aeaaa59a8f07c67d698a18930ab3a2da2db5bf08524116a0879cc5fffb6ecf8758fa80b58b7464d537d0dc5a23a170d2d8d9de1e8a5de3c35cc852b1bdf627185eb4582e748743e704fad1710a98a7acb31a3b45ff9fcdcaeeb54f00a68db89114cb77a760a2cd4c3fa3e472a2732f3ee1efe911751f1fd3967064b794efd36b896f1991c2e45391bf5b5429ef2a44ca2bd99de1b17450965605ed24b3db439c6a57d6471eaa5220b5e5a83a70bb6912e03323f6f08e5c4ae326c7103b15fe5946c7b09a74a475dbb7d1745db6ceb4894cae7039d6cf56f8affab7e41e3582eb3411522cfc7db794ec2d4776349207c925dd1dbf4f98d6556c4fef568d8adc01f31f709fb6813898a89f84a2b63bcb67add48911df7e685ca6ec3671043461ed26f09cf0aac8f1b28e49ff769205eaf87db897afd6d1f88f2ddbfd96810a5740bccf54b7cbd2426b8cece87dbbe274adf7f1a60e36784b1317b93c6ead486c0145f576092ac384e8a302414ef10c8aa888f50b1a76a4cdaa09f30105855246575bb8a1be7a34e2cd9cd7e5e93c11c1c7fb7b6d2041bec21ff8d360c5e44094d8777f59095162c2e9d75a104daae91c7b9ffe83bf86657833bf178a455e913c33c26a192334ec715c9fff93e43f120dd18ff290ed5a2d79e6d091588d3d0838e61b64777dc5babdddf6d9356875bd946eee1cd88024f886cd4c0e2f32031edd0e2c47972c1d944a8fc8753893f7472085e29d20c089b6f8f66903bb7066e9c4c29dafb43b83260aa3b27aaf30632b6847f0a10589cf10f5bf452ba1b05eb886921555e54860058c2386ebce3a1ca7d5c487bb77b455aebd97d9255b706f3dba23589c8c3516fdf6b59d2f4c47224f2299b704fdc84b41640c8469013dbcc194e2a208ab978fdb7a057ae64d25a7f5251f313ad72c1b5ef73e95ef89a2e0642a207c53a9e1a885a6c61aca456a5e8bed47f3b2c558a81e2cb09f265ab6da627a314616a5e46153b2b7d7a38a2cb88ecf1d22ab7c8e4354bf07cc04b728d3127e9741a88453d1aebe394224ba48b781d263bfb94629f2165014e3e3fde943b85affc5c564f72b76193bb2f548a0ee6d31be424f3d87ba7ade2eb5908573a8f6a1664d92389564fe91afc7de61723f1b7211700de88a0ada1eba9d6a5ecd65e6179c5943ce010686a5e2ec8da1d5436582ac6f321435e0375af97375415bc4f8a9c9e4f85a2e358d4665375dc812ac3ba568f8e1ae6bb37e5a9ca2d3a1517b843d498a53f5a8913cf4f25583df9442a7b9119b3ab78268876aa7e1787cce2ffe36e1ee86f1a3fe5ec9832a7e6d4485551121122261df5af498bd805739f2b2cb8c323d6abbef1c2d07d0b3e0754cc3650a032652311c882ffebbaad8a90f7effe62bd5c469f7c225215cdfb1eef33995da7912afc9c51193ceb70da2ea9f894c5a49e318c2978bb4ff276ff330a7d26034f9fd4984ea5da4aad8533d3aa7312aa0f3295b7272732bd67e2d4975c586b5c73059de7f93c3dee46241206c9e7a77018e76e88bae44c8b81593d2d2d38bfa5406b932c4f2f98c54f1f01cbfa5f42074aff3065e32c92bc6236eab0838a3e57e8b6705b8e4e52e83b069f2ce2efb70fd4218ac1c3291be210c165104047de4cb2eea8fdcc4b986fc391df7343d4dc83ace6781821887f5abf092b0b3997605c3be9d653a4651bbf5a2a986eedd813f786abd9e5877dc50a936edcc9e5b42d46544373b32063180398c39b41e310d5847ad0bd1e9c0f7023479a2f8fd5004a41e1865adf08555ba63b64b6854ce5763b656ccbb91724ab85ae982520c492a76934efca8716ab5b8649f4ecaaa0b0a4c917b10a32de63e0f5b817cdd69f2360148c39ea5e9b5c73333a283e57149d8044c09d9dd31504282172687fc6824204ddbc148bc117dc495dc9bf991bb158ce5f91acb1d29f06912c807e639bdae1225deb6ff318e19ada8597cb4f41fb12e444bcb1da09b1ce276de4a8fca650e496e816e500136260cb078be76741f69ea94812571b991e24b5e68e9c7bfcc77a3d074aa007cb6624fe2ef1e66d40b78911fcfa8b6f79470d398212c0071989a1827a8704b6b090cf636ec4b0a8e1e1adf801def972ce4c44325728f10194960d9c76ae3e7c354524762aa16f11fc62c4e3a860c9e5650efe31f3d8e35b8acd9246985c8792e9beb66e376da41bb45be14b7a8d1b8b7988d98bd89187fc3166e701450", 0x1000}], 0x1, 0x1) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x402000, 0x0) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000006c0)="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", 0x13e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r6, r6}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) r8 = request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='bond\x00', 0xfffffffffffffff9) r9 = add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r9) r10 = request_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000400)='\x00', r9) keyctl$dh_compute(0x17, &(0x7f0000000440)={r7, r8, r10}, &(0x7f0000000480)=""/146, 0x92, &(0x7f0000000680)={&(0x7f0000000540)={'sha3-256-ce\x00'}, &(0x7f0000000580)="ccc5dab5b174f90568c9d014f316e6c46852edee39874c0d2565fd201bcaa8e9a13270067e73bc3cb81b33279b34c897129f0aed4188fd86f0f5de9b21aaac9ef974953d5329a367df9524ca7c94a1742007b3eb3e3864441837be05e8866eccb3b6dfdfff8e3b4db737baeb223cedb359124bb3aa43daa77356eaea8dacd4854bc928124e4f67b1e3d05c270eb12f6f17d847d9ca0b0e771071a522d1fc84fd1e9a90b432c9adcf5063cc1f5877347175f44f8e734d99002197747c0cb5120883a824de2e680306f20705b1b3f9ca7d0867947e8c16c231694b71bb9a98a5b8a427a6826a4dcf56f939d7a805c7", 0xee}) accept4$alg(r5, 0x0, 0x0, 0x80800) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r11 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r11, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r11, 0x0, 0x4) [ 1220.638766] Unknown ioctl -1073449922 [ 1220.657008] Unknown ioctl -1073449922 13:43:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:06 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x1d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000000c0)={{0x2, 0x4}, 'port1\x00', 0x48, 0x20000, 0x7, 0x20, 0x4, 0x7, 0x8d, 0x0, 0x4, 0xc0}) 13:43:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="10000000000000800100000000000000"], 0x10}}], 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000380)=0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000100)={'teql0\x00', 0x1, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="036308232cbffec0", @ANYRES64=0x0, @ANYBLOB="0963104000000300000500fda1f8ff00000050e70140d91d08"], 0x0, 0x0, 0x0}) 13:43:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) read$fb(r3, &(0x7f00000000c0)=""/32, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) [ 1220.904087] binder: 26754:26761 unknown command 587752195 [ 1220.918808] binder: 26754:26761 ioctl c0306201 200000c0 returned -22 13:43:07 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6e23, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) [ 1221.001768] binder: 26754:26768 unknown command 587752195 [ 1221.028875] binder: 26754:26768 ioctl c0306201 200000c0 returned -22 13:43:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x7, 0x3d1, 0x401, 0x3}}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:07 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000000c0)=""/158) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:43:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 13:43:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200, 0x0) getpeername$netrom(r2, &(0x7f0000000100)={{0x3, @null}, [@remote, @rose, @netrom, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000040)=0x48) 13:43:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:07 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7622, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 13:43:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x220, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') write$cgroup_int(r2, &(0x7f0000000080), 0x12) 13:43:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) 13:43:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 13:43:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x161, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1222.112017] binder: 26833:26834 unknown command 0 [ 1222.128935] binder: 26833:26834 ioctl c0306201 200000c0 returned -22 [ 1222.152913] binder: 26833:26834 unknown command 0 [ 1222.158962] binder: 26833:26834 ioctl c0306201 200000c0 returned -22 13:43:08 executing program 2: r0 = gettid() tkill(r0, 0x3c) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='_hiMdren\x00L\xc4\x18V\x94[\f\xb6\xa2\x11\xae\x17G\xd0c%\x98#\xae\x94\xd4RY\x8e\xe2t\xc0\xce\xd7\xb6\xd6\xa7\xaf3\xa8x\b\xa6x<\x96\xb6\xda\xd5\"\x86\x84\xf3\x14i!\xa4\xcdk\x00\xb4d\x87\xab?\x11\x04\x8c\xc7\xa0\xaf\xe8\xaa\xab\x814\x93!#o\xbd\xf6 E8BdM\xb0)\xaa\xeb\xb9\x92\xc5\xd5S\x9f\xb9\xcbQ>\x8c\xc3|\xba\x88\x10\xd6m\x01\t\x7fs\xfe\x1f\xf4\xafZ]\xf8\x99\xca1\x83\xe4\xe5\x16\xbd\xd4\xa2\xfb\xe7\x87\xc3a:R\a\xd0u\x04\xad^\xfe\xc6\xf1\xc3a\xa9\x1eM\x85\x12\xb7ps\xcbT\xa5q\x13\xe0\x01\x8en') write$cgroup_int(r1, &(0x7f0000000080), 0x12) 13:43:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:43:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:43:08 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7623, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="d04be3f7b3a00f8e0800"/22], 0x0, 0x0, 0x0}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) time(&(0x7f0000000100)) 13:43:08 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x94) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r6, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x4, 0x0, 0x40000, 0x4, r0, 0x2, [], r9, 0xffffffffffffffff, 0x2, 0x1}, 0x3c) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0x34, 0xa, 0x4, 0x20, 0x2, {r4, r5/1000+30000}, {0x3, 0x1, 0x9, 0x6, 0x1, 0xc0, "20b18864"}, 0xdff2, 0x4, @userptr=0xfffffffffffffffb, 0xfffffe01, 0x0, r10}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r11 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) r12 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r13 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r13, r12, r12}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) keyctl$update(0x2, r13, &(0x7f0000000200)="df28c05c614e5bf9c4c0b670d438aa6ee6270b7743c272d90ac593f48d125daec788bcd0de4078248a5fb63c04150b0911c174d8c243e7554c6c04ffd90c0f241faecc4bd1a922382514b4ed72b36a5d2ef894bde8684e2237cec64526293d4f9f5fa1f3cef127fc39ae6c457edc3e8cc78ed50073", 0x75) write$binfmt_misc(r11, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r11, 0x0, 0x4) [ 1222.380005] binder: 26845:26848 unknown command -136098864 [ 1222.394246] binder: 26845:26848 ioctl c0306201 200000c0 returned -22 13:43:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f900]}) 13:43:08 executing program 2: r0 = gettid() tkill(r0, 0x3c) r1 = getpid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f0000000b40)='oom_adj\x00') r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/252]) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = open(&(0x7f0000000340)='./file0\x00', 0x208400, 0x141) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000380)={0x7fff}, 0x6) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000003c0)={0x8, 0xf1, 0xff, 0x0, 0xfbcb, 0xe4, 0x58, 0xdc, 0x7, 0x80, 0x9, 0x1, 0x0, 0xffff, 0xff, 0x20, 0x2, 0x0, 0x2c}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) r11 = gettid() ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x0, 0x1, r11}) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r13, 0x0, 0x0) r14 = getpgrp(0x0) waitid(0x0, r14, 0x0, 0x5, 0x0) r15 = getpgid(r14) r16 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r20) r21 = getpid() r22 = socket(0xa, 0x3, 0x8) r23 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0x3769, 0x468800) ioctl$sock_inet_SIOCSIFFLAGS(r22, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r23, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r22, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r25 = gettid() waitid(0x3, r20, &(0x7f0000000780), 0x8, &(0x7f0000000800)) sendmsg$key(r22, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX=r24, @ANYRESDEC=r25]], 0x8}}, 0x20004850) r26 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r27 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r28 = dup2(r27, r26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r25, r28, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r29}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r20, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r16, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r15, r13, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r29}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r29}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r11, r12, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdbb, &(0x7f0000000740)='eth1[[\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='team0\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005540)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000005500)='bdevvmnet1\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r7, 0x0, 0x0, 0x0, r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000080)='cgroup\\GPLppp0ð1+:\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r2, 0x0, 0xb, &(0x7f0000000040)='ppp1vmnet1\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)='/dev/sequencer\x00', r29}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', r29}, 0x30) r31 = syz_open_procfs(r30, &(0x7f0000000180)='net/rt6_stats\x00') write$cgroup_int(r31, &(0x7f0000000080), 0x12) [ 1222.426134] binder: 26845:26848 unknown command -136098864 [ 1222.465648] binder: 26845:26848 ioctl c0306201 200000c0 returned -22 13:43:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @acquire_done], 0x0, 0x0, 0x0}) 13:43:08 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="10000300000000000100000000000000"], 0x10}}], 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x9, 0x4}, 0xc) 13:43:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:43:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21a8c007846dfc44) getpeername$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$notify(r4, 0x402, 0x0) socket$alg(0x26, 0x5, 0x0) 13:43:09 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:09 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x77ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f902]}) 13:43:09 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0xb1, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}}, 0x108) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0x7f, 0x9, 0x0, 0x3, 0x8, 0x48f}, {0x2, 0x7, 0xccc, 0x3, 0x9, 0x6}], [[]]}) lseek(r2, 0x0, 0x4) 13:43:09 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x78e4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000400)={0x0, 0xc0000, r3}) fcntl$getflags(r4, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="09de32321df9363107cc68c55c30c5d6b9e14b2ec83fd0c182000000f6ff00000000"], 0x0, 0x0, 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsu\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r8, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r8, 0x8000}, &(0x7f0000000680)=0x8) 13:43:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f903]}) 13:43:09 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000108000000000000000000000000b444779189b6e170aa475091fdafc0a867993cd0bb413eb55bb6a0764c8600c433b4f5f053031c3bb03a617c555bb56101b711cf19ecf489019cd2c30d5c6d4a91de3813da7989465d1f3b61b55e954113a4a4c96d6659d7e3827f1a", @ANYRES32=0x0, @ANYBLOB="0000000000000000237c5f9a2bab2b37c71d31fee0bb6f22dd0fca0b26e50729f0e07a52d9dd776a4509"], 0xffffffffffffff84}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000540)='net/ip6_flowlabel\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x1d8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x19c, 0x18, [{0x48, 0x1, [@IFLA_PORT_PROFILE={0x20, 0x2, '.}vboxnet0/wlan0nodeveth0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x20}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "03d05bbf764c4cee0b28dd849f93df43"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x9}]}, {0xc, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffffffe1}]}, {0x28, 0x1, [@IFLA_PORT_PROFILE={0x10, 0x2, '^ppp0ppp1\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f5911a7a263f0659caeb4e51352d6a4c"}]}, {0x9c, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "44f99dc03b143462e6d5bedc9cc81dd6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "38696df55fd351d6a0a8413468207f2c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7f896122908b2bc3b03ab6a951f03ff7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6138d4d5b2f3334820ddfc1f3e1b83ac"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x13, 0x4, "9809cf092d5c1d43d2e55c8662a6e0dc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7aec80d81afcd51bd0c534aeecb9a1a5"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x10, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'bond\x00'}]}, {0x70, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "63d3d38006c51b0b656983c359d8f723"}, @IFLA_PORT_PROFILE={0x18, 0x2, 'net/ip6_flowlabel\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x4e}, @IFLA_PORT_PROFILE={0x2c, 0x2, 'bdev^posix_acl_access+vboxnet1/md5sum\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bond0\x00'}]}]}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0xfffffffffffffdf6, 0x3, 0x7f}]}}}]}, 0xfffffffffffffd09}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000180)="85171df51500b719c3a7c6ff07c68bbb5795c0805a618309f700f5df4acee503e2adad8c4e9df4b9af92966d67da4bed0efbab6f90c96935f5faac90e87a86d550cae6f8ca70f6f88c048d62cf4febdeaf218119f877ec4ad9dcbf6e6c86cef6b046281d183f49b680252a94f7d78ff9c6bcf17ec2e5bdaa044426d29bc074ee9935574dd11d76b3ea7527c487898af432e5701bb91ef8850ced1ec6072de3378b8bf805b688507bd98bf343ddf760c8058b0d68149bdbc6ffa319789994f076dcbbc4b76d4f2532e133947dd0bb1cc3241385a4a305c6e581bf39c870cc") [ 1223.404696] binder: 26911:26914 unknown command 842194441 [ 1223.422746] binder: 26911:26914 ioctl c0306201 200000c0 returned -22 13:43:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) [ 1223.447366] binder: 26911:26914 unknown command 842194441 13:43:09 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1223.491260] binder: 26911:26914 ioctl c0306201 200000c0 returned -22 13:43:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$cgroup_int(r4, &(0x7f0000000080), 0xd) 13:43:09 executing program 1: rt_sigreturn() r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000100", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) 13:43:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f905]}) 13:43:09 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:10 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10400, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:43:10 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) read(r1, &(0x7f0000000000)=""/70, 0x46) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:10 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7e1a, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f906]}) 13:43:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:43:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 13:43:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x5, 0x4, 0x9, {0x7, 0x44}, 0xafc, 0x101}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) pause() ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000240), 0xfffffffffffffcc3, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$UHID_CREATE2(r5, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xca, 0xece1, 0x1000, 0x5, 0x6, 0x1, "98cdfb2ff05ffb1dc3cb641a3611ea1db38598d16e918d5feb507e915233158cf11b572a50f65a0d283ec9450b14edd453df4b5e9089dde20c1edb810ad6a5a7d15a0559699cd33d9949a334917bc506991155cf9cfbadaced87f7011635d388d9b6480c00fccc1e1c4067f854bf69429a0c6f164f55cddd29cffa48be78672be78950e17d122745075b511255124ab7abdee164c724a38b6193735be62cca8e45ffe6385e947163fcb910137bcb573620ee3451c96b0d45899b7e8fdeef8f16486108165a973be1b158"}}, 0x1e2) 13:43:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f908]}) [ 1224.138663] binder: 26977:26982 unknown command 0 [ 1224.143657] binder: 26977:26982 ioctl c0306201 20000200 returned -22 13:43:10 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7e24, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:10 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x7}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) lseek(r2, 0x0, 0x4) 13:43:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="3705d8edf4428f0bfeef1d577b5e97cc0c45bf660134a9aa7cd58f592b0b97cdf955e4748ed9309fdc476c502813f9fe649fc63db0399721927a5c4f3c4e55e3a998641b15f1caaff67f2372bb9998a756d5a487928681f9522ce4aa0229c7e46113b8837c616533f321a8810a9cb32bb02e82f61890e4036e2387748db68a3fa8a42386a525bef2dc1a0d3fe190d5feb26960da123fdfde2ddfd8457f596121d9a4a3d60626d29c7132d0b2a9b3a133eb1618542c1341e48a63b8ff73366950d6ef9ec68de777b9e13bb3678846056ac046e4cbc6570d352d3fd272a7239ae1974f", 0xe2) 13:43:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:10 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7f02, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1224.924026] binder: 26977:27026 unknown command 11 [ 1224.929334] binder: 26977:27026 ioctl c0306201 20000200 returned -22 13:43:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xaa340, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @multicast1}, {0x6, @broadcast}, 0x4, {0x2, 0x4e20, @loopback}, 'bridge0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="bb36a321ab3bb8570347a3fe50da0362e940", @ANYRES64=0x0, @ANYBLOB="09631040000000000000000000000000000000007d61aadd3d315e7003e66314badc88a4196be47ebe836ef3e17bf9509405e29eee526bc400160653a8c8c6ab9fe0b10f376887c8800156ca6574820e620e567446ea1d754b8caeec507092c375eb2a0294115dfcb724875c89df575f6af61a04e7cea2b8ad429d942bdfd10075c58d48a2668033b2a730ea6d6300575e8b1a6c715c44c0af62336468885ea56673127219a6acddf71dc0d7d953b46fa59fa34e1148dbb0bc14d17321d32fc377be739b45c9ff77fc4e2952f5af0d"], 0x0, 0x0, 0x0}) 13:43:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x3db) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, 0xffffffffffffffff, r2) 13:43:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:11 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8008, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1225.046515] binder: 27032:27035 unknown command 564344507 [ 1225.054188] binder: 27032:27035 ioctl c0306201 200000c0 returned -22 13:43:11 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x62, 0x160}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40c382, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) 13:43:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x8, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @bt={0x200, 0x1, 0x0, 0x2, 0x7dd, 0x8, 0x3c109eb9, 0x0, 0xffffffff, 0x20, 0x0, 0x1, 0x6, 0x5, 0x8, 0x0, {0xfffffff8, 0xffffff7f}, 0x83, 0x1}}) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b74a9500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r5 = dup(r4) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000100)={0x3}) r6 = dup(r3) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:43:11 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000240)={0x0, 0x8, 0x7, r0, 0x0, &(0x7f0000000200)={0x9c090a, 0x5c2, [], @p_u8=&(0x7f00000001c0)=0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 13:43:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:43:11 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8405, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:11 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:11 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x6b, &(0x7f0000000100)={@multicast1, @dev, @dev}, &(0x7f0000000140)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0}) 13:43:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f06e]}) 13:43:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c400300bff489fcd62a72c7caeca891557cf6b90000"], 0xfffffffffffffd9a, 0x0, 0x0}) 13:43:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xf99800]}) 13:43:12 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) dup(r3) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80, 0x0}}, {{0x0, 0x377, 0x0, 0x0, &(0x7f0000002940), 0x10}}], 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0xc) io_setup(0x200, &(0x7f0000000080)) r5 = epoll_create1(0x0) r6 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1a000, r6, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r7 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @remote, 0x3}}, 0x80000000, 0xdc, 0x1, 0xe7c, 0x29, 0xaa0, 0x4f}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r8, 0x873e}, 0x8) write$binfmt_misc(r7, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) lseek(r7, 0x0, 0x4) 13:43:12 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x892f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080)=0xfffffffffffff6dc, 0xffffffffffffffee) [ 1226.200495] binder: 27103:27104 ioctl c0306201 200000c0 returned -14 [ 1226.232175] binder: 27103:27112 ioctl c0306201 200000c0 returned -14 13:43:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) r1 = gettid() tkill(r1, 0x3c) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xd7) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:12 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:12 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8a95, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:12 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000380)={0x0, &(0x7f0000000340)=[&(0x7f00000000c0)="15fb21a73d336c363791e5a72f27e4703a3f353a23898a87f9c14573", &(0x7f0000000100)="be42705abcbed9737e0b42ab8f2199230720b3f407dd7e0d385cd965593fef2f416015dfb740e31120abf5e0e03929965fbb3e32229b0761c80a1514ae52b8212b2bcdb565064c43c0448846017284eeb4f0ff2d18d819d086", &(0x7f0000000180)="7788151d9fe79f88ef6a5c8675cf201c7b4d2746b6e53dc072945f64870c9c5764fb91d8d20a9dd79ff6d2f8594ea78764180497f5e536", &(0x7f00000001c0)="7a729ca4b0723308267ace20d265e4ea42cc8ec761f27dd72084568cfb259c5be4f87474521d07a1208bc466b9b7d57468dbc44cb2d1669343d2c5e1d5afc59db5425c8b57f6cc6b25f4e890dff224d80154321baa2f9d56bddc2a401ffbc376e3c0c70012ebcd9e7e3ac4229abaa2dd56df8dd8a1f28caa3edfa95b13dbd21dc8eaaf70c18b2200b3aa1deecbb9a7d25d0955f3f3", &(0x7f0000000280)="b5bd1b174d4cbf803050c7f0b638aaa21cbec1e2c62a47b3ac0da2277facdfe9a0dd9de321ad9896f7f8a2825947a6ff0fdeb3196522e840b20d0335f3729348557c0d13480d828e6ba1d77a3212a2db65a24ef92b42e91d66027f4807c45331879877b623bfbbaa4c9b11f7339976b53ab17bac0a9eb11c927b3bb3cb58e5409679e39f544327ad89ceda1e8411694408e1106b", &(0x7f0000000400)="665459baed5a14e4275a56d05e92a108de811223f704e275a303c5cbdf3dbe63b6d69f76504337ca186804c4290214187d2fec068cefea474fbd9ed3be23aaa1b946775e8edb45e2edbe0cdf9104a6eccd07bec4d5a4e81ea512ab3e3caf9fda5bce3daf0a4296c9659af04f3bf0754b3acd82604b35743e9c77d1d31639f589f3ec678759d65d68d2878cf90017014dd03e3307646cf2b144435e200e3ddd6b710a7504e42de869402316ff660e6c00674eeb69dc9b4db2837897dd23f3004e66a08b4ccd5b124ccc"]}) 13:43:12 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x1) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 13:43:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00,\xe1\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80500, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x6, 0x4, 0x2, 0x2, 0x9, "15a1180079555919a3bdbbd54904489738bf36"}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4, 0x4}, &(0x7f0000000100)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x7, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x4, 0x9, 0xfff}, &(0x7f0000000100)=0x10) 13:43:12 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:43:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:13 executing program 1: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x9}, 0x16, 0x3) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 13:43:13 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) write$cgroup_int(r1, &(0x7f0000000080), 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x33, &(0x7f0000000100)=0x80000000, 0x4) 13:43:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2f99800]}) 13:43:13 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8c32, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) select(0x187, &(0x7f0000000040)={0x100000000, 0x8, 0x1eef4000000000, 0x9, 0x4, 0x5, 0x3, 0x80}, &(0x7f0000000100)={0xffffffff, 0xffffffdfffffffe0, 0x100000004, 0xc5, 0xfffffffffffffff8, 0x3, 0x0, 0xfff}, &(0x7f0000000140)={0x80000000, 0x2, 0x4, 0x7ff, 0xfffffffeffffffff, 0x8, 0x400, 0x9}, &(0x7f00000001c0)={r1, r2/1000+30000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = semget$private(0x0, 0x4, 0x20) semop(r4, &(0x7f0000000380)=[{0x1, 0x0, 0x1000}, {0x4, 0x3, 0x1800}, {0x4, 0x8001}, {0x7, 0x3c, 0x3800}, {0x3, 0x3}], 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$FUSE_GETXATTR(r6, &(0x7f0000001300)={0x18, 0xffffffffffffffea, 0x4, {0x3eb04f71}}, 0x18) semctl$SEM_STAT_ANY(r4, 0x5, 0x14, &(0x7f0000000240)=""/4096) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newlink={0x50, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_IFNAME={0xffffffffffffff62, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond_slave={{0x0, 0x1, 'bond_slave\x00'}, {0x0, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x0, 0x5, 0x7}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001340)={{0xa, 0x4e22, 0x80000001, @empty, 0x1}, {0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x3, [0x80000001, 0x7, 0x7, 0x2, 0x8001, 0xc8, 0x80, 0x9]}, 0x5c) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a313400f5a81f793772a1955b7c4cf41e9e22dbb07dbd1e7a27199ce7f8efa166e91974c610d0112aa900ba24ae"], 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="0963104000"/20], 0x0, 0x0, 0x0}) [ 1227.153907] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1227.182601] binder: 27191:27194 unknown command 0 [ 1227.200931] binder: 27191:27194 ioctl c0306201 200000c0 returned -22 [ 1227.225370] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 13:43:13 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x13920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x24010, 0xfffffffffffffffd, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='bond\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) lseek(r3, 0x0, 0x4) 13:43:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f99800]}) 13:43:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:13 executing program 2: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1cd, &(0x7f0000000000)=""/100, &(0x7f00000000c0)=0x64) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r4, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="c8bf0700fbffffff6b737b7a000000000000000100000000000000"], 0x10}}], 0x2, 0x0) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$UI_DEV_DESTROY(r10, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r8, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r13}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="10000000000000000100000000001a00"], 0x10}}], 0x2, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f00000003c0)=0x3, 0x4) connect$packet(r2, &(0x7f0000000100)={0x11, 0x18, r7, 0x1, 0x2, 0x6, @local}, 0x14) r14 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r14, &(0x7f0000000080), 0xfffffffffffffe7f) 13:43:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:13 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x958a, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:13 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:43:13 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x303100, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = dup(r3) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x8, 0x13, 0x59}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x8, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f99800]}) 13:43:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:14 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=""/177, &(0x7f0000000040)=0xb1) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:14 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x20000200, &(0x7f00000000c0)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r2, 0x0, 0x4) 13:43:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6f99800]}) 13:43:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4a451ccd097089ae) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 13:43:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000, 0x1}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[&(0x7f0000000000)="84448a0750a378a45d4fea1c6a0b06640751b2ff8d92ecb4cdc93dcfc8179b29756b249f46098de030"], 0x7fff}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 13:43:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:43:14 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9f00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:14 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=""/177, &(0x7f0000000040)=0xb1) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f00000001c0)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) 13:43:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4\xfe\xff\xff\xfftd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\x95\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x16c, r5, 0x430, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4bb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x529}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x53}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000004}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x1, 0x2, 0x3, 0x7}, 0x3, 0x917}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000500)={@empty, @empty, @multicast1}, 0xc) umount2(&(0x7f0000000600)='./file0\x00', 0x9) syz_open_dev$tty1(0xc, 0x4, 0x4) 13:43:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8f99800]}) 13:43:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x3e3, &(0x7f00000001c0)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}, &(0x7f00000001c0)}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xb0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f630c4000000000000000000000000012634840020000000000000000000000000000000000000010000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="8561646600000000030000000000000002000000000000001e00000000000000852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/52], @ANYBLOB="340000000000000002000000000000001900000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="bd5fbd018f2646e200634040060000000000000000000000000000000000000031000000000000000000000000000000000000008303000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="85616466000000000300000000000000a4ad252041093c3d45bb00000000000000002b0000000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0163404002000000000000000000000000000000000000001000000000000000000000000bfeffffffffffff1800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/168], @ANYBLOB="400000000000000001000000000000001b000000000000008561646600000000070000000000000000000000000000003200000000000000852a747000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/241], @ANYBLOB="f10000000000000002000000000000000100000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000002800000000000000b6fdffffffffffff"], @ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0}) 13:43:14 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYPTR], 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r0 = epoll_create1(0x0) r1 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = memfd_create(&(0x7f0000000180)='secur.welinu\t\x00\xfd\xde\t\x90\x1a\x97e\xd4\x8f$\x8esR\x19=\xf6\xeb \xe6\x1aU', 0x1) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) lseek(r2, 0x0, 0x4) 13:43:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:14 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe0ff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:14 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8e85, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xffffffff, 0x1f}, 0x20000, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(0x0, 0x0) 13:43:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:14 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010f02000270f7f8", 0x16}], 0x0, 0x0) r1 = geteuid() r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r3) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='9p\x00', 0x2, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@nodevmap='nodevmap'}, {@debug={'debug', 0x3d, 0x10001}}, {@access_user='access=user'}, {@fscache='fscache'}, {@fscache='fscache'}, {@msize={'msize', 0x3d, 0x1075}}, {@access_any='access=any'}, {@debug={'debug', 0x3d, 0x2}}, {@uname={'uname', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@fscache='fscache'}], [{@hash='hash'}, {@euid_lt={'euid<', r1}}, {@euid_lt={'euid<', r3}}]}}) pipe(0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:43:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 1228.976672] FAT-fs (loop1): Directory bread(block 3841) failed [ 1229.007060] FAT-fs (loop1): Directory bread(block 3842) failed 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) [ 1229.023503] FAT-fs (loop1): Directory bread(block 3843) failed [ 1229.046849] FAT-fs (loop1): Directory bread(block 3844) failed [ 1229.053280] FAT-fs (loop1): Directory bread(block 3845) failed [ 1229.066145] FAT-fs (loop1): Directory bread(block 3846) failed 13:43:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) [ 1229.072532] FAT-fs (loop1): Directory bread(block 3847) failed [ 1229.083825] FAT-fs (loop1): Directory bread(block 3848) failed [ 1229.106738] FAT-fs (loop1): Directory bread(block 3849) failed 13:43:15 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x146002, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100)=0x4, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(r3, 0x0, 0x4) [ 1229.130249] FAT-fs (loop1): Directory bread(block 3850) failed 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:15 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe478, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:15 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x40600) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x7f}) getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)='/dev/loop-control\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[]}}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000100), 0x800) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xb, 0x100, 0x2, {0xfe1, 0x1ff, 0x0, 0x5}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$nfc_llcp(r3, &(0x7f0000000400), &(0x7f0000000580)=0xfffffffffffffe14) sendmmsg(r1, 0x0, 0x0, 0x24000000) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f00000004c0)={0x800, 0x7bff84, "3150015553a0c5dbc27e89b157b27a3acaf82a6aad35ea36", {0x80000000, 0x200000}, 0x5}) prctl$PR_GET_TIMERSLACK(0x1e) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000340)) listen(r1, 0x8) 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6ef0f000]}) 13:43:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) [ 1229.386023] IPVS: ftp: loaded support on port[0] = 21 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) 13:43:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 1229.982453] audit: type=1800 audit(1577972596.210:199): pid=27348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16679 res=0 [ 1230.050064] IPVS: ftp: loaded support on port[0] = 21 13:43:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:16 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff04, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 13:43:16 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) io_setup(0x200, &(0x7f0000000080)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = epoll_create1(0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000280), 0x800) r2 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000e47000)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x81, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x7, 0x0, 0x2, 0x6, 0x0, 0x9, 0x101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x400}, 0x10008, 0x0, 0x4df, 0x7, 0x6ad0, 0x1, 0x5}, r3, 0xa, r4, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r5 = getpgid(0xffffffffffffffff) ioprio_get$pid(0xe718f5c7b7586634, r5) r6 = memfd_create(&(0x7f00000003c0)='secur.welinu\t\x00\x00\x00\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x5, {0x0, 0x8}}, 0x20) lseek(r6, 0x0, 0x4) 13:43:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10041, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x2, 0xf14ed49ee429c0d, 0x300, 0x70bd2b, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x0, @pid}, @generic="690e88856e0ab695dfc554ad3666e1ab12e9377f7e870c1cbebdd21e2875c55da9bd67ad7a83c2b0f93d998020b9d5dc88e59695"]}, 0x50}, 0x1, 0x0, 0x0, 0x8c080}, 0x38000000) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1500}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r7 = socket$inet6(0xa, 0x400000000803, 0x5f) r8 = open(&(0x7f0000000100)='./file1\x00', 0x14f642, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) 13:43:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 13:43:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 13:43:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) [ 1230.328232] audit: type=1800 audit(1577972596.560:200): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=16701 res=0 13:43:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) [ 1230.468181] IPVS: ftp: loaded support on port[0] = 21 13:43:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:16 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff09, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:43:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:17 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 1231.090189] audit: type=1800 audit(1577972597.320:201): pid=27434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=16701 res=0 13:43:18 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) add_key$user(&(0x7f0000000480)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e21, @remote}, 0xfffffffffffffe61) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000780)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x3}, 0x8001}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000000000)=""/28) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:18 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="10000400000000000000005ff331daf9"], 0x10}}], 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="6fe1dd6299b8bed97121d246a2144dc0c73ffd9266947ee04a04894fa9a61ac57547a9b5b69f891d028bbd0eaec5dd30ecc13ea4f9c55e53801dd2a4208f262b2dca8dc8e59cd1c9e1316cd8e75c19d1db834e8fbe7e341cec206e2c3d5dc77ce64e5a5f3e9c1b388b7f15fda150be8ad1", 0x71}, {&(0x7f0000000200)="35b7d384", 0x4}, {&(0x7f0000000240)="5ebd1ea0e63990191621681c1c41d23366ca3b49fcfe182b981e4659006a9f229d76411fba5ebc93b413392b9492d7e0f23e394cbb6471ccc80dccb0ad769d19ba9b4a20bd6990752095f1c73cbdfe3972db815a3658df46e9932c1c0696a8d5b95c7ac7d742239ff01dc7575f296be6c627a062fac5494fb0bb0df06e458227587fb0b66d98f02a002f5c169da8678a3c1b3aadd3afcefa918969085fc51e9c00c91534", 0xa4}], 0x3, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000003c0)={0x0, 0x7, 0xffff095f, [], &(0x7f0000000380)=0x2}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x20010, r2, 0x11034000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@norock='norock'}]}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x438007, 0x0) accept$netrom(r7, &(0x7f0000000440)={{0x3, @default}, [@null, @null, @rose, @default, @netrom, @null]}, &(0x7f00000004c0)=0x48) 13:43:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) 13:43:18 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff0f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0xffffffffffffff8a, 0x10, 0xe3b, 0x70bd29, 0x25dfdbff}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xffffff35) r4 = getegid() chown(&(0x7f0000000140)='./file0\x00', r3, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r6 = getegid() chown(&(0x7f0000000140)='./file0\x00', r5, r6) getgroups(0x4, &(0x7f0000000040)=[r4, 0xee00, 0xee00, r6]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003005d6f3e64300000000000000000000000000c000200080003007f000000"], 0x50}}, 0x0) signalfd(r8, &(0x7f0000000300)={0x100000000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x9, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video0\x00', 0x2, 0x0) r11 = socket(0x100000000011, 0x2, 0x0) bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r11, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r14}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r16, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={r16, @in={{0x2, 0x4e21, @rand_addr=0x6}}, 0x58, 0x1000, 0x80000001, 0x3, 0xff}, &(0x7f0000000680)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000740)={r17, @in6={{0xa, 0x4e22, 0x81, @empty, 0x492}}, 0x0, 0xec0}, 0x90) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f0000000440)={0x9, 0x2, 0x4, 0x80000, 0x1, {0x77359400}, {0x2, 0x2, 0x80, 0x4, 0x31, 0x40, "fe97dd0b"}, 0x8001, 0x2, @offset=0x5a4c2a7, 0x1000, 0x0, r8}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r9, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x1, {"18befc75902c0865f7e9f604a37c7937"}, 0x3000000000, 0x7f, 0x80000000}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) write$snddsp(r1, &(0x7f0000000340)="e0b8fbeeb96dadd530b652d71f3d4dce4c287c30184ea0e171739e0e0265e8b92a3172b8c7ab2f98b6d89805e195e769e8350e6d04d86347e9fe45f1e3ba80390454671d3f30e788ea97b3fca0", 0x4d) setfsgid(r7) [ 1231.967828] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 13:43:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 13:43:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000100)={@bcast, @default, 0x2, 0x20}) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x3, 0x3}, 0x101}}, 0x18) [ 1232.158912] ISOFS: Unable to identify CD-ROM format. 13:43:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 13:43:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) [ 1232.338280] ISOFS: Unable to identify CD-ROM format. 13:43:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) [ 1232.488440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) 13:43:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e1e, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0xffffff94, 0x7, 0x0, [@multicast2]}]}}}], 0x18}}], 0x400000000000277, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x301100, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 1232.534086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:18 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff13, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000040)='lo\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {}]}) [ 1232.633453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:18 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) [ 1232.691210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 [ 1232.762548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 [ 1232.779930] IPVS: ftp: loaded support on port[0] = 21 13:43:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) [ 1232.856900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f900]}) [ 1232.909261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) [ 1232.962079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:19 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff27, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) [ 1233.009718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 [ 1233.044735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27491 comm=syz-executor.2 13:43:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) recvfrom$unix(r4, &(0x7f00000000c0)=""/92, 0x5c, 0x102, 0x0, 0xffffffffffffff29) 13:43:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x123101, 0x0) sendfile(r4, r1, &(0x7f0000000180)=0x4, 0x6) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_mount_image$reiserfs(&(0x7f0000000b40)='reiserfs\x00', &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="677202000000d0abf581961916bcab91fdee0b6a71756f74613d646f6e745f686173002c00"]) 13:43:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 1233.255063] IPVS: ftp: loaded support on port[0] = 21 13:43:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f902]}) [ 1233.325176] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "gr" [ 1233.441174] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "gr" 13:43:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f903]}) 13:43:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 13:43:21 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @ipx={0x4, 0x0, 0x0, "3c49dbc7723c"}, @sco, @vsock={0x28, 0x0, 0x0, @host}}) r0 = gettid() tkill(r0, 0x3c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xd, 0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 13:43:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000000c0)={0x6, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x9, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x400}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e22, @remote}}]}, 0x510) 13:43:21 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0804b5055e0b2ff4464071") r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@decompose='decompose'}]}) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) 13:43:21 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff4f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) [ 1235.413725] hfsplus: unable to find HFS+ superblock 13:43:21 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x40, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x40040, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001480)=0xfe3e) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x8, &(0x7f0000000280)) lstat(0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000003c0)=0xfffffff1, 0x4) recvmsg(r7, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd909}, 0x118) 13:43:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mq_notify(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) r4 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mq_notify(r4, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000240)=""/177) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$setflags(r5, 0x2, 0x0) 13:43:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f905]}) 13:43:21 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:43:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f906]}) 13:43:21 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd727a5aa08d3c4e, 0xae74c897c480b113, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.curre\x06\xd3\xc3\xe5-\xe7\xfcnt>\xa2\xc0\x89R\xd6\xe9x*\xf1\x99\x8b\xd4\xc8\x91\xee\x1b]\x12s\xdb\x94\x85X;\xe2\xf1L\xe7\x8c\xcc\xcc\tK@n\xec\x80\x85\xe6Q\xf8AM@\xa0#@.\xae\xc1c\x89\r\x8f\xa4\x89\xa0', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='cpuacct.usage_sys\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0189436, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xb0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580)=0xc39, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}, 0x2da) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r4, r5, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r4, r3, 0x0, 0xffffffffffffffc1, &(0x7f0000000a40)='\x00'}, 0xfffffffffffffc26) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) syncfs(r8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400000) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x400000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000900)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./\br\xefup.c\x00\b\x00\x00uz1\xf9\x945\xbb\t\x1a\xcd\xfb\x16\x14\x0eD3b\xb8\x00', 0x1ff) gettid() r10 = socket$kcm(0x2, 0x5, 0x0) r11 = socket(0x22, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, 0x0, &(0x7f0000000200)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001c00)}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r10], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x18}, 0x10) 13:43:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) 13:43:22 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 13:43:22 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff5f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfe65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x10) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x2, 0x3}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) 13:43:22 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:43:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f908]}) 13:43:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, {{0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10001, 0x302000) r2 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x401, 0x76, 0x6, 0xffffffff, 0x1ff, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 13:43:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r2, 0x4) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 13:43:23 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff67, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r6 = getegid() chown(&(0x7f0000000140)='./file0\x00', r5, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r8 = getegid() chown(&(0x7f0000000140)='./file0\x00', r7, r8) setresgid(r4, r6, r8) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 1237.088630] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:43:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3f, 0x0, 0x0, 0x40, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8801, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) getpgid(0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 13:43:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) getpriority(0x2, r1) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x20000000000002ca) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000001540)={0x0, 0x0, [], @bt={0x9, 0x3, 0x401, 0x5, 0xb3a2, 0xa9b, 0x22, 0xc}}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x2800, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) fsetxattr$security_selinux(r2, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x1) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000300)={0x0, &(0x7f0000000340)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x4, 0x2c, 0x1, 0xff, 0x0, 0x1ffc0000000, 0x2400, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x104f, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0xfffffffffffffffb, 0x7, 0x3, 0x1, 0x0, 0x1}, r5, 0xb, r7, 0x0) 13:43:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 13:43:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 13:43:23 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x13f, 0x400) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0xfffffffffffffe0d) sendmsg$tipc(r0, &(0x7f0000003600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/144, 0x90}], 0x1}}], 0x2, 0x0, 0x0) 13:43:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) [ 1237.550686] audit: type=1400 audit(1577972603.780:202): avc: denied { associate } for pid=27675 comm="syz-executor.2" name="timer" dev="devtmpfs" ino=18817 scontext=system_u:object_r:syslogd_initrc_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 13:43:23 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) socket$nl_netfilter(0x10, 0x3, 0xc) 13:43:23 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff77, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) [ 1237.826726] device nr0 entered promiscuous mode 13:43:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) [ 1237.893990] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.899187] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.134000] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.139165] protocol 88fb is buggy, dev hsr_slave_1 13:43:24 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 13:43:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:24 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff7f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x0, 0x0, 0x8800, &(0x7f0000001900)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 13:43:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0xfcb2) r1 = dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000001480)=""/140, 0x8c}], 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x41d11000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) sendmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f00000015c0)="f0f92ef77f60e97e8f4d73e98c2dda92350929a9379b62601bb53cd97033e8c02e37f4e669149b171de4c6", 0x2b}, {&(0x7f0000001600)="2d28ffad7d9d969e38801a16", 0xc}, {&(0x7f0000001640)="4d63fb7f7ca67009206a858eaad5a3cd3d26cf7ff82f4a0ad0bcd7d2e2ab0b20fdd6f2a40bd1b82bbc46517485b0b603d976daf0881d15eff301d36ba93ca56554550feead64a743fa97bb390abe5098a582e5b3dfbf480378a4c46d46d79f110fc61afbac87abb6159a86af56c6542a3d29a214036835853296824b", 0x7c}, {&(0x7f00000016c0)="5a9dfbe7ce8d552070923e9ee190a41fdb450a", 0x13}], 0x4, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x2000001}, 0x40) [ 1238.534017] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.539150] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.819360] device nr0 entered promiscuous mode [ 1238.853975] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.859164] protocol 88fb is buggy, dev hsr_slave_1 13:43:25 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) socket$nl_netfilter(0x10, 0x3, 0xc) 13:43:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f06e]}) 13:43:25 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffe0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x5, [0x2000000017b, 0x0, 0x12], [0xc1]}) 13:43:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf99800]}) [ 1239.237207] device nr0 entered promiscuous mode [ 1239.239705] kvm [27752]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 13:43:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400019) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000100)='memory.events\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040409000000c0073510fbffac00b46c000000fab771172100000020001000004e5e000038802286006653282529c6faf0627d8906c848bb5f36226c736cca229fe213d192556218007baf62b4f766032000000000ffffffffbc20fda73044945265f99dbaa8636685f0b085adedbe57b985398d189fd88872b4e7eaf16be8b3a33a7722ab445c587349"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009}, 0x80, 0x0, 0x0, &(0x7f0000001280)}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x52bbe0d196b58f36) close(0xffffffffffffffff) 13:43:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:25 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x200010, &(0x7f0000001140)={[{@biosize={'biosize'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fchdir(r2) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3a, 0x2000) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setuid(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client='access=client'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r7}}, {@dont_appraise='dont_appraise'}]}}) 13:43:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:43:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) [ 1239.499565] XFS (loop2): invalid log iosize: 255 [not 12-30] [ 1239.654225] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.659349] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.687496] XFS (loop2): invalid log iosize: 255 [not 12-30] 13:43:26 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) socket$nl_netfilter(0x10, 0x3, 0xc) 13:43:26 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x17000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 13:43:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400019) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000100)='memory.events\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040409000000c0073510fbffac00b46c000000fab771172100000020001000004e5e000038802286006653282529c6faf0627d8906c848bb5f36226c736cca229fe213d192556218007baf62b4f766032000000000ffffffffbc20fda73044945265f99dbaa8636685f0b085adedbe57b985398d189fd88872b4e7eaf16be8b3a33a7722ab445c587349"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009}, 0x80, 0x0, 0x0, &(0x7f0000001280)}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x52bbe0d196b58f36) close(0xffffffffffffffff) 13:43:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() tkill(r1, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000002c00)=ANY=[@ANYBLOB="860604030408360000000000000000000000000e0000000000000000000000000000000100"/46], 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000000440)={0x2714, 0x3, 0x4, 0x2, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x5}, [@nested={0xe4, 0xb, [@generic="9aa6e00c7b71d857e3739e26e3e7cea12bdc6b77c481df694f12eeb09fb504e6a3177bfbd2f8aa66c83238179b5752fceb23f83dc2cc5e84dd357444b06b2468197b001cc1039d68eafec7e48d761219847ee676076a6e6ab28316176a77729ca71e86571a6d0b02d3ddda369fe061163e32ed4d311987ef9d33d8a5f0110e746d65ad79cd3b8bcc110b2196e6ab12ecc89d53d08f1f97fd446bfa2f008439e366b8ec30eb7adc5698e473842ba9cec1f7533aba0fb57fd59cb2f0ba79ab1f77080843467ff533043b60563d70671bc21b02c252698173", @typed={0x8, 0x69, @pid=r1}]}, @generic="82e7266b819dcd57693320eeed5399ba84bdedb2ecb775f33c8ff0c32c010b2bdf0d11637842fd3a036d99d4f4866ee9d1a549fa2ad17cb30122b8601e46059625eb450d55a0e04eee355f2087ab154cd52a6d50bae0fe3d493b83f2a005157dae1170d2943051aaf7e99407506d0abb7e8165f90df0187dd601fb702d3c3d4121164690802c3b6e999052aa7129c195f43091541880829af53bcc6c5a15fec8aefa1125f3d1301205c50ac4323006a7a966469be53f140bd014b98341ce098c45", @generic="0485fca148acbb7d808ec45f68817db502e6e30979e2a7a93bd16e69c2110d396b91822cfb99fb4a61d6a9a645a03e6b070fb74f3cf1441be022c6750c71c25e0469981be84b585c8121dd28424daa4b159e13efd0488f2eb50abf8d89ad4b149ef6a0f569de7fecfb803dea1da0d7c932274c132bc125f537d6aa28cc2dea6482cf24a5516f8bfeb6147f803dafcd76b632603aaa802342b2b80d8be3089bf1495a259b3709cb35c007ed13cb9225569c6c", @nested={0xc, 0x62, [@typed={0x8, 0x39, @fd=r4}]}, @nested={0x129c, 0x26, [@generic="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", @generic="bc50d06c7e0ea19203030cce37f7932626779d47eae31beb3cb1b93043478125c813e0a8999e8f7c1da7bfa1d262449dbd18baa558001d869da1848da2f963c7d2364337e7ec12b02562af65788c050c7950c888e5cb3ac9527f7a0d128da6d7335d543fca1f17664b20f7ca6c08036921e3c1df8aeda115c57b3cc473355730049ad7e8b8ae9cbf9f86e63c0ce9ee7441a083c0c10292025919e3b6ab862272aebd57d5f4933bf1fe83f155b6456e653336d469e8", @typed={0x4, 0x1e}, @typed={0x14, 0x57, @ipv6=@local}, @generic="e4e0e63881453f137b39dc85cc58e1b0f4027f75a955c3f8681ed51906408d43773131033eeb62df45c65af0004dcd195043996c12140dd37f02e798c8396a6dea345408612325777bca618db5eac1541e388b914cc2e46e5dde1484d34f6dfdff0c44176e9853a8fdbb09731e5282b6084f022936dcf9e4b19671043f3f893a", @typed={0xc, 0x5, @u64=0x800}, @generic="52c15fe1cb06de2c5c026e4602e3e989925f9c95b872d66ad171ef2c8478d31ffeba82989ff65b9e34d9b22e48935bcc7a7d0b350b9f72292ba1e2ff1c60b733168b6e5bf661bd4d4b64c656854ad86b5fbddb1a7627233e9212c192a0cd83ee4b3bcb6c554ac7586c", @generic="73d02d28d288ce5962d10362c413c9f0686d963c6aa6c6d49958a2cf843fccf5285b83742f9936fc29c7b45397fda3926ec4ccbb4c8db960d75602dc4160b9e320e46d35ec10ca614790e12110bdac755fe8a275f93736d06ee17e2ef721b2802d0b84b39edd7402b2260943183db322c610cf571499e845a282f1cec8bde4380c3fe8f29a75904eaf8faf5c112b1980f5fcd90b213e1cf7d2654a1660501f56f81533bab03da57bcc07b7975da04af06bcbf6ca312bfd2b11d619960ca3d333ca42908ec556ba9f1e3c98e02cd6d215f61bc99f0462"]}, @typed={0x8, 0x5f, @u32=0x8}, @nested={0x11f8, 0x49, [@generic="b9a82dab29ddf381c1471a09ff1ac4fcc2b045ced6296c821ac5031de042ef07776a05118b376a190257ea9fd1fc", @generic="0d19fd2ba959d7f27186862fc6ee67d719da4a232c72ed274aa6a84e4312f7a1faa12435b804744f5e42a55ec284de943c306af5b7d2a8b983bcfc0154006de0cd835c32b97b0f825db70b7ded0a61ddff87331387cac6ab8e27193243f4af0988018817d8d3a782c8b828b8be3205258f2c8b0787a45c830eb144a9f353ea62e70e5f2a9f401c49e01578ed060a184d346c46418967603a6495ace2749a5d69ca030e499a957fbad4d5", @typed={0x14, 0x67, @ipv6=@mcast2}, @typed={0x8, 0x3, @uid=r5}, @generic="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", @generic="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"]}]}, 0x2714}, 0x1, 0x0, 0x0, 0x42}, 0x4000) waitid(0x0, r1, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x7, @local, 0x8}}, [0x9, 0x81, 0xc6c3, 0x3, 0x5, 0x4f, 0x7, 0x9, 0x2, 0xd2, 0x85, 0x29b, 0x10001, 0x3, 0x1]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={r6, 0x3, 0x3}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 13:43:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 13:43:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffff) eventfd2(0x7fff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158) unshare(0x40000000) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="1a84ebabdbab56cdae") epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0x3536f24e3d78a33a, &(0x7f0000000300), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = getuid() setreuid(r3, r4) ftruncate(0xffffffffffffffff, 0x200004) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000440)={'raw\x00'}, &(0x7f0000000100)=0x54) [ 1240.435067] device nr0 entered promiscuous mode 13:43:26 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x7}, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x64) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x0, {0x0, 0x1}}, 0x14) fallocate(r0, 0x20, 0x0, 0x7ff800000) fallocate(r0, 0x8, 0x0, 0x8000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000240)={{0x0, 0x85d4441fb6637671, 0x9, 0x80, 'syz0\x00', 0x9}, 0x5, 0x40, 0x4, r1, 0x2, 0x2, 'syz1\x00', &(0x7f0000000180)=['\x00', '\x00'], 0x2, [], [0x1, 0x101, 0x5, 0x8]}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000400)={0x60, 0x0, 0x5, {{0x2, 0x5, 0x5ee1ddab, 0x9, 0x10000, 0x7, 0x8001, 0x9}}}, 0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0xffff) modify_ldt$read(0x0, &(0x7f0000000000)=""/51, 0x33) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000380)) io_setup(0x1, &(0x7f00000001c0)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r4, &(0x7f0000000000)="5904329fedb004f617afa5c5164a3f435a37", 0xfdcd}]) 13:43:26 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 13:43:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) [ 1240.850213] IPVS: ftp: loaded support on port[0] = 21 [ 1240.864957] libceph: connect [d::]:6789 error -101 [ 1240.870199] libceph: mon0 [d::]:6789 connect error [ 1240.887326] libceph: connect [d::]:6789 error -101 [ 1240.907703] libceph: mon0 [d::]:6789 connect error [ 1241.387489] IPVS: ftp: loaded support on port[0] = 21 [ 1241.474996] libceph: connect [d::]:6789 error -101 [ 1241.480055] libceph: mon0 [d::]:6789 connect error 13:43:27 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) socket$nl_netfilter(0x10, 0x3, 0xc) 13:43:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef"}) 13:43:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:43:27 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2585f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x121041, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9c1f, 0x0, 0xffffffffffffffe0, 0x0, 0x4}, &(0x7f0000000240)=0x14) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4100, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:43:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:43:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f99800]}) 13:43:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f99800]}) 13:43:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) [ 1242.294508] device nr0 entered promiscuous mode 13:43:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet(0x2, 0x4000000805, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="1000000000000000010000e900000000"], 0x10}}], 0x2, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffc55, 0x4004, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="24c8385939070000008bad2beba5005cf47d12e27903d3f8168b9f62f35cc5f4ec", 0x21, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001240)=""/4096, 0xb71b829b6f5560a, 0x0, 0x0, 0xfffffffffffffff1) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 13:43:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 13:43:28 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25a10, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@data_writeback='data=writeback'}, {@quota_on='quota=on'}]}) 13:43:28 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) 13:43:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) 13:43:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f99800]}) [ 1242.675948] device nr0 entered promiscuous mode 13:43:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 13:43:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f99800]}) 13:43:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) [ 1242.974246] audit: type=1804 audit(1577972609.200:203): pid=27896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir881999696/syzkaller.77XkFg/97/file0/file0" dev="loop2" ino=1389 res=1 [ 1243.013905] net_ratelimit: 11 callbacks suppressed [ 1243.013914] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.024000] protocol 88fb is buggy, dev hsr_slave_1 13:43:29 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x266e6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x100, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800180008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40052}, 0x0) 13:43:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 13:43:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 13:43:29 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f99800]}) 13:43:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) [ 1243.316509] selinux_nlmsg_perm: 20 callbacks suppressed [ 1243.316526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27930 comm=syz-executor.2 [ 1246.020953] IPVS: ftp: loaded support on port[0] = 21 [ 1246.196214] chnl_net:caif_netlink_parms(): no params data found [ 1246.232042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.238612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.245933] device bridge_slave_0 entered promiscuous mode [ 1246.252849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.259393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.266574] device bridge_slave_1 entered promiscuous mode [ 1246.392649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1246.402521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1246.533225] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1246.540864] team0: Port device team_slave_0 added [ 1246.548468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1246.556005] team0: Port device team_slave_1 added [ 1246.672718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1246.680777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1246.746869] device hsr_slave_0 entered promiscuous mode [ 1246.784316] device hsr_slave_1 entered promiscuous mode [ 1246.937035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1246.945355] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1246.963806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.970159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.976840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.983179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.133303] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1247.139558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.147157] device bridge_slave_1 left promiscuous mode [ 1247.152666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.184689] device bridge_slave_0 left promiscuous mode [ 1247.190163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.386443] device hsr_slave_1 left promiscuous mode [ 1250.428724] device hsr_slave_0 left promiscuous mode [ 1250.476546] team0 (unregistering): Port device team_slave_1 removed [ 1250.487925] team0 (unregistering): Port device team_slave_0 removed [ 1250.497451] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1250.537555] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1250.629524] bond0 (unregistering): Released all slaves [ 1250.699068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1250.706069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.712825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.720198] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1250.731903] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1250.738323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1250.745419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1250.755467] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1250.761550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.770210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1250.777379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1250.785893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1250.793470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.799874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.809302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1250.816885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1250.824746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1250.832290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.838727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.852583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1250.859811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1250.871363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1250.878727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1250.891127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1250.898471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1250.906877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1250.915435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1250.924527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1251.004397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1251.012418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1251.028706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1251.036500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1251.044736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1251.054868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1251.063298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1251.080035] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1251.086645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1251.101789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1251.110007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1251.130869] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1251.146627] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1251.152863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1251.166583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1251.179126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.381455] gfs2: not a GFS2 filesystem [ 1251.423814] protocol 88fb is buggy, dev hsr_slave_0 [ 1251.428896] protocol 88fb is buggy, dev hsr_slave_1 [ 1251.492301] gfs2: not a GFS2 filesystem 13:43:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 13:43:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 13:43:37 executing program 2: syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r0 = msgget(0x1, 0x400) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/250) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) write$P9_RMKDIR(r8, &(0x7f0000000200)={0xa65b3877, 0x49, 0x0, {0x9a, 0x1, 0x3}}, 0x14) ioctl$BLKTRACESTOP(r1, 0x2288, 0x71e000) 13:43:37 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x1000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x28208, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10600}]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x820, 0x0) lseek(0xffffffffffffffff, 0x8, 0x6b353ccddeb4fef6) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) lseek(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) io_setup(0x90, &(0x7f0000000140)) 13:43:37 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r3, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x210000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000001c0)=0x1aee) 13:43:37 executing program 1: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) socket(0x15, 0x80005, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801}, 0x50}}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x26c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd07}]}, @TIPC_NLA_BEARER={0x158, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8946}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb92c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x10001, @local, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x436}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc665}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20050080}, 0x4) getsockopt(r0, 0x0, 0x2714, 0xffffffffffffffff, &(0x7f0000000040)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000004c420000356a996ba1328d556dc088119ae4fee8b656cedbeab466d5a9c5f38dfcdf6520000000a69e9bacfd518a77d9dbe2bf5278869bb62bbcfd4f48980a016a56389c3019854da096e99a4d48867745d717e08139dc8248bb48c63e1c546121744dcf9832236dc5cd6ecd90557d429130802080d082e3d8be4d82a4c6471f630d93a8901416522a75edb159462bfb8e7a56737a996581ba268c32aa3ce10446bc0666268275222111b7af96257a25c3dce92153bfd3b6e775b17475047826e52e92d1084e624baaefc9bf1266e474abb15b5d81021376a583c39d35283434e4025aab9818eb66c89d4b5e8ad342a58870a7dcc03aca5a1fac249e3d998732420d45b12efd505cd7a9beabea75a6d0dc0d4a3620e0a5d538f124050423b6ab5339cfef21a196733137ed412693bbfbe2a40ef753c302301f9485caf8108772c12917b0c6cd8ab60529e2ee90370cec1451512e723cc7a57d7e9abf0000000000c07f00447312b4e416078f5ba12b9a9115827c7b8ebbb4f51b6d849ce3b405310f98e770ea00"/413, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x8000, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='memory.high\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000180)={0xcf, &(0x7f0000000400)=""/207}) write$cgroup_int(r6, 0x0, 0x0) 13:43:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x7) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) [ 1251.642880] device nr0 entered promiscuous mode 13:43:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 13:43:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) [ 1251.730205] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 13:43:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x60000000, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 13:43:38 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x0, 0x0, "7f3362b10c03e97b20879d4ceddb5889f8042e5886fe7afccffe2783a4b643ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 13:43:38 executing program 1: socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000012008105e00f80ecdb4cb9f207c804a01c000000020006000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7f}]}}}]}, 0x50}}, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) [ 1251.892916] kobject: 'loop4' (000000002d2c2d11): kobject_uevent_env [ 1251.892957] kobject: 'loop4' (000000002d2c2d11): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1251.901965] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1251.930047] kobject: 'loop5' (00000000ca23a22e): kobject_uevent_env [ 1251.930086] kobject: 'loop5' (00000000ca23a22e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1251.988487] kobject: 'loop1' (00000000d4fbd7fa): kobject_uevent_env [ 1251.988518] kobject: 'loop1' (00000000d4fbd7fa): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1252.035118] ================================================================== [ 1252.035226] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x439/0xa30 [ 1252.035241] Read of size 8 at addr ffff88809bba0e50 by task syz-executor.2/27989 [ 1252.035245] [ 1252.035263] CPU: 1 PID: 27989 Comm: syz-executor.2 Not tainted 4.19.92-syzkaller #0 [ 1252.035272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.035277] Call Trace: [ 1252.035303] dump_stack+0x197/0x210 [ 1252.035321] ? soft_cursor+0x439/0xa30 [ 1252.035340] print_address_description.cold+0x7c/0x20d [ 1252.035358] ? soft_cursor+0x439/0xa30 [ 1252.035374] kasan_report.cold+0x8c/0x2ba [ 1252.035396] check_memory_region+0x123/0x190 [ 1252.035413] memcpy+0x24/0x50 [ 1252.035430] soft_cursor+0x439/0xa30 [ 1252.035448] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1252.035475] bit_cursor+0x12fc/0x1a60 [ 1252.035501] ? bit_clear+0x530/0x530 [ 1252.035580] ? tty_do_resize+0x5e/0x170 [ 1252.035609] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1252.035625] ? get_color+0x225/0x430 [ 1252.035645] fbcon_cursor+0x58a/0x7b0 [ 1252.035659] ? bit_clear+0x530/0x530 [ 1252.035688] hide_cursor+0x9e/0x300 [ 1252.035707] redraw_screen+0x2ee/0x8e0 [ 1252.035726] ? con_flush_chars+0xa0/0xa0 [ 1252.035748] ? mutex_unlock+0xd/0x10 [ 1252.035768] vc_do_resize+0x118e/0x14a0 [ 1252.035803] ? vc_uniscr_alloc+0xd0/0xd0 [ 1252.035828] ? lock_acquire+0x16f/0x3f0 [ 1252.035889] ? vt_ioctl+0x1ec0/0x2530 [ 1252.035912] vc_resize+0x4d/0x60 [ 1252.035930] vt_ioctl+0x1fe0/0x2530 [ 1252.035951] ? complete_change_console+0x3a0/0x3a0 [ 1252.035970] ? avc_has_extended_perms+0xa78/0x10f0 [ 1252.035997] ? avc_ss_reset+0x190/0x190 [ 1252.036012] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1252.036032] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 1252.036050] ? complete_change_console+0x3a0/0x3a0 [ 1252.036066] tty_ioctl+0x7f3/0x1510 [ 1252.036084] ? tty_vhangup+0x30/0x30 [ 1252.036100] ? mark_held_locks+0x100/0x100 [ 1252.036127] ? __fget+0x340/0x540 [ 1252.036152] ? __might_sleep+0x95/0x190 [ 1252.036168] ? tty_vhangup+0x30/0x30 [ 1252.036187] do_vfs_ioctl+0xd5f/0x1380 [ 1252.036203] ? selinux_file_ioctl+0x46f/0x5e0 [ 1252.036219] ? selinux_file_ioctl+0x125/0x5e0 [ 1252.036237] ? ioctl_preallocate+0x210/0x210 [ 1252.036254] ? selinux_file_mprotect+0x620/0x620 [ 1252.036276] ? iterate_fd+0x360/0x360 [ 1252.036292] ? nsecs_to_jiffies+0x30/0x30 [ 1252.036315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1252.036330] ? security_file_ioctl+0x8d/0xc0 [ 1252.036349] ksys_ioctl+0xab/0xd0 [ 1252.036370] __x64_sys_ioctl+0x73/0xb0 [ 1252.036390] do_syscall_64+0xfd/0x620 [ 1252.036411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.036423] RIP: 0033:0x45a9e9 [ 1252.036439] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1252.036447] RSP: 002b:00007fac20790c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.036462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a9e9 [ 1252.036472] RDX: 0000000020000040 RSI: 000000000000560a RDI: 0000000000000003 [ 1252.036481] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1252.036490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac207916d4 [ 1252.036499] R13: 00000000004c7170 R14: 00000000004ddc48 R15: 00000000ffffffff [ 1252.036520] [ 1252.036528] Allocated by task 11657: [ 1252.036543] save_stack+0x45/0xd0 [ 1252.036558] kasan_kmalloc+0xce/0xf0 [ 1252.036570] __kmalloc+0x15d/0x750 [ 1252.036583] fbcon_set_font+0x32d/0x860 [ 1252.036597] con_font_op+0xe18/0x1250 [ 1252.036610] vt_ioctl+0xd2e/0x2530 [ 1252.036622] tty_ioctl+0x7f3/0x1510 [ 1252.036635] do_vfs_ioctl+0xd5f/0x1380 [ 1252.036648] ksys_ioctl+0xab/0xd0 [ 1252.036661] __x64_sys_ioctl+0x73/0xb0 [ 1252.036676] do_syscall_64+0xfd/0x620 [ 1252.036690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.036694] [ 1252.036700] Freed by task 10080: [ 1252.036714] save_stack+0x45/0xd0 [ 1252.036728] __kasan_slab_free+0x102/0x150 [ 1252.036742] kasan_slab_free+0xe/0x10 [ 1252.036754] kfree+0xcf/0x220 [ 1252.036768] rcu_process_callbacks+0xcb6/0x1a30 [ 1252.036783] __do_softirq+0x25c/0x921 [ 1252.036786] [ 1252.036798] The buggy address belongs to the object at ffff88809bba0d40 [ 1252.036798] which belongs to the cache kmalloc-512 of size 512 [ 1252.036811] The buggy address is located 272 bytes inside of [ 1252.036811] 512-byte region [ffff88809bba0d40, ffff88809bba0f40) [ 1252.036822] The buggy address belongs to the page: [ 1252.036835] page:ffffea00026ee800 count:1 mapcount:0 mapping:ffff88812c31c940 index:0x0 [ 1252.036846] flags: 0xfffe0000000100(slab) [ 1252.036867] raw: 00fffe0000000100 ffffea00026dfbc8 ffffea00026f0508 ffff88812c31c940 [ 1252.036885] raw: 0000000000000000 ffff88809bba00c0 0000000100000006 0000000000000000 [ 1252.036891] page dumped because: kasan: bad access detected [ 1252.036895] [ 1252.036899] Memory state around the buggy address: [ 1252.036911] ffff88809bba0d00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1252.036923] ffff88809bba0d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1252.036935] >ffff88809bba0e00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1252.036941] ^ [ 1252.036953] ffff88809bba0e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1252.036964] ffff88809bba0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1252.036970] ================================================================== [ 1252.036975] Disabling lock debugging due to kernel taint [ 1252.052382] Kernel panic - not syncing: panic_on_warn set ... [ 1252.052382] [ 1252.052403] CPU: 1 PID: 27989 Comm: syz-executor.2 Tainted: G B 4.19.92-syzkaller #0 [ 1252.052410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.052415] Call Trace: [ 1252.052435] dump_stack+0x197/0x210 [ 1252.052453] ? soft_cursor+0x439/0xa30 [ 1252.052465] panic+0x26a/0x50e [ 1252.052477] ? __warn_printk+0xf3/0xf3 [ 1252.052492] ? soft_cursor+0x439/0xa30 [ 1252.052507] ? preempt_schedule+0x4b/0x60 [ 1252.052524] ? ___preempt_schedule+0x16/0x18 [ 1252.052540] ? trace_hardirqs_on+0x5e/0x220 [ 1252.052555] ? soft_cursor+0x439/0xa30 [ 1252.052572] kasan_end_report+0x47/0x4f [ 1252.052587] kasan_report.cold+0xa9/0x2ba [ 1252.052603] check_memory_region+0x123/0x190 [ 1252.052618] memcpy+0x24/0x50 [ 1252.052631] soft_cursor+0x439/0xa30 [ 1252.052648] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1252.052667] bit_cursor+0x12fc/0x1a60 [ 1252.052685] ? bit_clear+0x530/0x530 [ 1252.052701] ? tty_do_resize+0x5e/0x170 [ 1252.052720] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1252.052733] ? get_color+0x225/0x430 [ 1252.052747] fbcon_cursor+0x58a/0x7b0 [ 1252.052760] ? bit_clear+0x530/0x530 [ 1252.052774] hide_cursor+0x9e/0x300 [ 1252.052789] redraw_screen+0x2ee/0x8e0 [ 1252.052804] ? con_flush_chars+0xa0/0xa0 [ 1252.052826] ? mutex_unlock+0xd/0x10 [ 1252.052842] vc_do_resize+0x118e/0x14a0 [ 1252.052864] ? vc_uniscr_alloc+0xd0/0xd0 [ 1252.052880] ? lock_acquire+0x16f/0x3f0 [ 1252.052894] ? vt_ioctl+0x1ec0/0x2530 [ 1252.052910] vc_resize+0x4d/0x60 [ 1252.052924] vt_ioctl+0x1fe0/0x2530 [ 1252.052941] ? complete_change_console+0x3a0/0x3a0 [ 1252.052959] ? avc_has_extended_perms+0xa78/0x10f0 [ 1252.052979] ? avc_ss_reset+0x190/0x190 [ 1252.052993] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1252.053009] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 1252.053023] ? complete_change_console+0x3a0/0x3a0 [ 1252.053035] tty_ioctl+0x7f3/0x1510 [ 1252.053047] ? tty_vhangup+0x30/0x30 [ 1252.053060] ? mark_held_locks+0x100/0x100 [ 1252.053078] ? __fget+0x340/0x540 [ 1252.053098] ? __might_sleep+0x95/0x190 [ 1252.053111] ? tty_vhangup+0x30/0x30 [ 1252.053126] do_vfs_ioctl+0xd5f/0x1380 [ 1252.053141] ? selinux_file_ioctl+0x46f/0x5e0 [ 1252.053156] ? selinux_file_ioctl+0x125/0x5e0 [ 1252.053171] ? ioctl_preallocate+0x210/0x210 [ 1252.053186] ? selinux_file_mprotect+0x620/0x620 [ 1252.053204] ? iterate_fd+0x360/0x360 [ 1252.053218] ? nsecs_to_jiffies+0x30/0x30 [ 1252.053237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1252.053251] ? security_file_ioctl+0x8d/0xc0 [ 1252.053267] ksys_ioctl+0xab/0xd0 [ 1252.053282] __x64_sys_ioctl+0x73/0xb0 [ 1252.053299] do_syscall_64+0xfd/0x620 [ 1252.053316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.053328] RIP: 0033:0x45a9e9 [ 1252.053343] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1252.053351] RSP: 002b:00007fac20790c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.053365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a9e9 [ 1252.053374] RDX: 0000000020000040 RSI: 000000000000560a RDI: 0000000000000003 [ 1252.053382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1252.053391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac207916d4 [ 1252.053405] R13: 00000000004c7170 R14: 00000000004ddc48 R15: 00000000ffffffff [ 1252.054692] Kernel Offset: disabled [ 1252.963217] Rebooting in 86400 seconds..