[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1c1080, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x3, 0x200, 0x4, 0x28, 0x200, 0x2ab8, 0x6, 0x5, 0xe217, 0xfffffe01, 0xfffffff7, 0x101, 0x1, 0xffff}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 1380.349381][ T4981] binder_alloc: 4979: binder_alloc_buf, no vma [ 1380.421666][ T4988] binder_alloc: 4987: binder_alloc_buf, no vma 01:44:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x2c, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 1380.542834][ T4992] binder_alloc: 4990: binder_alloc_buf, no vma [ 1380.572847][ T4992] binder: BINDER_SET_CONTEXT_MGR already set [ 1380.580216][ T4992] binder: 4990:4992 ioctl 40046207 0 returned -16 01:44:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x1f4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x40, 0x100, "61e0620184e84c7c27cc3395928272a0d74042dadf9276838c51f77bd1001217", 0x0, 0xffffff9c, 0x0, 0x40, 0x393}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {@fixed}, {}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050604a1a389749a60a3"], 0x0, 0x0, 0x0}) 01:44:31 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "0002f3bf233e00", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567", "48b60516c7ad6c19"}, 0x38) write$binfmt_misc(r0, 0x0, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x2, 0x4) 01:44:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x1f, 0x4, 0x300d, 0x3, 0x2, 0x0, 0x0, 0x6}}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6f, 0x2, 0x2, 0x0, 0xfffffffffffffff8, 0x2, 0x3e, 0x6, 0x349, 0x40, 0x251, 0x9, 0x1000, 0x38, 0x2, 0x2, 0x3f, 0x1000}, [{0x1, 0x0, 0x8001, 0x2, 0xfffffffffffffb02, 0x4, 0xd8, 0x800}], "c82e20dcc52a889cf32d9164140f1f1218233c3d68b107f7e905cb126241c5", [[], [], [], [], [], [], []]}, 0x797) r3 = dup2(r1, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x83, 0x0) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000080)={0x2, "acafa972c3d71ab75e98419cfdf95f87e2e8a469737e9f03887679595553b6f9", 0x4, 0x2, 0xffffffff, 0x8, 0x10, 0x2, 0x56, 0xfffffff7}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x3e8, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:32 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 1381.136492][ T5011] Unknown ioctl 1079268894 [ 1381.152666][ T5011] binder_alloc: 5010: binder_alloc_buf, no vma 01:44:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x600, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1381.235440][ T5019] binder: 5018:5019 unknown command 808464432 [ 1381.258821][ T5019] binder: 5018:5019 ioctl c0306201 20000200 returned -22 01:44:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x9, 0x0, &(0x7f0000000300)="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", 0x1000, 0xfffffffc, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001780)="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"}) 01:44:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000140)) creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x700, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1381.390931][ T5025] binder: 5024:5025 ioctl 8038550a 20000000 returned -22 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x900, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VT_RELDISP(r2, 0x5605) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}, 0xff}, 0xa) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r8, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x114, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfa82}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2c4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5b68}, {0xc, 0x90, 0x2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x400c800) 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xa00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}], 0x1) [ 1381.673404][ T5037] binder: 5035:5037 ioctl 5605 0 returned -22 01:44:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ef0401000000000000000000"], 0x0, 0x0, 0x0}) 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xb00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0x198, 0x98, 0x198, 0x98, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'dummy0\x00', {}, 'hsr0\x00', {}, 0x18, 0x11}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@private, @empty, 0x0, 0x0, 'netdevsim0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x65}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 1381.812307][ T5046] binder: 5043:5046 unknown command 17100549 [ 1381.831182][ T5046] binder: 5043:5046 ioctl c0306201 20000280 returned -22 01:44:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xe00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:32 executing program 1: r0 = semget$private(0x0, 0x4, 0x20) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000080)=""/76) r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x7, 0x7fff, 0x1, 0x2}) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x90fe72a747dd3e6c, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x1100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) write$capi20(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0xcae, 0x5, 0x83, 0x8, 0x7}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x7b6, 0xa, 0x0, r2}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000080)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r9, 0xae45, 0x7) 01:44:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x1400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:33 executing program 2: [ 1382.500588][ T5067] binder: 5065:5067 ioctl 541b 20000080 returned -22 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x2000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x4, 0x6, 0x81, 0x83, 0x79, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x7, 0xcced, 0x101}}) r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:33 executing program 2: [ 1382.687771][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:33 executing program 2: 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x2800, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1382.749003][ T5076] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1382.749012][ T5076] binder_alloc: 5073: binder_alloc_buf, no vma 01:44:33 executing program 2: 01:44:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:33 executing program 2: 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x2c00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x3f00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:33 executing program 2: 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32, @ANYBLOB="0000000000000001000000000020000000000100", @ANYRES32, @ANYBLOB="0000000000f3ff00010000000000000100000000", @ANYRES32=r2, @ANYBLOB="000000000040000000000000000000f0ffffffff", @ANYRES32=r5, @ANYBLOB="0000000000000100000000000000010000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000000001000000000000000000"]) r8 = dup2(r1, r0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x4000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: [ 1383.209258][ T5100] binder_alloc: 5098: binder_alloc_buf, no vma 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="2121b5bb"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xe803, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xf401, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1383.346937][ T5106] binder: 5105:5106 unknown command -1145757407 [ 1383.353333][ T5106] binder: 5105:5106 ioctl c0306201 20000200 returned -22 01:44:34 executing program 2: 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x30102, 0x0) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000080)={0x2, 0x1, 0x3079}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 1383.514834][ T5117] binder_alloc: 5116: binder_alloc_buf, no vma 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xff07, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1383.657631][ T5122] binder_alloc: 5118: binder_alloc_buf, no vma 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000140)={r7, 0x9, 0xd1, 0x9, 0x4, 0x100, 0x8000, 0x6, 0x2, 0x3, 0xfffffff7, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000080)={r9}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e3a, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: [ 1383.887032][ T5133] binder_alloc: 5129: binder_alloc_buf, no vma 01:44:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0}) r7 = dup2(r5, r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f00000000c0)={0x0, r8, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x7, 0x29a, &(0x7f0000000140)="ea32607ca6a5b240312fc793bb32334fc3ed253e65d954e8eff1980968d8434b36996c8343e9735125123bdd75e8daf3625d2ddfee95d4d0b1dda808e303d518ea9fc9c6aff01ca34ce3117c23ee80a54f14ed207229447d94ed3796866f13350911d98539f5291d16730219ed2a1e00bf2ee7b3c668a3fe161d6560ac008571b5d139facf580c89226a90fc2d1fe0747a3cffa61561a55fa806d30bd3719eedfa887bdb", &(0x7f0000000080)="02f91bf3298211214afe702128b80a4ac6451781360907cd14cc71391fa0fe261440b865df", 0xa4, 0x25}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffeb1, 0x0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffe28, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r4, 0xfffffffffffffffa) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f23608d71105630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:34 executing program 2: 01:44:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:35 executing program 2: [ 1384.077181][ T5144] binder: 5143:5144 unknown command -687327502 [ 1384.088117][ T5148] binder: 5146:5148 unknown command 6 [ 1384.094020][ T5144] binder: 5143:5144 ioctl c0306201 20000280 returned -22 [ 1384.102898][ T5148] binder: 5146:5148 ioctl c0306201 20000200 returned -22 01:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}, 0x0) 01:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x3, 0x800, 0x9, 0x8}]}) 01:44:35 executing program 2: [ 1384.242911][ T5156] binder_alloc: 5154: binder_alloc_buf, no vma 01:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x3, 0x5, 0x2}}}}}}, 0x0) 01:44:35 executing program 2: [ 1384.314850][ T5161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1384.386572][ T5169] binder_alloc: 5165: binder_alloc_buf, no vma 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x2}}}}}}, 0x0) 01:44:35 executing program 2: [ 1384.446930][ T5169] binder: BINDER_SET_CONTEXT_MGR already set [ 1384.470340][ T5169] binder: 5165:5169 ioctl 40046207 0 returned -16 01:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:35 executing program 2: 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x2}}}}}}, 0x0) 01:44:35 executing program 2: 01:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 01:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="28e6cbdf2adaa7fcce4adf000000cca081d3980f48a7dad3d438f37852779305c244c2612408be1f1d3e6fef2bea1d40db505d5f97978a3061b37cdf9d91c645d51a6e26e5", @ANYRES16=r3, @ANYBLOB="6ffe000000000000000003000000140001800d0001007564703a73797a3100000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:35 executing program 2: [ 1384.720252][ T5189] binder: 5188:5189 unknown command 0 [ 1384.739227][ T5189] binder: 5188:5189 ioctl c0306201 20000280 returned -22 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4, 0x2}}}}}}, 0x0) 01:44:35 executing program 2: 01:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07a369f78e7082f502647663db4001b7d4c181d802877e6aee9ba52b89ed9a98c9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2}}}}}}, 0x0) 01:44:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f0000000000)=@hat={'changehat ', 0x2, 0x5e, ['\x00', '\x00', '\x00', '\x00', '*@^-\x00', '(-\\-\\##:\x00', '^\x00']}, 0x31) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r3 = dup(r0) ioctl$TIOCEXCL(r3, 0x540c) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010102}, {{0x0, 0x4e22, r4, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0x8001}}}}}}, 0x0) 01:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = dup2(r1, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4138ae84, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRESOCT=r4, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0}) 01:44:35 executing program 2: [ 1384.971087][ T5203] binder: 5202:5203 unknown command -144071929 [ 1384.992267][ T5203] binder: 5202:5203 ioctl c0306201 20000240 returned -22 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2}}}}}}, 0x0) 01:44:36 executing program 2: [ 1385.034496][ T5203] binder: 5202:5203 unknown command -144071929 [ 1385.053367][ T5203] binder: 5202:5203 ioctl c0306201 20000240 returned -22 01:44:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x33, 0x2, 0x0, 0x0, "f463e60956d6f8a83e5cc10141aeb89ab8485a2f31a70a8d005119d04e2bd4c8b19ef499f96f7465b1411559d248af12b739951094179ebf870e17088d032bbd"}}}}, 0x0) 01:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2}}}}}}, 0x0) 01:44:36 executing program 2: 01:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@local, @remote}, &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x3}}}}}}, 0x0) 01:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x80000) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)={0x1, 0x1, [{}]}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getrandom(&(0x7f0000000300)=""/198, 0xc6, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000040)={{0x3, @name="440eb567e7720453d77ea84a3ce02bbc0fc6f86b24757aeb530c032056e2dd14"}, 0x8, 0x1000, 0x6}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04620440"], 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x67ac, @remote, 0x10001}, @in6={0xa, 0x4e20, 0x1ff, @mcast1, 0x9}, @in6={0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, [], 0xd}, 0xffffffff}, @in={0x2, 0x4e20, @empty}], 0x64) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) r8 = dup2(r4, r0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYRESHEX=r4], &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:36 executing program 2: [ 1385.344749][ T5232] binder: 5230:5232 ioctl 8188aea6 20000100 returned -22 [ 1385.391347][ T5229] binder_alloc: 5228: binder_alloc_buf, no vma [ 1385.399211][ T5232] binder: 5230:5232 ioctl 8912 400200 returned -22 01:44:36 executing program 2: 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x1}, 0xb) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x44}, 0xa3}}, 0x5, 0x4, 0x6, 0xff, 0x7}, &(0x7f0000000080)=0x98) dup(r3) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB='|'], 0x0) [ 1385.440215][ T5232] binder: 5230:5232 ioctl c0385650 20000040 returned -22 01:44:36 executing program 2: 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x5}}}}}}, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:36 executing program 2: 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x6}}}}}}, 0x0) 01:44:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x7, 0xff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x0, [], [{0x2, 0x6, 0x80000001, 0x8, 0x100000001, 0x80000000}, {0x6, 0x5, 0x0, 0x0, 0x7152}], [[], [], [], [], [], []]}) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000014c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000004c0)=""/4096, 0x1000, 0x3ff, 0xfffffffd, 0x5, 0x20, 0x7}}, 0x120) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f00000000c0)) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r4) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0463a8775f962b43a80a61b3a251c93013580074c605f79af11cf3da8a33eca9fa9ad13e2f1b4eab8d18a485b13ed507527fb4c8d69385bd540aaa2af970e9cfcf41be6b547bb9f854dd6f64b0cb75b565984b3af92ac7d44618c85fa8040be2db2b42f333ee1244667bfe9451d0496432c4448f9fb5745c97e948241058c34f2e1ec8a34c8e505f663310cc7f4eac078e5b8f72000000000000000000000000afb4e712e23ff406"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x240, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x3, 0xfffffffe, 0x3, 0x80000001, 0x4, 0x80000000}, 0x314, [0x7, 0xfff, 0x8, 0x2, 0xfff, 0x80000000, 0x10000, 0xbaf, 0x2, 0x4dbbe353, 0x3, 0x2, 0x9, 0x0, 0x7, 0xf5, 0xfffffffc, 0x8, 0x9, 0x8001, 0x0, 0x38, 0xf9, 0x1, 0x9, 0x200, 0x3, 0x100, 0x6, 0x9a5, 0x6, 0x1, 0x49f83007, 0x9, 0x1, 0xff, 0x80, 0x4a34, 0x7, 0xff800000, 0x1, 0x4, 0x6, 0x7, 0x6, 0x2, 0x544, 0x582, 0x4, 0x1ff, 0x1, 0x4, 0x30d, 0x905, 0x7fffffff, 0x0, 0x5, 0x8d, 0x2, 0x800, 0x3, 0x2, 0xbc, 0xffffffff, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0xc00000, 0x0, 0x8, 0xc48, 0x65d, 0x0, 0x6, 0x2, 0x200, 0x5161, 0x800, 0x1ff, 0x6, 0x7fff, 0x1, 0xffff, 0x7fff, 0x10000, 0x20, 0x126, 0xa661, 0xfff, 0x8000, 0x4, 0xf3, 0xf5, 0xff, 0x7fffffff, 0x6, 0x4, 0x1ff, 0x4a738a26, 0x3f, 0xffff, 0x80000001, 0x80000001, 0x2, 0x6, 0x5, 0x400, 0x8, 0x200, 0x3, 0x7f, 0x8, 0x10001, 0x74000000, 0x9, 0x9, 0x0, 0x4, 0x1000, 0x101, 0x40, 0x100, 0xfffffdc6, 0x7fff, 0x7ff, 0x400, 0xffffffff, 0x1, 0x2, 0x3, 0x3, 0x9, 0x7, 0x2, 0x800, 0x54e2, 0xfffffffa, 0x9, 0x1, 0xffffffff, 0x7, 0x35df, 0xfffffff7, 0x6, 0x6, 0x0, 0x0, 0x8f4, 0xfffffca6, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x0, 0x1f, 0x9, 0x8, 0x3, 0x8001, 0x401, 0x694e7f70, 0x8, 0x9, 0x0, 0x4f0, 0xfff, 0x1, 0x6, 0x1, 0x1f, 0x1d33000, 0x1, 0x0, 0x66, 0x100, 0x7, 0x6, 0x7, 0x5, 0x0, 0x0, 0x8000, 0x2, 0x2, 0x0, 0x1ff, 0x7f, 0x800, 0x64, 0x6, 0xdb, 0x3, 0x0, 0x8, 0xc4, 0x5, 0x3, 0x2, 0x0, 0x5, 0x0, 0x8, 0xffffffff, 0x88, 0x8, 0x7, 0x20, 0x4, 0x446, 0x4, 0x1, 0x2, 0x4, 0x0, 0xfffffd6b, 0x9, 0x8000, 0x80000000, 0x5, 0x2, 0x2, 0x8, 0x7fffffff, 0x8601, 0x3, 0xf8, 0x7, 0x401, 0x6, 0x5, 0x2, 0x2, 0x200, 0xffff, 0x3, 0xa66, 0x2, 0x3ff, 0x1ff, 0x5, 0x4, 0x5, 0x3, 0x8, 0x5, 0x9, 0x12, 0x4, 0xfffff880, 0x4, 0x80000001, 0x5, 0x1, 0x1, 0x6, 0xffffff00, 0x20, 0x7, 0x70, 0x3, 0x3, 0x9, 0x6, 0x1, 0x7, 0x0, 0x9e0, 0x1, 0xc0000, 0x5, 0xf1cb, 0x200, 0x6, 0x6, 0x7, 0x2, 0x5, 0x4, 0x0, 0x2, 0xff, 0x1, 0xfffffff9, 0x3, 0x3, 0x3, 0x7ff, 0x80000001, 0x4, 0x9, 0x480b5be9, 0x6, 0x5, 0x4, 0x6, 0x7fffffff, 0xff, 0x22, 0xfffffffb, 0x7, 0x845, 0x3, 0xb, 0x5, 0x7, 0x20, 0x1000, 0x6, 0x10001, 0x7fff, 0x3, 0x7ff, 0x3, 0x4, 0x1, 0xa74, 0xffffffff, 0x1f, 0x1, 0x400, 0xffff, 0x2, 0x80000001, 0x9, 0x6, 0x28, 0x939a, 0x47db5280, 0x80000000, 0xffffffcd, 0x62e, 0x322, 0x0, 0xf4, 0x4, 0x9, 0x4, 0x9, 0x2, 0x8, 0x400, 0x4, 0x80000000, 0x400, 0x4, 0xfff, 0xaf06, 0x7fff, 0xfffffffb, 0x40e, 0x6, 0x3, 0x6, 0x1, 0x81, 0x1, 0xfff, 0xfff, 0x38, 0xff, 0x4, 0x4, 0x2f4, 0x0, 0x1, 0x7ff, 0x9, 0x2262, 0x8, 0x9, 0x3f, 0x581b5697, 0x7, 0x100, 0x2, 0x6, 0x5, 0x8, 0x7, 0xc1, 0x80, 0x8, 0x2, 0x4, 0x1000, 0xbce, 0x1, 0x7, 0x7fff, 0x0, 0x800, 0x9f, 0x8, 0xffff8b4a, 0x6, 0x6, 0x3, 0x3f, 0x6, 0x3ff, 0x8, 0x7fff, 0x0, 0x3d, 0x5, 0x5, 0xff, 0x1, 0x3, 0x1, 0x10000, 0x0, 0x6, 0x5, 0x6, 0x8, 0x3f, 0x7, 0x8000, 0x7f, 0x9, 0x76, 0x6, 0x8, 0x1, 0x7, 0x3, 0x401, 0x40, 0x400, 0x3, 0x111, 0x280000, 0x6, 0x7ff, 0x3, 0x7, 0xffff, 0x5, 0xffffffff, 0x7, 0x81, 0x5, 0xffffff1c, 0x570, 0x5, 0x8, 0x0, 0x6, 0x3ff, 0xffff68e7, 0xe00, 0x6, 0x5, 0x40, 0x0, 0xfffffffd, 0x10000, 0x8001, 0x400, 0x1, 0x4b6, 0x8245, 0x3, 0x7, 0x401, 0xffffffff, 0x2, 0xae, 0x7ff, 0x7f, 0x7ff, 0x69643264, 0x7, 0x5, 0x8, 0x8, 0x1, 0x81, 0x6, 0x4, 0x7fff, 0x101, 0x2, 0x40, 0x6fa4, 0x3ff, 0x8ca, 0x85, 0x7, 0x1, 0x7, 0x2, 0x742b, 0xb509, 0x6, 0x136, 0x6, 0x6562, 0x0, 0x800, 0x1, 0x0, 0x0, 0x3, 0x6, 0x6, 0x200, 0xff, 0xfffffffb, 0x1f, 0x5, 0x2, 0x8, 0x2, 0x10001, 0x100, 0x80, 0x0, 0x3ff, 0x101, 0x20, 0x0, 0x9, 0xbc18, 0x80000000, 0x168, 0x81, 0x5, 0x4, 0x7fff, 0x4, 0x80000001, 0x0, 0x2, 0x7f, 0x3, 0x3, 0x10001, 0x200, 0x7, 0x0, 0x80, 0x401, 0x7, 0x8, 0xf640, 0x1, 0x7ff, 0x7ff, 0xffffff7f, 0x4, 0x1, 0x7, 0x0, 0x8de5, 0x6, 0xbc60, 0x8, 0x7fff, 0x0, 0x8000, 0x4, 0x5, 0xc00, 0x5, 0x5, 0x7ff, 0x9, 0xca7b, 0xfff, 0x1, 0x5, 0x200, 0x401, 0x8, 0x8, 0x132, 0x9, 0x1, 0x75dfa8e3, 0x6, 0x8, 0xfffffff7, 0x4, 0x9, 0x7fffffff, 0x4, 0xa8e, 0x80000000, 0x80, 0x1, 0x101, 0x87, 0x1, 0x2, 0x4, 0x8, 0xd68, 0xfffffffb, 0x2, 0x1, 0x1, 0x1, 0x8001, 0x1, 0x1, 0x9, 0x80000001, 0x5, 0x6, 0xeddd, 0x4, 0x8, 0x9, 0x4, 0x52, 0x8001, 0x7, 0x9a4, 0x3, 0x4, 0xffffffff, 0x8, 0x10001, 0x9, 0x1, 0x80, 0x6, 0x3f, 0x4, 0x80, 0xa80, 0x4, 0x9, 0x40, 0x9, 0x5, 0x4, 0x80000001, 0x401, 0x180, 0x2, 0x20, 0xffc00000, 0x3, 0x401000, 0xffffffff, 0x1, 0x4, 0x0, 0x2, 0x8001, 0x62, 0x9, 0x4, 0x36242545, 0x3, 0xe8, 0xac60, 0x7, 0xd1f, 0xff, 0x3ff, 0x0, 0x4, 0x9, 0x8000, 0xe7, 0x0, 0x8, 0x950, 0x4, 0x3, 0x10000, 0x2, 0x9, 0xf1, 0x9, 0x3ff, 0x4, 0x4, 0x8, 0x9, 0x1000, 0x3ff, 0x2, 0x80e7, 0x401, 0x20, 0x4, 0x29, 0x39, 0x1, 0x0, 0x2, 0x200, 0xb6, 0xfff, 0x0, 0x80000000, 0x1, 0x6, 0x7, 0x57, 0x0, 0x5, 0x1, 0x401, 0x4, 0x400, 0xfa26, 0x9fc2, 0xfffffc00, 0x1, 0x0, 0x14f9, 0x3f, 0x0, 0x50000000, 0x7f, 0x59, 0x8, 0x7, 0x3, 0x7f, 0x1, 0x176d, 0x9, 0xe1, 0x800, 0x7, 0xb2b6, 0x3f, 0x7, 0xf462, 0x1000, 0x6, 0x90, 0x4, 0x300000, 0x7, 0x7, 0x1, 0x401, 0x1, 0x9, 0x8000, 0x8001, 0x2, 0x6, 0x28b, 0x636, 0x4, 0x2, 0x3, 0x0, 0x8, 0xff, 0x80000000, 0x123, 0xec, 0x3, 0x9, 0x7, 0x2, 0x4, 0x5, 0x15, 0xffffffff, 0x5, 0x40, 0x4, 0x101, 0x7, 0x3f, 0x3, 0x5b9, 0xfffffffe, 0x6, 0x1, 0x4, 0xa7, 0x0, 0x0, 0x200, 0x20, 0x4, 0x9, 0x7, 0x9c7, 0x10001, 0x9, 0x200, 0x0, 0x401, 0x7, 0x7, 0x0, 0x3ff, 0x1ffa, 0x6, 0x20, 0x7fffffff, 0x20, 0x2, 0x7fffffff, 0x7c, 0x7d3e366c, 0xfffff001, 0x3, 0x3, 0xdfd24252, 0x4b4, 0x7, 0xffffdc28, 0xfffffffc, 0x0, 0xfffffffa, 0x80, 0x18, 0x2, 0x1ff, 0x3f, 0x7fffffff, 0x400000, 0x1, 0xfffffffb, 0x6, 0xffff, 0x4, 0x4, 0x10000, 0x101, 0x10000, 0x7f, 0x3, 0x3, 0x20, 0x1, 0x3, 0xffffffff, 0x3, 0x5, 0x6, 0x8001, 0x10001, 0x4, 0x2, 0x7fff, 0x1, 0x10000000, 0x8, 0x2867b9a1, 0x40, 0xfffffffa, 0xd5, 0xfffffffb, 0x3, 0x1, 0x542, 0x29, 0x89, 0x1, 0x8001, 0x5, 0xff, 0x4, 0xffffffff, 0x2be, 0x200, 0x3, 0x401, 0x0, 0x9, 0x2eb9, 0xa, 0x101, 0x2, 0x2, 0x1f, 0x1f, 0x7f, 0x9, 0x3, 0x1d60, 0x1, 0x7ff, 0xffff1591, 0x0, 0xffff791d, 0x81, 0xf03, 0x6, 0x80000001, 0x0, 0x7, 0x7e, 0x3f, 0x8, 0x5, 0x7, 0x1, 0x1, 0x1, 0x2, 0x5, 0x1, 0x9967, 0x1, 0x20, 0x95d, 0x3, 0x0, 0x2, 0xc21, 0x800, 0x8, 0x3, 0x4, 0x3, 0xeb, 0x5, 0x7000, 0x112e, 0x400, 0x0, 0x3, 0x2, 0x1, 0x7fffffff, 0x9, 0x9, 0x0, 0x1, 0x1, 0x7, 0x400, 0x4, 0x8, 0x2, 0x4, 0x6, 0x1000, 0x9, 0x7, 0x6, 0x1e62, 0x7f, 0x1fc2, 0x9, 0x1, 0x9305, 0x7, 0x8, 0x3, 0x1f, 0x8, 0x7, 0x4000000, 0x7fffffff, 0xfffff127, 0x6, 0x0, 0x9, 0xa30, 0x77, 0x8, 0x400, 0x2, 0x3, 0x29b, 0x3, 0x1ff, 0x4, 0x1, 0x8, 0x2, 0x80, 0x5, 0x6, 0x5, 0x0, 0x80, 0x5, 0x3, 0x0, 0x6, 0x4, 0x16, 0x9, 0x7, 0xfff, 0x80, 0x3, 0x2, 0x8, 0x80, 0x5, 0x6, 0xffffffff, 0x1ff, 0x6, 0x9, 0x6, 0x1, 0x2, 0xfff, 0x1, 0x1, 0x737, 0x5, 0xffff0001, 0x9, 0x7, 0x2, 0x8, 0xfffffc01, 0x9, 0x4]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 01:44:36 executing program 2: 01:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, r8, 0x100, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x89c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9156}]}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x7}}}}}}, 0x0) 01:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) read$usbfs(r2, &(0x7f00000000c0)=""/216, 0xd8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:36 executing program 2: 01:44:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6302000090780000"], 0x0) [ 1385.913031][ T5266] binder_alloc: 5265: binder_alloc_buf, no vma 01:44:36 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff0e, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 01:44:36 executing program 2: 01:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8}}}}}}, 0x0) 01:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x3ff, 0x7ff, 0x2}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) chdir(&(0x7f0000000000)='./file0\x00') listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:37 executing program 2: 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x9}}}}}}, 0x0) 01:44:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="51cf3b8d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:37 executing program 2: 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) [ 1386.310031][ T5302] binder: 5298:5302 unknown command -1925460143 [ 1386.348526][ T5302] binder: 5298:5302 ioctl c0306201 20000240 returned -22 01:44:37 executing program 2: 01:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000089780000"], 0x0) 01:44:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d5627e2c6db41ba01c7fffdc285c3e0e1ff73a1daa754e70d128bb1c31f7334261fd37053b2625ac8bc9794b6889f8d4713a9af6e367168e2d661115ba3b213e63615166b47694cc256d275edad277a22ead1259778be538a9a9846b7"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07630440cf188d9c23a0d9e9ed0ae5403fa75b355935ed90ef50e1e1c4d60b25f133acf104ad604910c84e26c1063fc41634cb728c5266a028680eb372ea5a55c916822853eb79ac0c7f910fb137c3857c405c4ea08079bd6032ab5470b13beb9abffae2353b245bde1029fb8fd6ee59618ad869ba766fecf39c19060a0275906e66520d3120dd0ba7307686507861a4c340"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaafaaaaaaaaaaaa4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:44:37 executing program 2: [ 1386.529664][ T5322] binder: 5321:5322 unknown command -500738531 [ 1386.543327][ T5322] binder: 5321:5322 ioctl c0306201 20000200 returned -22 01:44:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) msgsnd(0x0, &(0x7f00000001c0)={0x0, "112c5f445398c4977ac092a27a41e6fe8defd160eed79bd17b2d0075a081b9defde9970052bfb05860d45c0175fe035bed1fc167"}, 0x3c, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000)=0x40, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x24, r8, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x20044114) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2}}}}}}, 0x0) 01:44:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2744cc40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:44:37 executing program 2: 01:44:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x300, 0x70bd29, 0x2800, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) listen(r0, 0x7ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="1b7fdd0a0861977fc0ae208f2bdf474ceb9858445fd82ba82daa8f4a1d379b5236e0103b0772e541c71e7a78692420498eba6e5f730d85dd4e03558453459877c8c64dfb3f", 0x45}], 0x1, &(0x7f00000002c0)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x70, 0x3, [{0x0, 0x10, "582757d833b25b236d0c89ba4984"}, {0x7, 0x5, "8f1c68"}, {0x6, 0xe, "65e3ce41ff424622c29a7201"}, {0x6, 0x8, "8b5622ccdf2d"}, {0x2, 0xb, "c0f239f31300617d69"}, {0x0, 0x7, "ce3a51420a"}, {0x1, 0x9, "e63370001b8a62"}, {0x0, 0x6, "91a0083c"}, {0x1, 0xc, "731141c443f10c88b7d5"}, {0x5, 0x12, "58df42e9c0a4913b7b1bc93bde229525"}]}, @lsrr={0x83, 0x1b, 0xd9, [@empty, @private=0xa010102, @private=0xa010100, @private=0xa010102, @local, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa9, 0x0, 0x2, [0x9]}, @timestamp_prespec={0x44, 0x14, 0xaf, 0x3, 0x0, [{@local, 0xce}, {@broadcast, 0x3}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x2, [{@loopback, 0x4d1}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x4, [{@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x6, [{@multicast2, 0xe9}, {@local, 0x4}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xba, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @loopback, @private=0xa010101]}, @lsrr={0x83, 0xf, 0x96, [@empty, @multicast2, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @rr={0x7, 0x23, 0xd3, [@broadcast, @multicast2, @broadcast, @multicast2, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}, @rr={0x7, 0x1f, 0x22, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @empty, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0xc2, [@empty]}]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0xb, 0xe1, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @ssrr={0x89, 0xb, 0x7b, [@private=0xa010100, @multicast1]}, @timestamp={0x44, 0x10, 0x94, 0x0, 0xc, [0x6, 0x7, 0xfffffff9]}, @generic={0x44, 0xa, "5de7971fd58205a8"}, @lsrr={0x83, 0xf, 0x7f, [@broadcast, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x2b, 0x3, 0x4, [{@remote, 0x7}, {@local, 0x6}, {@multicast1}]}, @rr={0x7, 0x1f, 0xcc, [@local, @multicast1, @multicast1, @multicast1, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x678, 0x7fffffff, 0x5428000, 0x6, 0xffffffff]}]}}}], 0x2b8}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="3d33b073176a1f13", 0x8}], 0x1, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x70}}, {{&(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000880)="5ed45c704b025ff5bdc046588b4e32efc45333b09e59d0512e2da7c5ade935d9e1ebbabf9592f3cb2e8c76ab5bab456c0c2f1e560a7a50144d5f288e1b178156711a7f6c82dd35dd04994b8b6f0a6d358a1c5add4aba85226f2ba29d36f91e4b9e035c5951a35e7ee997410274d114efd54fdbd3a96268337069f7032c576262e29f1a73309972ccc352dfd46f07ca6b34047b56ffbd9e8df4695d51985be817812f8805ea1c7af2647d0ca6d6ae6fb3d079904b6421d67c9432cb5a4f29b6587b6f78e1d6e3f52ceda98fafbe8120f6c6d2d5bf3160fea219aa2f4a4a7d31c8d66a120d14a13ff8fa2665066f191858", 0xf0}, {&(0x7f0000000980)="b691d9641470a7a2211f98f1ea3a2ba28ea30eab0d5882170ae4a1b35bc23b16c459a2fb17b8fc98deaeeddd6ef13ad8a316b77c92a91709b31888114188497fe6cd221ab045b31f0dd1d7e8b6ef9ef96949aadc1868a691fcc21e9e99576cd928235069c6", 0x65}, {&(0x7f0000000a00)="2114ee112afc8d2fae9c70327f6d0f9568c46d62bbf6cee8709704e5d71e1d983e023c93c6aed11238ba41813db67512d189b969106e7864a61f85a0460ae4bc5aee02ae1dff0d971d56e4123eb86ebe72267f627e26631be42a2f59d5c31b928d85a3b6582f4fa5048821e85cae9d7219e96a02ff3f6ba2e3b317e101feb50ea9701935ba272bdcb93c23f77b7b7d69259ae674dad88450f16f7c716b1e342fa0", 0xa1}, {&(0x7f0000000ac0)="4460ec0b162aa8448427dbd45eba2c92eeeb83b399785fb25948bb0ccdd8b014498756bcea66bd16bd0b595d059bd7147d2cff453164f91c", 0x38}, {&(0x7f0000000b00)="0e0cdcea04a0601acc3b1e060d293941d8fec6ffb997e94a5b40018d4a0017e4189e5cda0efc6db4dd252a834626861e3e2d6f47ddd67e2f3dcd076cc261ad15d44351f94643a6b08d7d038bcf146494c8f4e948a99ff5cc271cb30b55ce9dde042ee80b0f", 0x65}, {&(0x7f0000000b80)="e4e7835462a5e0556f2b645b3838395aeae1d7dc07826a5b0cf46b44ca018282bc6c8789ae436c041e065f99938ba70a224f67f15559c6a5a19e714bcce59e59dfd37c25e3a553dd897eb03b8469bfa382dc77dbb1ebe5d9cf018182fdf609608a3a0eea6ed5e82ada064e503b09bdf13770370125d9b6f336248771850d5d64658a7d6d8ca002d76aca4ef8a6db1b5d15ed4b655f30673aa3a783cd9feae73e0d5ad2a4f217d41d6b7d26f442b378c5d05e15831b7dd0db63f897b7e9f4c38bd8ff4ead9aa2832feffd3f1036d138847836c8259bfe221ffded1a4db5cf1156d2538584ff6b78b6c9edcb623a", 0xed}], 0x6, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x6d, 0x3, 0x8, [{@rand_addr=0x64010101, 0x40}, {@empty, 0x6}, {@empty, 0x3}, {@loopback, 0xbd}, {@rand_addr=0x64010101, 0x9b}, {@local, 0x20}, {@loopback, 0x2}]}, @rr={0x7, 0x1b, 0x73, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @rand_addr=0x64010101]}, @timestamp={0x44, 0x4, 0x37, 0x0, 0xe}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x7, 0x11, "205dd476280d1f8e8970c479004718"}]}, @timestamp_prespec={0x44, 0x2c, 0x7, 0x3, 0x9, [{@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010100, 0x3}, {@multicast2}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010100, 0x3}]}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "a6577f2598c52f"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4bf}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x83, 0x9, "b18faa0676d014"}, @rr={0x7, 0x7, 0xfd, [@private=0xa010102]}, @rr={0x7, 0x13, 0x92, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @local, @empty]}, @noop, @end, @timestamp={0x44, 0xc, 0x1e, 0x0, 0x4, [0x4, 0x7]}]}}}], 0x170}}, {{&(0x7f0000000e80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002080)=[{&(0x7f0000000ec0)="340fd7c67c6e8dd32bb43ade85dc58050afa34772fc8986c236384df5bcfabd472d072a958d41ca69fc09c02b94359320fa9a2e73c13a99d3374c8f7a8", 0x3d}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="b9cdf29639053a217490aa0ee563cbefb8dc7acd43440a182ed1f6f20c0d0c5d2775e32dcce20826da2703fbbf6dcc783999bb9eac9fa86a80e57295", 0x3c}, {&(0x7f0000001f40)="aa719763a39fa60c5c8eedabb20dc11b023620e0f141d11c73ec3302cbf91773f009ad13f160a4f0236cc7982e11c4046b58a9c0bebd4f918d59ac6e400e417a1c702773d699c0bb1ef37559b27ef419d1a70c571104ce3bec87b1334156e943d21018a514ef9f182cb46595a098927a49b119451a36b60ce1aed633d1b9153b8ec481fcc309003e19f22eefa4e82cb1ab790b19c82fe8a6e86e61e43d88048c5698f00324ee3bb51f758ca67a14e13bc41616224fb35f07058566a16a62dbcf72f0adfa8179ad0bbb2c11d87d5d9533192f80ac9590726581e8e4b9f1c237295122f414ee5c34bc6a", 0xe9}, {&(0x7f0000002040)="9890f8ed47d52c916145f1825b2857e27df12cd0", 0x14}], 0x5, &(0x7f0000002100)=[@ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x45, 0x2, [{0x7, 0x11, "6025fd04fa6f9a814ae4b8cd9b6f9d"}, {0x0, 0x10, "8ce88fcfb62d27257046a5f6eb2b"}, {0x5, 0xa, "48ac65c430f3dea9"}, {0x2, 0x4, "81e4"}, {0x2, 0x10, "d241cff0d77c7a5d7a2339f0ec09"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x65, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast1]}, @end, @generic={0x86, 0x12, "42b4fb7e7d8f075b189fe7f9dfe4edd7"}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xae}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @multicast1}}}], 0xc0}}], 0x4, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000061cbd39b5f6a5823414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0xe7) [ 1386.693191][ T5332] binder_alloc: 5331: binder_alloc_buf, no vma 01:44:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) 01:44:37 executing program 2: [ 1386.763334][ T5338] binder: 5335:5338 unknown command 1087128615 [ 1386.800789][ T5338] binder: 5335:5338 ioctl c0306201 20000240 returned -22 [ 1386.830125][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1386.859785][ T5338] binder: 5335:5338 unknown command 1087128615 [ 1386.871579][ T5338] binder: 5335:5338 ioctl c0306201 20000240 returned -22 01:44:37 executing program 2: [ 1386.903249][ T5342] HTB: quantum of class FFFF0004 is big. Consider r2q change. 01:44:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:37 executing program 5: 01:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x4}}}}}}, 0x0) [ 1386.947433][ T5348] HTB: quantum of class FFFF0002 is big. Consider r2q change. 01:44:37 executing program 2: 01:44:37 executing program 5: 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x6}}}}}}, 0x0) 01:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = dup(0xffffffffffffffff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r8, 0x5}, 0x8) 01:44:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02020090780000"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0xf09, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3a}}, ["", "", "", ""]}, 0x24}}, 0x8000) 01:44:38 executing program 5: 01:44:38 executing program 2: 01:44:38 executing program 5: 01:44:38 executing program 2: 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x7}}}}}}, 0x0) 01:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) recvmsg(r5, &(0x7f0000001400)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f0000001300)=""/230, 0xe6}], 0x4, &(0x7f0000000240)=""/19, 0x13}, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x276, &(0x7f0000000180)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0xf0, 0x0, 0x1}], @ipv6=@tipc_packet={0x7, 0x6, "d8b6f5", 0x23c, 0x6, 0x1, @remote, @private1, {[@dstopts={0x21, 0x0, [], [@enc_lim={0x4, 0x1, 0xcb}, @ra={0x5, 0x2, 0x401}]}, @hopopts={0x0, 0x10, [], [@pad1, @ra={0x5, 0x2, 0xa47c}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x401, [0x6, 0x9, 0x8]}}, @generic={0x1, 0x50, "4ccc02c88b4d9472dae2c5ead97ea07d8c4f4d18bf809fbb7fa7bd6206aecfe5865a53d5ad144759ea4786085cff553dcd6c6854a2bc362361a2f37431061ff844d5b7bc1e9f47e30b1aaf4e4aa5d327"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x11, 0x0, 0x2}, @routing={0x3b, 0xc, 0x0, 0x4, 0x0, [@ipv4={[], [], @broadcast}, @mcast1, @mcast2, @mcast1, @mcast2, @loopback]}, @dstopts={0x62, 0x0, [], [@enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x3b, 0x1, [], [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x20}]}, @hopopts={0x16, 0x17, [], [@ra={0x5, 0x2, 0x1f}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x81, [0x1ff800000, 0x7fff, 0x1f]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0x7, [0x63, 0x4, 0x7, 0x1, 0x7ff, 0x6, 0x80, 0x6, 0x3f]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0xff, 0x0, [0x7fff, 0x4]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xd}}, @hao={0xc9, 0x10, @remote}]}, @fragment={0x1d, 0x0, 0x4, 0x1, 0x0, 0x19, 0x67}], @payload_mcast={{{{{{0x34, 0x0, 0x1, 0x0, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x2, 0x5, 0x0, 0x1, 0x5, 0x3ff, 0x2, 0x4e23, 0x4e22}, 0x1, 0x4}, 0x4}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) 01:44:38 executing program 2: 01:44:38 executing program 5: 01:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x10400202) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000000000006340c001"], 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) semget(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000000)) 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8}}}}}}, 0x0) 01:44:38 executing program 2: 01:44:38 executing program 5: 01:44:38 executing program 2: 01:44:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x581600, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x24, r5, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4004800) listen(r0, 0x7ff) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000240)=0x6, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:38 executing program 5: [ 1387.555406][ T5389] binder: 5388:5389 unknown command -1069522176 [ 1387.570154][ T5389] binder: 5388:5389 ioctl c0306201 20000280 returned -22 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x9}}}}}}, 0x0) 01:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'security.', '&\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xc0, 0xaf, 0x3f, 0x20, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @private=0xa010101}, 0x700, 0x0, 0x99a2}}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0x9, r7, 0x3e, r9}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='mime_typeem1(-wlan1eth0}ppp0-.em1#,&[\x00') r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x80, 0x55, 0x11, 0x0, 0x7ff, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x1000}, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) socket$kcm(0x10, 0x2, 0x0) 01:44:38 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read(r3, 0x0, 0x0) 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xa}}}}}}, 0x0) 01:44:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x18072) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaad7fdecc4d793aaaeaaaaaaaaaabb00fc440000280000000000069078ac14140000080000000000002fe6f8771fb259f2a03c9a877650a14af486dc27c6c0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESHEX=r1], 0x0) [ 1387.764727][ T5406] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1387.764735][ T5406] binder_alloc: 5404: binder_alloc_buf, no vma [ 1387.838914][ T5416] binder: 5412:5416 unknown command 0 [ 1387.868027][ T5416] binder: 5412:5416 ioctl c0306201 20000200 returned -22 01:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xcc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r2, r5, r6, r7], 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xb}}}}}}, 0x0) 01:44:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) 01:44:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x40, 0xf000, 0x8, 0x0]) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='mime_typeem1(-wlan1eth0}ppp0-.em1#,&[\x00') r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x80, 0x55, 0x11, 0x0, 0x7ff, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x1000}, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) socket$kcm(0x10, 0x2, 0x0) [ 1388.160589][ T5448] binder_alloc: 5447: binder_alloc_buf, no vma 01:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xe}}}}}}, 0x0) 01:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010204142dccc2102e20fe1eba37a146cdeb40"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x100000000, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, &(0x7f00000000c0)={0xfffffffffffffffa, r7, 0x10003, 0x6}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="f46321fd"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000000001"], 0x0, 0x0, 0x0}) 01:44:39 executing program 2: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x6, 0x0) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 01:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x11}}}}}}, 0x0) [ 1388.417605][ T5480] binder: 5478:5480 unknown command 335806977 [ 1388.450009][ T5480] binder: 5478:5480 ioctl c0306201 20000200 returned -22 01:44:39 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup2(r3, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x33588344}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r10, 0x20, 0xd881, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x48a4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 1388.499055][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:44:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x1b1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1388.586509][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, 0x0) r5 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r6) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r7) keyctl$unlink(0x9, r5, r7) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 1388.700797][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1388.801981][ T5505] binder_alloc: 5502: binder_alloc_buf, no vma 01:44:39 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x6, 0x0) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 01:44:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r3, 0x80000001, 0xa5f5, 0x10000000000000}) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x1ff}}, 0x0, 0x0, 0x15, 0x0, "a7e188b41b8cc845779c37985cdf2a0442d40269132225cb835bb4e323a9cba852d9cb63726f9e5f05ee75bcdbccb2bd31cbddee120ce9363651610805ba035949fb87925210717749012f260897ad68"}, 0xd8) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000080)="f97084be7f7c38f851146fa66a7a7c609a168af4d289e946c8b9e66327aa31dde88b025c18eb15c3088bec79149e794ab295609869b442f6a51825c09961a9caf31037d160ea5c8b851668341dac3fecb2070b0965e6606152dc96103844635a7bc95740ea0235caf9afe343fe3da63e5923af9141486e0fdb343b72759d17db", &(0x7f0000000140)=""/69, &(0x7f00000001c0)="33234d8119cb6aa12474a0605556b24f4d1db3d6bd375ae78ea6322e67718902655099609c43fdbaeb2385889ea98ec178c043fe6fe99befc6eeb8e35a9bc047c7e86f02c9bb2be495163cfcab867e507101acf6eefb4c5c8bf12d3365bf15095242759481047367efb81289555040da2db2499430", &(0x7f0000000240)="a5aa02ca4c6239cfc32f22a3ab10e5e372a8e5e5ec2c1cfcbd29ceb9d374eccaa741636c3ccc758897acc3a49aea3d775011a956753c91eb9e43513f174bebf0b2b021060025adc97b86cf34a9093de048ef06e3acf0421e3a5db169", 0x3ff}, 0x38) 01:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x14}}}}}}, 0x0) 01:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r5 = semget$private(0x0, 0x1, 0xb4) semop(r5, &(0x7f0000000000)=[{0x2, 0x8}, {0x4, 0xffff, 0x800}, {0x0, 0x1, 0x800}, {0x4, 0x9ba, 0x1000}], 0x4) 01:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04631afe"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = dup(0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x28}}}}}}, 0x0) [ 1389.028082][ T5527] binder: 5522:5527 unknown command -31825148 [ 1389.047032][ T5526] binder_alloc: 5519: binder_alloc_buf, no vma [ 1389.066085][ T5527] binder: 5522:5527 ioctl c0306201 20000200 returned -22 01:44:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r2, 0x8923, 0x0) close(r1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r4 = openat(r0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000200)='net_prio.ifpriomap\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000180)='./cgroup.net/syz1\x00', &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200005) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r5 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 01:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x9, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = memfd_create(&(0x7f0000000640)='sY\xa4\remem0md5sum$\x00\xca\x9b\x8c\x9f\xcd\x89\x8f\xef\\\xfb\x8fI\x851\xa0\xe9rN\x1e8\x0eg\xe0\xca\xaa\xe3?P\xa4.Y\xee\xd2\xc6\x19Y\xe8\xa3\xdc\x04c\xb6\xcf\x12N\xdc\x18\xabd\x82$>\xe1i\xe6=\"\x81;|1\xc3N\xc4\xe3\xc1\xe9\x93)\f\xfc\xd9\xc0/i#\x95\x03\x15\xe4\x01$\x11sI\xb54\x90\xb8hR{/\xc0cX\x84\xc8\\\xc4:\x15\x94\xeb9no]\x14\xe2zwP,Y(\x98\aa`\x0e@wT\x9b\x8a\xefhq\xad\x15J%;\xa0\xb3\xe8\x02\x89b\xb8\xb0\xbd.\x00\x00\x00\x00\x00\x00\x00\x00\xb4jc\xc4\xd5\xe0Wb\x16X6\'\xd5\xce\xfb\"\xfb\xe8\xec\x92\xfe\x1c\x15\x17\xb2\x8d@9vT\xf9gT\xba\xe2\xc2\x90\x0f\xc6\xc7IJPy\xed\xd9\xca\x17\x04g[\x87\xe5l\x04}D\xca\xb2\xe2.\xe8\xbeP\xe4\xcam}Z&[\xc8\x84\v7\xe0\xa6O\xd0\t\xf93\xd52\xb8\xec\xd9\':\xe3.\xd2\a\xd4\xb9\x92W\xe2HH\xf5F\xfa\xfd\xf6\x199\xa6\xa8\xbcq[\xf4\x00\x1dD\xa0\xd3\xc1\xce\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x91\xbd\x9ak\x91FnQ0`\xad\x8c\xb5W\x1fS\x8d\x82\xfbh9\xa4\x81{\x17\x14\xed\xbbF\x8d\x97!\xa3/\xb2\x9f\nm\xab\xe6\xbfN\xe2V\"+\xb8\x05\x9b\xa9\x1b\x8d\x88\x81\xea\x93@h\x1f\x87s\xd5\xca\xfd\x9e\xfbJFJe\x13X\x80\x91\x01\x1f\x89\x135\x87V\a\xa0\x17\xa8j9CR\xc6t\xdd\xaa3s\x84,\xe2\x1c[\xde\xdaoT\x8cq\xe4\x066(\t`@k\x1cYn&]\xcb\xe19\xe1\x17\x00p\xe1t\xcf:N\xa2f\xb2\x91\x18WR\xce\xc6%\xe9\x02\xa7\xd4\xcf\x93\x9d\xe5\x97r\x8d\x96\xe5\xac#\xc0C)\tn\x1e\xc7\xf0\x1b\xef\xb6\xb6\x17r\b\x05\xe0\xf8\xb1Hw\xdc\xca\xf7\xb4\x98%\xb5\x84\xd0\x02\xe6\xd6\xa295\xe4\xe7b\xa4G\t\xe6\xc2\xfe\x85\xb5\b\xa3\t\xc6\xa0\xab\x9c\xc7|\xeeu\xac4\x82\x1a\x81\xdc)-\xcd\x1f\xde\xd0\xad\xf2LM\x0e!\xe9\x19\x03\xce \xd1\xb0\xde\x84\x88\xa0\xcf\xf5\x14\xa3@ \a', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1000005, 0x11, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1389.233481][ T29] audit: type=1800 audit(1594863880.114:206): pid=5543 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15773 res=0 [ 1389.459179][ T29] audit: type=1800 audit(1594863880.354:207): pid=5551 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15775 res=0 01:44:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2c}}}}}}, 0x0) 01:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0xadc8, 0x9, 0x4, 0x100000, 0x4, {r5, r6/1000+60000}, {0x4, 0x2, 0x0, 0x8b, 0xf8, 0x80, "b28d3c31"}, 0x100, 0x1, @userptr=0x8, 0x20, 0x0, r8}) flistxattr(r9, &(0x7f0000000100)=""/105, 0x69) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440000000000063404001727ec37db9b67fd38965e125b10b4289788bab9440a083006bdd26ed4650adacca3ae4d302e2d5d709c4e82082460ec5b56e9cb700"/78], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x9b1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x6}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 01:44:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(r6, 0x40045644, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:42 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0xa0, 0x238, 0x138, 0x320, 0xa0, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'macvtap0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gretap0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) [ 1391.762286][ T5563] binder_alloc: 5557: binder_alloc_buf, no vma 01:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1f4}}}}}}, 0x0) 01:44:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0x8) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304550f68f264349469691d773ca683b43310492c016e3672a2ece8f1a8fdbaaf88f8e25212e6d4fa262c301be0c2518067a98d48d4fd3c5f5d4b8778815af8a0a27938196cb88385a298a079d49ed5d69621d6701872c0b718382bef0ecdc11b6cf075118b44f5febd806c13aeae8a07435895356d0e6b06bbfffeea9b5ff45ca30866784201540c971750223dc241490a1bf95487262bbb7263020ff04e5d0dd9344f267cbc10645c"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 01:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) 01:44:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x12b, &(0x7f0000000180)={@remote, @remote, @val={@val={0x9100, 0x2, 0x1, 0x3}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x200}, {0x7, 0x0, 0x1}, {0x8}, {0xff4}, {}], @ipv4=@igmp={{0x0, 0x4, 0x1, 0x2, 0x0, 0x65, 0x0, 0xff, 0x2, 0x0, @remote, @empty, {[@timestamp_prespec={0x44, 0x0, 0xc5, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbe03}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp={0x44, 0x0, 0x2e, 0x0, 0x4, [0x9]}]}}, {0x17, 0xff, 0x0, @rand_addr=0x64010102, "93138bf6ab3b457277852969"}}}}}}, 0x0) 01:44:42 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x408400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1391.906646][ T5576] Cannot find set identified by id 0 to match 01:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x300}}}}}}, 0x0) 01:44:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0x5521, 0x0) [ 1391.951954][ T5582] binder_alloc: 5575: binder_alloc_buf, no vma 01:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000009000000404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3e8}}}}}}, 0x0) 01:44:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/710], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) [ 1392.165158][ T5603] binder: 5600:5603 unknown command 1077936128 [ 1392.208556][ T5603] binder: 5600:5603 ioctl c0306201 20000280 returned -22 01:44:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='mime_typeem1(-wlan1eth0}ppp0-.em1#,&[\x00') r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x600}}}}}}, 0x0) 01:44:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 01:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0xff, 0x0, r2}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x3}, {0x0, 0x3, 0x0, 0x1ac}, 0x400, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0xfffffffc, 0x0, 0x0, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r3) chown(&(0x7f0000000080)='./file0\x00', r2, r3) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)=""/172, &(0x7f0000000000)=0xac) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$alg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="c5e88b1acbc12e341568738cf17aa52f1d80d270771bb3635df583bd4563ad6b8907efcb9335e9cda308e7f31b06828c103a9b39fda85d35cdb90774ba3b2b692a4d3a414357ec306f7476e2729d13d5aaa8168e89a6467f5795e37b592ba0f9eda1aef6e09e5d865f4c7cdf0c95d587b72508aa2e8943da10a0", 0x7a}], 0x1, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0x14, "a70eb6122a3f98e52cf4364241f8ac7229aeed31"}, @iv={0xf0, 0x117, 0x2, 0xd6, "940bd998add23064e09541c5edc9ddf02f0a00c6dc97ff51057f6ecc7ff0e037eb13553875a60d04b03df0dc515b43ec2f26d16bb700cd7ab3fb40254412a7419f8c3030f6d531dcb67c3ef4e84e81d4f80eda3ec2a76be5af6d96be168f60e3eb6cefbd73544a04d87dbf269779144b01202e055aadf7018b02ecc0286afdccb4a4eec2d7b952ce5e52b40710132071da9eb27e0cc1a4b851abf7df14d11bb81cae212113e928536e51ef3dde884608221637af01d1541721bc63274ae057947e8d36a9770f5d825417719723e9dae7ae5e7d698766"}, @iv={0x100, 0x117, 0x2, 0xe7, "0e62f1a275dffe2946dc2c55442816f3cdaeb890523d6fc71cbb27c91f88e466843b92e287287452938fb1bcda942c72308c23a1da030e59526aa58735a71cde6f2f1d00f61d69a742ffe8379ef030621c97ae5153622ac0c64c1742bb804c25990c9dc6ae1a45c90ebc7fe89dcffa843c9f238f30cfb13b974a6afbf3d285b1c25dbc6bb1e267068030652ae9f5f331b33d9dbb6eaceb4105612b3b30bf00c72fd9c04e3cb35d57f847d4ea479a5cd4ff0c150afdedb66fc29579015de63aca1dcc3cd48695d671f06a833ea31854699d4eba646d3c45346713a4a990eeb916fb0609a5594d2e"}], 0x248, 0x800}, 0x2004c010) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1392.431691][ T5632] binder_alloc: 5626: binder_alloc_buf, no vma 01:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xbad, 0x4) 01:44:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020100907a0000"], 0x0) 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x700}}}}}}, 0x0) 01:44:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64], 0xffffffffffffffca, 0x0, 0x0}) r6 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='mime_typeem1(-wlan1eth0}ppp0-.em1#,&[\x00') r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 01:44:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000aa790000"], 0x0) 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x900}}}}}}, 0x0) 01:44:43 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045113, &(0x7f0000000140)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x401, 0x100000001, 0xffffffffffffff81, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x3f, 0x8, 0x0, 0x3f], 0x100000, 0x400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x8, 0x3, 0x0, 0xf16, 'syz1\x00'}, 0x3, 0x4, 0x8, 0x0, 0x5, 0x62f, 'syz0\x00', &(0x7f0000000180)=['&\x00', 'net/fib_trie\x00', '$).-#\\)@\x10\x00', '\xe2*&+*\x00', '/dev/sequencer2\x00'], 0x2f, [], [0x2, 0xffff, 0x2, 0x4]}) sendfile(r2, r1, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xb21) openat$dsp(0xffffffffffffff9c, 0x0, 0x123002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:44:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/151) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02007a00000000"], 0x0) [ 1392.749018][ T5661] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.768675][ T5661] binder: 5657:5661 ioctl 40046207 0 returned -16 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xa00}}}}}}, 0x0) 01:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000300)={0x0, 0xc2, "9d4515a4c8c1d30b4d842dc8f08609cfd967eb74570c387b575f2c99c0933ce599d2ff38256143d6eef5373563d5cd8c00f8c0b0f956b7f130037cd53e10ce01803019fbb2d080921b048e3af5aad62bb62fea1349064f3051707f822068fd6bfef6432bbb434bdaf330d7284c9fde3e0d8364c068035e96e5a13a29b33025a8dc9508459307f2a816c3695dd223973b39a3063249fb02db2776aabd4d0b991b24ddd6bafdddc8bba56ffb27f3d54a3ca3d594ff97f9db086e4cc272b10e41fd8fd0"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xd, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630401000000000057404001784a8c0bbac3c9b7ad8384a8072d1945071369000068f95d22bc646e6ee9e0e9f1c29811f51b1b55e4a5c261edd5915cf2061cc13b75f9017ef28106858ce7a10467fc1d349246fa640c94ffc7efac81274dc483d154338f2d4d6c2a3321ca1fba81943973f191effaa818fff2103301691ce85c79286bd85cafd4398722aaeac5b6da0dbab976405adedfcf629118c46b558fa6fae4d662d2e8104b75172670addf6fbeb9db1c698b4e59bf88adf2850ce119290c3f0e74f1810f2cb5220280fd46da64f0f44a97d90b19199e2c448047118a4f91bfd0b52e4d5aa5e86df2b67b41b9c49629d786c3bba3e0f884d70f4ff2affbbcd3eeeda68555ae52bf6aa609063ae6a566cd6e6a2036f48fa72d663a4f3bd5a34a2b3ece8404fd8c74a390e9ec5a25f2801bd87d0b9eff0c4031f3e475e04e50ca15556338d1b6b43f522a8f85bfe15c14190002f122ac575d86da27318d982b15406ab8117fbb99b717b8cb5339f04921074b941a5600d7e174422d068660b2a779f951d13e2debacb960b8cbd47c77a2c6fa140bd48dba81273215a33fe843f64bf6dc4ffffdf569caddf289966dd50b7562641a5c8345b09b1470c0c48e463d2a33f2d609f5a0f028ac0de916a3b21ad894552525a896441f8f6787513a8382943e39b7c7f8d913e6c8d451ff8b0e2796251952c14c07826781582905a9e226287a7d978abee325668c340d093d002a6d9708c6b946bf0fd7b56dc9880524686b67f7bcc28724e11d7dfb7f2b27eae28336b679d038c0d757a38380d702dd998ffc4388ac9fe215305472c80ef95c9182"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x1, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 01:44:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0804450000280000800000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) [ 1393.004368][ T5697] binder: 5694:5697 unknown command -1224564412 [ 1393.034568][ T5697] binder: 5694:5697 ioctl c0306201 20000200 returned -22 01:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xb00}}}}}}, 0x0) [ 1393.062247][ T5708] binder: 5694:5708 ioctl 8912 400200 returned -22 [ 1393.108898][ T5697] binder: 5694:5697 unknown command 17064709 01:44:44 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x6, 0x0) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 01:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xe00}}}}}}, 0x0) 01:44:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630d40000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/72) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) sendfile(r4, 0xffffffffffffffff, 0x0, 0x9b1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r7, 0xfff, 0x6, [0x9, 0xf800, 0x5, 0x400, 0x9e0, 0x7ff]}, &(0x7f0000000140)=0x14) dup(r3) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], 0x0) 01:44:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x70}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe8003}) [ 1393.161844][ T5697] binder: 5694:5697 ioctl c0306201 20000000 returned -22 [ 1393.257391][ T5728] binder: 5724:5728 ioctl 7704 0 returned -22 [ 1393.288679][ T5728] binder: 5724:5728 unknown command 1074619141 [ 1393.315213][ T5728] binder: 5724:5728 ioctl c0306201 20000280 returned -22 01:44:45 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x281}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0x14f) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1, 0x2, 0x83, &(0x7f0000ffd000/0x1000)=nil, 0x6}) r1 = socket$netlink(0x10, 0x3, 0x4) open$dir(&(0x7f0000000100)='./file1\x00', 0x204002, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000414900000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') 01:44:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1100}}}}}}, 0x0) 01:44:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002808886aa98798218bac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r3) sendfile(r4, r1, 0x0, 0x9b1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r7, 0xf92}, &(0x7f00000000c0)=0x8) 01:44:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:44:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 01:44:45 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 1395.009219][ T5753] binder: 5748:5753 unknown command 6 [ 1395.023783][ T5753] binder: 5748:5753 ioctl c0306201 20000200 returned -22 [ 1395.029669][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1400}}}}}}, 0x0) 01:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:46 executing program 1: syz_emit_ethernet(0x300cce, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa180600000000008100000081"], 0x0) [ 1395.145526][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:44:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x70, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe8003}) 01:44:46 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) tkill(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB], 0xc) 01:44:46 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x0) 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2000}}}}}}, 0x0) [ 1395.233258][ T5778] binder: 5774:5778 ioctl 545d 0 returned -22 [ 1395.271494][ T5778] binder_alloc: 5774: binder_alloc_buf, no vma 01:44:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:46 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "0002f3bf233e00", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567", "48b60516c7ad6c19"}, 0x38) 01:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), 0x4) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:46 executing program 5: syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0x0, 0xe, "85034d2243b2fa2543b5c9bb"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "e56be9eaba73731fba68dd0d386cf57b"}, @mptcp=@capable={0x1e, 0xc}, @generic={0x0, 0xa, "eca51723f78f3d1c"}]}}}}}}}, 0x0) 01:44:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0x4}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsmount(r5, 0x1, 0x0) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2, r6}) 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2800}}}}}}, 0x0) 01:44:46 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x7fffffff) write$binfmt_aout(r0, &(0x7f0000000280), 0xfdef) [ 1395.501895][ T5811] binder: 5805:5811 unknown command 0 [ 1395.523129][ T5811] binder: 5805:5811 ioctl c0306201 20000200 returned -22 01:44:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14f) r1 = socket$netlink(0x10, 0x3, 0x4) open(&(0x7f0000000080)='./bus\x00', 0x54a00, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x9, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000414900000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2c00}}}}}}, 0x0) [ 1395.562907][ T5811] binder: 5805:5811 ioctl 125e 20000080 returned -22 [ 1395.588444][ T5811] binder: 5805:5811 unknown command 0 [ 1395.604998][ T5811] binder: 5805:5811 ioctl c0306201 20000280 returned -22 01:44:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:46 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xab) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 01:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7029521cf0bdbf1af4476826c2bfc7ed461e5a08df0ac5ce13553a8c7e1188001e9274ca0b006482a038a86656b88e255a4ad6863af058e19ab1d702e49a9b0fef6c0f0c27b9bb880ea98dd4bd503831fbfe842b1e8ef0716a3d76e89e1f0c18a3328e56929fdaa3be0680ba5fb54461166af932cc6c1ecc78d16852ba726b82dd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007065554f302000000000000000000000500010006"], 0x1c}}, 0x0) 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3f00}}}}}}, 0x0) 01:44:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000002d00270d0000000000000000000000f3", @ANYRES32], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) [ 1395.812735][ T5841] binder: 5837:5841 unknown command 475146608 [ 1395.824178][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1395.841349][ T5841] binder: 5837:5841 ioctl c0306201 20000280 returned -22 01:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 1395.896911][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1395.967040][ T5856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 01:44:46 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x430000) geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 01:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x4000}}}}}}, 0x0) 01:44:47 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "0002f3bf233e00", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567", "48b60516c7ad6c19"}, 0x38) sendmsg$netlink(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004040)=[{0x0}, {&(0x7f0000001400)={0x10}, 0x10}], 0x2}, 0x0) [ 1396.050254][ T5862] binder_alloc: 5860: binder_alloc_buf, no vma 01:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xe803}}}}}}, 0x0) 01:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000c4bc854ecb26229da047a910123d56f2647be64c5d56b915667dfcf2f046d946386c1b33e6b9c398480344abeed71aec6f47603df25b3470c27809e5bb42972dbfa627890163f69014ce43179b5769dd0cdbadaf5e943cb0ba7713200601a0cebf428a6c09cc55ef06c63170cad380a4459332008583be6df5e763cf4974d1282afd286c28f60c59baa9ca6d88666aa2be5fd074735ea95add9373f36bb3", @ANYRES16=0x0, @ANYBLOB="10000000000000000000010000000000000007410000004c001800000000696200"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044044}, 0x4000800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0x0, 0xe, "85034d2243b2fa2543b5c9bb"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @eol, @generic={0x0, 0xf, "eca51723f78f3d1c4108714c1c"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 01:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xf401}}}}}}, 0x0) [ 1396.311123][ T5885] binder_alloc: 5880: binder_alloc_buf, no vma 01:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c81199dabee0a6b430fe97fa8bce537630440e5fb950d8a4654c410d4c5da947f9cad65fb078e4eeee249dc2c513666aed841b5a25b8b13db22b6a713102d4391d10472b521be461b3329aa673bceacbf93a9b5a296d75a31b9445df10997a43341d7e94a4759b300a6c59075693a447405aa2ae8d59a5c3e9349f1f6b7e9f29f04e41703babc97305bfc3db3cded0c1624c9f94cf9ef85cd51bdbb35d428c61bea77115f5723f748db6fe60f3564071df7b912daf70fef919b"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRESHEX], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0xc, {0x5, 0x80000000, 0x6b, 0x7ff7fffe}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0}) 01:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xff07}}}}}}, 0x0) 01:44:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f0000000040)=0x54) 01:44:47 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "0002f3bf233e00", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567", "48b60516c7ad6c19"}, 0x38) 01:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 01:44:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1397.029340][ T5921] binder_alloc: 5916: binder_alloc_buf, no vma 01:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:44:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, r0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000380)='./file0\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x9, 0x40, 0x7, 0x2, 0x0, 0x1ff, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3f, 0x6}, 0xc, 0x80, 0x9, 0x3, 0x6, 0x3}) keyctl$chown(0x11, r2, 0xee00, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r2, 0x27, 0x72}, &(0x7f0000000540)=ANY=[@ANYBLOB="656e633d6f6161726d36340000000000000000000000000086deab4b0355da0ba82f195ba600000000000000feffffffffffffff62048c3a00000000000a00000000000000000000e10000000000000000000000000000003b69c1ffea96c74c8c9c0298c9cb3f1a4a0512c89d5b48dcb60016fb8d"], &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519a73e069af35b59b8c0f347612f52681efae833617e59", &(0x7f0000000440)=""/114) fgetxattr(0xffffffffffffffff, &(0x7f00000004c0)=@random={'user.', ':.#@},!{-&\xbc:/]]\'-,})(.^+#%-.]*\x00'}, &(0x7f0000000500)=""/51, 0x33) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f00000005c0)=@random={'user.', '\'&\xc9}),/\\\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) socket$inet6(0xa, 0x2, 0x0) 01:44:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11c00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) 01:44:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000040000008835f9ab"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}, 0x0) [ 1397.254296][ T5945] binder: 5940:5945 unknown command -113932288 01:44:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c00000010001ffff2ff268f1c872d2b01000000", @ANYRES32, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1397.302027][ T5945] binder: 5940:5945 ioctl c0306201 20000280 returned -22 01:44:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1397.400681][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440d91d99edf929d2af089be9ae478a4ea6cdb4479153342cc97673831de861dcf748fb559cdc68"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r6, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r6, 0x7fff, 0x5, [0x2, 0x6, 0x200, 0x1ff, 0x4]}, 0x12) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x3}}}}}}, 0x0) 01:44:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1397.480763][ T5957] device vxlan0 entered promiscuous mode 01:44:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 01:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x4}}}}}}, 0x0) 01:44:48 executing program 5: 01:44:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4048040) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 01:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x6}}}}}}, 0x0) [ 1398.116091][ T5996] binder_alloc: 5992: binder_alloc_buf, no vma 01:44:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_getsetattr(r1, 0x0, &(0x7f0000000080)) 01:44:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x7}}}}}}, 0x0) 01:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="04c67176ee4febfe2b9a6304408e008ebe88284e4f19e2e9e2e90f26415fbc0416d6822e0900000079e0026cdb2fc81ca0d8377aafdf076624bb54e8eed698ed3b82eb0b6b2c33472eb74ac493982dd31b7d410da9d2fb7a8163170144764386781b154637ad5ff33fceb74d0b49a9474f1e"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050100"/13], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x0, "964ffc0e8b41ed243338fb48e8083dca7ffc5c91add395c7c1964537f4130d31", 0x800, 0x7fff, 0xa111, 0x4, 0x4}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200902, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000140)={0x8, 0x5, {0x55, 0x5, 0x1, {0x401, 0x9}, {0x6, 0x7}, @period={0x5a, 0x5, 0x1, 0x0, 0xfff8, {0x101, 0x3, 0x7ff, 0x8}, 0x6, &(0x7f0000000100)=[0x8, 0x4, 0x101, 0x9, 0x800, 0x21]}}, {0x54, 0xd09, 0x101, {0x226d, 0x2}, {0x22, 0xb2}, @rumble={0x2, 0x101}}}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000240)=0x6) 01:44:49 executing program 2: clone(0x4a900800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x2, 0xd, 0x2, 0xf5, 0x8, "0500005b00"}) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffdc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) rt_tgsigqueueinfo(0x0, r6, 0x19, &(0x7f0000000180)={0x3a, 0x710, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x103, 0x0, 0x0}) 01:44:49 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r2 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/file0\x00', r2, &(0x7f000034aff8)='./file0\x00') renameat(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000100)='./control\x00') name_to_handle_at(r2, &(0x7f0000000040)='./control\x00', &(0x7f0000000240)={0x8}, &(0x7f000091bffc), 0x0) 01:44:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}, 0x0) [ 1398.356596][ T6016] binder: 6012:6016 unknown command 1987167748 [ 1398.387893][ T6016] binder: 6012:6016 ioctl c0306201 20000200 returned -22 01:44:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1398.432369][ T6016] binder: 6012:6016 unknown command 261 [ 1398.454780][ T6016] binder: 6012:6016 ioctl c0306201 20000280 returned -22 [ 1398.478680][ T6024] binder: 6012:6024 ioctl 40445637 20000080 returned -22 01:44:49 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000002d00270d0000000000000000000000f3", @ANYRES32, @ANYBLOB='\x00'], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 01:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) socket(0x1000000010, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r8, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) 01:44:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x9}}}}}}, 0x0) 01:44:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1398.635765][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1398.673293][ T6042] binder_alloc: 6038: binder_alloc_buf, no vma 01:44:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xa}}}}}}, 0x0) 01:44:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x1ac}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1398.693556][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x990000, 0x401, 0x40000, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a092c, 0x8001, [], @p_u8=&(0x7f0000000000)=0x7f}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x7, 0x2, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000140)=0x100, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1398.808176][ T6061] ptrace attach of "/root/syz-executor.5"[6060] was attempted by "/root/syz-executor.5"[6061] [ 1398.912666][ T6064] binder_alloc: 6063: binder_alloc_buf, no vma 01:44:50 executing program 2: 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xb}}}}}}, 0x0) 01:44:50 executing program 5: 01:44:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04ab6304"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:50 executing program 5: 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}, 0x0) 01:44:50 executing program 2: [ 1399.212115][ T6079] binder: 6071:6079 unknown command 73640708 [ 1399.245976][ T6079] binder: 6071:6079 ioctl c0306201 20000200 returned -22 01:44:50 executing program 5: 01:44:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x164, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x68, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x724}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x72}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$qrtr(r7, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:50 executing program 2: 01:44:50 executing program 5: 01:44:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x11}}}}}}, 0x0) 01:44:50 executing program 2: 01:44:50 executing program 5: 01:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:50 executing program 2: 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x14}}}}}}, 0x0) 01:44:50 executing program 2: 01:44:50 executing program 5: [ 1399.664298][ T6113] binder: 6107:6113 unknown command 875837489 01:44:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1399.714728][ T6113] binder: 6107:6113 ioctl c0306201 20000200 returned -22 01:44:50 executing program 5: 01:44:50 executing program 2: 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x28}}}}}}, 0x0) 01:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20200, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x1ff}}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x978c3136a30ed1b4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9444cbe86abe"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8820}, 0x40000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:50 executing program 5: 01:44:50 executing program 2: 01:44:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2c}}}}}}, 0x0) [ 1399.942091][ T6131] binder_alloc: 6127: binder_alloc_buf, no vma [ 1399.981447][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:44:50 executing program 2: 01:44:50 executing program 5: 01:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5fc6b7e3c000800002b5a33c16304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x20000400200) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r6, 0x4) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:51 executing program 2: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1f4}}}}}}, 0x0) 01:44:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:51 executing program 5: [ 1400.182121][ T6148] binder: 6147:6148 unknown command 2121006293 [ 1400.211736][ T6148] binder: 6147:6148 ioctl c0306201 20000200 returned -22 01:44:51 executing program 2: 01:44:51 executing program 5: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x300}}}}}}, 0x0) 01:44:51 executing program 2: 01:44:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000100)=0x9) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="ac22f7ebdcef9c9137ec67cc3fb7aa49", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:51 executing program 5: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x3e8}}}}}}, 0x0) 01:44:51 executing program 2: [ 1400.458413][ T6167] binder: 6166:6167 unknown command 0 [ 1400.469796][ T6167] binder: 6166:6167 ioctl c0306201 20000200 returned -22 01:44:51 executing program 5: 01:44:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:51 executing program 2: [ 1400.523062][ T6167] binder: 6166:6167 unknown command 926363952 [ 1400.553046][ T6167] binder: 6166:6167 ioctl c0306201 200000c0 returned -22 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x600}}}}}}, 0x0) 01:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000080)={0x78, 0x2, 0x68, 0x1, "a901e8521413468edc2eb41091322f028e605a005389af40e93ba602a476753d52c140e18fefd031e974d79263fb527ed4dec11b18debdbc76a82d96bbda1671d089c494ecb75565bc8fd8e80a516872f6219e8693ed129e065f737e0b7f0f63"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:51 executing program 5: 01:44:51 executing program 2: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x700}}}}}}, 0x0) 01:44:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:51 executing program 5: [ 1400.753288][ T6193] binder_alloc: 6188: binder_alloc_buf, no vma 01:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x402) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630640"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x602100, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000240)={0x1bacf914c1bae5f, &(0x7f0000000740)=[{@none}, {}, {}, {}, {}, {}, {}]}) r5 = dup(r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) name_to_handle_at(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x21, 0x4, "ada1eb892787c06100ae909fcfb71db1fcc2cb601cb3280b71"}, &(0x7f00000000c0), 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(0xffffffffffffffff, &(0x7f0000000180)=0xa, r6, &(0x7f00000001c0)=0x6, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="050100400000000000458d4001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:51 executing program 2: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x900}}}}}}, 0x0) 01:44:51 executing program 5: 01:44:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:51 executing program 2: [ 1400.975629][ T6205] binder: 6202:6205 unknown command 1074160388 01:44:51 executing program 5: 01:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xa00}}}}}}, 0x0) [ 1401.026902][ T6205] binder: 6202:6205 ioctl c0306201 20000200 returned -22 [ 1401.049161][ T6211] binder: 6202:6211 unknown command 1073742085 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1401.077713][ T6211] binder: 6202:6211 ioctl c0306201 20000280 returned -22 01:44:52 executing program 5: 01:44:52 executing program 2: 01:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/239, 0xef}, {&(0x7f0000000100)=""/140, 0x8c}], 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xb00}}}}}}, 0x0) 01:44:52 executing program 2: 01:44:52 executing program 5: 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1401.266628][ T6223] binder: 6221:6223 unknown command 65537 [ 1401.283775][ T6223] binder: 6221:6223 ioctl c0306201 20000280 returned -22 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xe00}}}}}}, 0x0) 01:44:52 executing program 2: 01:44:52 executing program 5: 01:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000080)={0x9f0000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9a0910, 0x9, [], @value64=0x9}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x400200, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000380)='/dev/binder#\x00', 0xd) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:52 executing program 2: 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1100}}}}}}, 0x0) 01:44:52 executing program 5: [ 1401.510836][ T6241] binder: 6239:6241 unknown command 65535 [ 1401.535614][ T6241] binder: 6239:6241 ioctl c0306201 20000280 returned -22 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:52 executing program 2: 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1400}}}}}}, 0x0) 01:44:52 executing program 5: 01:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05411b8d47341f89d2bc4658d508ce630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:52 executing program 2: 01:44:52 executing program 5: [ 1401.767447][ T6259] binder: 6255:6259 ioctl 8912 400200 returned -22 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2000}}}}}}, 0x0) 01:44:52 executing program 2: [ 1401.807713][ T6259] binder: 6255:6259 unknown command -1927593723 [ 1401.834213][ T6259] binder: 6255:6259 ioctl c0306201 20000040 returned -22 01:44:52 executing program 5: 01:44:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000080)=""/252, 0xfc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2800}}}}}}, 0x0) 01:44:52 executing program 2: 01:44:52 executing program 5: 01:44:52 executing program 5: 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1402.051239][ T6273] binder_alloc: 6272: binder_alloc_buf, no vma [ 1402.076472][ T6273] binder: 6272:6273 ioctl 4c01 0 returned -22 01:44:53 executing program 2: 01:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2c00}}}}}}, 0x0) 01:44:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x7f, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="cdaaaaaaaaaaaaaaaaaaaabb08004500005b7392ac141400ac1454aa00004e22000000000000", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="5c02000090780000"], 0x0) 01:44:53 executing program 5: 01:44:53 executing program 2: 01:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) r3 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4138ae84, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "f45cf868a12fa011a70c1f8128aaab00"}, 0x11, 0x0) r5 = dup(r4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x20044020) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0523000000000d00000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:53 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xff4a}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e000ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa39722490bdd9f2774cffe4bd03c9975ba4b0cc3d7c3788e745965108c630cc26d19369cc660d3ccbf2feaeb4603347ab0c8dd0fd14bd500000000000000", 0xffffffffffffffb6}], 0x1, 0xb) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="890000002a"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000001, 0x0) 01:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x3f00}}}}}}, 0x0) 01:44:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 01:44:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000001c0)=0x28, 0x4) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000d78faeadf862a2a4f17bf18489289bbf1076a0c5b713964d414f0fc6950b9922cf2846a5f8e97a497ae14644647b47c0ea21b9ae8956c7cdd49533cf550d5d4be1baa90c64c4d9950f176715a653bdf264fd7b0d282a22db353bd9b3b9dbb99c0fc16fa0aaa6de142ce3176300dabcf3f0b688487ac9daea0fe8556f240b062f890d43ee9b058e7b493cfe060d3e5c6285b091e3665d79a9e347ca3e328da0e7c90876f7274ccfbf981506183f09"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x2404c000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000548a7d9bd6cc9e9db5e900"], 0x0, 0x0, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x4004040) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0x8}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x18000203) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 01:44:53 executing program 5: [ 1402.578767][ T6313] binder: 6309:6313 unknown command 0 [ 1402.617572][ T6313] binder: 6309:6313 ioctl c0306201 20000200 returned -22 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1402.637750][ T6321] binder: 6309:6321 unknown command -1974206464 01:44:53 executing program 5: 01:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xe803}}}}}}, 0x0) [ 1402.682732][ T6321] binder: 6309:6321 ioctl c0306201 20000280 returned -22 01:44:53 executing program 5: 01:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2080, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x1, 0x1f, 0x8001}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:53 executing program 2: 01:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xf401}}}}}}, 0x0) 01:44:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a003505d25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 1402.945496][ T6334] binder_alloc: 6332: binder_alloc_buf, no vma 01:44:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x2a0, r5, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6365}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc877}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xba, 0x3, "ec93af6d2715448c72a7398caa2e25622e8d0bb82d6d347cdff76b354055930e701287d2d8cc68a0aedf93637ab910b55a42b2f5bcafc82fe5c9fe0d50c9c9c513453a747e0d1c84d383633d12bf4e3039e1ddf3c00e81140a632dac2c5a5fcf29cebc701c3b9efac24c1a99caabd55658236a57e87d1fb4c0b94086cd332ef20d54d62f4afd73bc2328ca30c33de645e116170f77bbb5594daed03ca17200f63265b5c66fd5f3c32d6663bb46be5f738431d44dc8e9"}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaeaf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2071}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x75}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf3b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x840}, 0x4840) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 1403.057923][ T6341] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 1403.085251][ T6341] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 01:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xff07}}}}}}, 0x0) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1403.112345][ T6341] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1403.148998][ T6348] binder_alloc: 6346: binder_alloc_buf, no vma 01:44:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90503600040f000009e0ff008001fffffe100004000633a77fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:44:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x400, 0x0, 0x2, 0x94, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x80, 0xc6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x96, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x599b5968a33876a5, 0x100000001, 0x6, 0x9, 0x7, 0xf3, 0x8a4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1403.366320][ T6360] binder_alloc: 6357: binder_alloc_buf, no vma 01:44:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xb2f, &(0x7f0000000180)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x16, 0x2593a, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1403.553134][ T6374] binder_alloc: 6372: binder_alloc_buf, no vma 01:44:54 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="1371e969430b8cc8879430f3dafa94f9f3ce1867758be1e9ae1bbd25e528dbf23282461b1f73510928fe59ef2afaaaa6af67c6087c01af5a8e7ca163c7e1d3cbb5e9d77198b7d34a4461a693ce76daf2a4", 0x51}, {&(0x7f0000000340)}, {&(0x7f0000000400)="70e4dcb5dd537df2f699be1c02e304d255100c2085c47436bad582bae1132b4d05fbcafd29f7d56244031a81f6944619ec61200d7b38abf43fea8482c489d0976ae9cbe7712abfceb348c0635b503ddb7f049e261b157e54994fed601a834c54e0cf3d691a2258a29f71a71d010680a2139db7992f1b1b7ef4c3740984cefd65c19a4e60be", 0x85}, {&(0x7f0000000000)="af1820a14f492b3aa1", 0x9}, {0x0}, {&(0x7f0000000540)="5024d0fc70c8a2f58301e02a461d53e9bbf8c0cbc706a0986fc8a998f73da31e68fd031a23", 0x25}, {&(0x7f00000005c0)="a57b6aec6a3ed4b35797b18d66a5a23078779c96655373a03f2bd7bf9d92eb00a41a5ddeefd7fbba00adf558b0f9bfefc28d42555d4f1f5543f590800fc9313c797f78c8534c06936f00438e734220b292c96c52c3b16d46aa909e66f4bd98bce2bca448d439b8d5d6595221ab0212fc9c7d8ffa93f3da4b17e874f7b3f3eeadc9f9b25245d985dde253f0d7329618385fbd2360731e5ef940c25169c2163324fcfffd53a33f0e77fc89c17c588df6f39b785a4dbdb9e2e4f9cd0c0bbdc501cfaf3ad98e9a7c67865513cdceca2a854a9105c1ecb54a6b3d71c801651dd5e8b3bb", 0xe1}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000000880)=[{0x10, 0x10e, 0x4}], 0x10}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0xb, r0, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r0, 0x3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:44:54 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9a0000, 0x1f, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a091b, 0x40, [], @value=0xe5}}) write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x240042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x2) r6 = dup(r4) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304885c3f98c3f37d76ad96615a99af875600000008000000404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:54 executing program 5: gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f000000acc0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/710], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="1371e969430b8cc8879430f3dafa94f9f3ce1867758be1e9ae1bbd25e528dbf23282461b1f73510928fe59ef2afaaaa6af67c6087c01af5a8e7ca163c7e1d3cbb5e9d77198b7d34a4461a693ce76daf2a49120dc473dea729a09e89f26d463e94d35781756", 0x65}, {&(0x7f0000000340)="5c9847082bd2cba6f518e9ac10a06ce38499f287dd8f346b3f98109582ed10ceefeb5c47f6edded320a5b75561e9b4be9e0b9ee36090cbee9fe367f6a849c82bea83659cd85939bc84ddaa0f9cb9e83079d548a87578a3e264710e8668b504c984e35ef90c68bde482ae4115c2b97eae4dfd200aff3afbe5eba649496ef5274863479654148aa16970f42295", 0x8c}, {&(0x7f0000000400)="70e4dcb5dd537df2f699be1c02e304d255100c2085c47436bad582bae1132b4d05fbcafd29f7d56244031a81f6944619ec61200d7b38abf43fea8482c489d0976ae9cbe7712abfceb348c0635b503ddb7f049e261b157e54994fed601a834c54e0cf3d691a2258a29f71a71d010680a2139db7992f1b1b7ef4c3740984cefd65c19a4e60be", 0x85}, {&(0x7f0000000000)="af1820a14f492b3a", 0x8}, {&(0x7f00000004c0)="58e4c529d3deee5c8c5065cafcead2615e1d791d4474c0168516f114ef85c2cdfe4978eb5f916f1ea51bef1efa8c1019f5e55d198b497fcecd859c02e02d379d20", 0x41}, {&(0x7f0000000540)="5024d0fc70c8a2f58301e02a461d53e9bbf8c0cbc706a0986fc8a998f73da31e68fd031a236178e0fc8b619cbde2bdd6a5b41da4367c2042e39d60bebd745b09819d2b9235d357b17f88833501", 0x4d}, {&(0x7f00000005c0)="a57b6aec6a3ed4b35797b18d66a5a23078779c96655373a03f2bd7bf9d92eb00a41a5ddeefd7fbba00adf558b0f9bfefc28d42555d4f1f5543f590800fc9313c797f78c8534c06936f00438e734220b292c96c52c3b16d46aa909e66f4bd98bce2bca448d439b8d5d6595221ab0212fc9c7d8ffa93f3da4b17e874f7b3f3eeadc9f9b25245d985dde253f0d7329618385fbd2360731e5ef940c25169c2163324fcfffd53a33f0e77fc89c17c588df6f39b785a4dbdb9e2e4f9cd0c0bbdc501cfaf3ad98e9a7c67865513cdceca2a854a9105c1ecb54a6b3d71c801651dd5e8b3bb22e53393f9a92156752e43002ff1", 0xef}, {&(0x7f00000006c0)="b9e62819db1a4e4b5b45416cb570cc3b1cd9e033f461b0ba846920a710ed5d9ba2b24fb2d528c8e1391afd5ac7", 0x2d}, {&(0x7f0000000080)}], 0x9, &(0x7f0000000880)=[{0x80, 0x10e, 0x4, "8549a464b5ad4a62e60acb5aa8ca9d1a9e9fb2d8a6673f69d1a5d022bea241c34c6ad1c5445de1ea4bd1cf5a50b60f900d324787fdb65accd5922e65ad1fbc0af98b39b7a906da2566f3c07297f75c8184dd9527e871098221a1a4cf114aea802dad97a60bbb1aa996e9f3831b"}], 0x80}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x400, 0x4eef, 0x2, 0x94, 0x0, 0x5}, r2, 0xb, r3, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r3, 0x3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x80, 0xc6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x96, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x599b5968a33876a5, 0x100000001, 0x6, 0x9, 0x7, 0xf3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1403.777682][ T6387] binder: 6383:6387 unknown command -2012978427 [ 1403.800141][ T6387] binder: 6383:6387 ioctl c0306201 20000280 returned -22 01:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4138ae84, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="1371e969430b8cc8879430f3dafa94f9f3ce1867758be1e9ae1bbd25e528dbf23282461b1f73510928fe59ef2afaaaa6af67c6087c01af5a8e7ca163c7e1d3cbb5e9d77198b7d34a4461a693ce76daf2a49120dc473dea729a09e89f26d463e94d357817560504d037fabe41", 0x6c}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000000000)="af1820a14f492b", 0x7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000880)}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7}, 0x0, 0x400, 0x4eef, 0x0, 0x94, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x3}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1403.930388][ T6397] binder: 6396:6397 unknown command 926363952 [ 1403.954351][ T6397] binder: 6396:6397 ioctl c0306201 20000080 returned -22 01:44:54 executing program 5: perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x8001, 0x0, 0x0, 0x100, 0xc, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/710], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) [ 1404.017334][ T6397] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1404.116666][ T6410] binder: 6396:6410 unknown command 808482864 01:44:55 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00', @broadcast}) socket$kcm(0x11, 0x0, 0x300) 01:44:55 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) [ 1404.158696][ T6410] binder: 6396:6410 ioctl c0306201 20000280 returned -22 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x8, 0x40, 0x200}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0xf43fefae59b4f87f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4}}, 0x1c}}, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 1404.278541][ T6419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1404.310030][ T6419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1404.354335][ T6419] device hsr0 entered promiscuous mode [ 1404.387255][ T6425] binder_alloc: 6422: binder_alloc_buf, no vma [ 1404.397243][ T6419] device hsr0 left promiscuous mode 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:55 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60edd309df5028464dae984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458050000007c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6be4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49db6d4a4762e5cc23dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f53115f4d31dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba396b09021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf39f3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfff248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb0749cacf56cf27409c60fca2e2981b22d08f874e0a9cb6fca7844f9dab530388eb1f43d4abbfc59d6f1b18fe380df4bf024f120bd715d82033f2fb7d8fc9e0d77b294e097e293db58992c0024ab2fd8e5e7002ef92d11de48e8b4d32972cba6f49051ce791f2ac1060000001bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde2480ae40d6156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb805ffe5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f0889f4ee8964875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c930c0b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953d000e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798a7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf080de1f87808d0711dd76f35957305354b598597cac4421bb0c62254b74a8cde691d6915ee8051f9be18f6be67820a287fa18c156ae3d10dce480a555510e5cacf8b01f043e3c405357c210362408ee3c6a60ac24623a4ffc5fe920890c687160b13e32dd7394c8936d956d1e1652ee9880b5104d49ae69b279afd4efd1b38e4ab922f29722ec4ec1ee556dcdb01ac6383c536c39b5afdc69292083f8868def2bc571bc3588ecf000000000000862158dea138f46bb027db8bf6216e8611b0e0c35eb69ae3da32125cc5628425c12a5b64b2829b76cccaa8d52169ef95a362159abc1f2c6154471119f71acef17a6b710ef6945dc9cfdf8fde7e2cc3b9e6d30606a1031849d984be985e29cf88241f6932f98f08ca76c8eea0b4ed45c2f6075ae50768837f5ec2f51035614d163980ad8da179739ad5ccb9fb33f0898114c852f41886b5d5ac01e386a23b673e3c8921a055375bf40b072b65e2d5c352be12a8c5f8399cdcc43523ed10639cde40d169ea05d2446a908b7b6be3d4aa90beba5ad6db8593c556e472c7785a6389ea55a7d2dca60f254fd341fe42758706cf0f8a2b6ca85dcdd275676481d008a13ea018eaac83608c60655bb1648654c2a511635c9e9d813addb6698662aa43dbaa65c6a21d7d93885031fd79e49dd105e9a7d53b3ad35b3d5232dae1c30a3197b1ee3c451df7dd68172781161971bb8bbd52910aa27782e4582cecf6345218a30e22d9f2e83a0f00d5549a2fb927fefec0620021358de68332d0677f7e44b95b5cfefc19178d9fe04a497ca906ae9baf5c97fb1facfbcb094cb76f20e7f290f4f22d008b9dd99708ea7f42af6366715d2aef8f5e144736903e687b83cb0741660f6a8173507789e5d529a91b3cc18683d9ee729423c3c99867c4077b23ef958ecbb40dba82a03ea85fd21401b7ab026969385b3f64397d7b2df6fb0a91ebbd37430bc78a4b9e3d9d7933353af78a48e2e7e198c38571b8437ab6062abebcc476fa589f203c31002045939de3eebbdb96cec6b02dbb32f6b4c0a4b821789c9e2fac74a1f10ede999bd99b6adcd05c9e9bd39b609105716d1abd3c8526bd662698e0dae7be054f8475718f96a6dde56e93ac0888ff308f65b4f8705ae4ea9eca4d2f00c49bd1cb437583af820c5380eb13533463efd8ae70a43a2506993c5a44a1d3d7806b858c5a0e48ac322734d5ac229dcced9af3637e0bf1fdb25cb559d01ef99476051c4df093a581e59abd9477a0bf3051e81095b597833964393602b620738c4d461e70b746485296f9e66ecaa568a43f5c67b7151d239fdbf349d7276bd3ea8c807a18affab47048794e3501baf843b3eecf6927a3b8b9481bbd8aed1d268c684a63c54f292c1fbe66bcbf556011873ce09eb2b040067dab59ef04726c118bf77fe43357f1ddf460225feda5d4799c77043e95f967898f271d51450d7d35000fa3ca922dc339be792235958701e21849d3146504998a41c9ec399c37ff40148df56a7baef5e0db367c3be6b1c5ea921e9b20ebbd9ec6ea5374bd2ee1f20561ac98124ce53220b94773c32785f4039b72993b502b40315201bb6336a34e025f53a90a22dcdfc119df3f58eed74e04f715ae2c27fe4d42694946ca3bc44a8d30f1528b88ac308dfbcb6999745341ed34c40902c4ac98399a4d1b0827a7dcf3684a69fac674a6e8821c575fae67fcd5871b27626549061e616fc40569b39bd4ec6bb991527e6895ecba6551be7aa1c3564782dc21a4028a2069fab9f25f3f2991cf3005b52dd62e35450e3ba1c977f545817e8d95e40ae0d9653760c1845a4da91e41fdc17064b09c7177c32012526378fef57eb3521b68e4ea236167a6cbff222290122235764e046b89f3bcf8c08b2f60c8ed4d19d962cb8002766fcd75fc69e5370a604855192f75aad2d72897c4c3a62364e96eabe6bddc3459b039f106cce3f04fb4d40c7d77d5ee942fc6ae1ac0eeb6de7136bebbee5ccd6babebebe807012c414c3fc7338a7598ca0b6ca0369de3d45fb5a8f28a0d59ebe117e57bd25668ce3707a696075c958df166d4df462ed30f53c9e45a2bf57e7644067036"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000000c0)="b9fe03c6630d698cb89e0bf088ca1f1500ff0e000000028477fbac141424e0", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 01:44:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r7) getgroups(0x6, &(0x7f0000005440)=[0x0, r3, r4, r5, r6, r7]) sendmmsg$unix(r2, &(0x7f00000059c0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="82f755f83bc0f67450ec4be8fd0ebb96364f216614e8ade9c59d58daac496001a5e1a1f6d1d26fbd630c5c6cb01c61107c0a64aa222d6e9024325a18fcc53e8fdb6b3b8cca06367f1fac1637f08086bd2f1cba2d6055ee253b4a6f4cd9", 0x5d}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x8851}, {&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f00000013c0)=[@cred={{0x1c}}], 0x20, 0x8080}, {&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001480)="874eb58ea469b81a1b716a887d29a84bc3a8cc255c3434ea95dc556279de19414b56d2b6cdca63c60337564fb88f7a595910577c866f", 0x36}, {&(0x7f00000014c0)="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", 0xff}, {&(0x7f00000015c0)="9124a58071a567e13197d7b994397360f5c49e66a529bdb3b09ae3e949e0158dbf4e56d081a71ef9bcb6691d0bb4df8e7f85eb1d2a876a54e9f32aa73b4e08f8a6a4d6bcbbba83d2c0d00c62d2610ef87bed2ce499b0665cafc8feb4d5f6e2406b6023f870c6a920dee4ad8d8b3e92d92fd0fd398df192e8d4736fcb303ae4c9908ee2de8e33da5f9e4d33b5633c0bb341bc586ffba722b3e2ffd723f4df9a413cb17db3a530270089870571a23f32ff94289452178edf2834be767559239cf809b569f0539d", 0xc6}, {&(0x7f00000016c0)="aa7ce3c71d329f2af9e7ee9f0855c4349bd4c7ace34e3a18e77dbd24a96751d500b3f21de9ca0c7b702036569c48dbb58891c9ecf437ce64b58883ffc4caa308415cf91a4f4a92927bebb71c241e1c4969c48ebd9d7d2be292a8d4edf3de4c571953fd04bb4a9e0ae9f6a19429734356f0eb54b2e80941075e9e2c68815a2121b457f1aa72a457b1351f2f15cb11ff5930d18d61ffbe17956ad7c6332f8aff992998cb79ba2ca62a4f35d1aad42a181388e0485cf076bf52df1f1eb8290b4b236a7f1b7d1bc7c74a676e369954d64c904281e795a2713e1f534f9348ef290997bece6f0c2816ee0e77fa1eabf8a7e778", 0xf0}, {&(0x7f00000017c0)="8cfdeb043356cb6e935f8ffe1648e04d6defbf388a0260438ad2184605175e40b78e93653089cfdf42dc766390bf8ab8d492f03bed508edc0bb304261357c0275e6950981907f49e960e097a4752865d1e7cd0c36d9edab13951916ff108c903079c914bab732082d3dae99961441bafd5b80be8166411dd97bc5c085643c4dcd957f4ece2b28f659be0f71e2bae07685916587627de62c8c318ba16556bc2fce89239367b56b691d57dad439630e966c6d45fb4dc33d07deff0e23a9a7c12e2ab8f47ecf58120b778c9cee6cf7da6ecfc3b7ff6443dfc4aa5237ef43e4e12bb6986146d6b20232af01c27", 0xeb}, {&(0x7f00000018c0)="a45348a49aed2c4b38e944af4bd9d19673a366ee68824e316f6be5541886cb25cea62a1ed61ad4318f585f264864718613118852b950c76ce0ef766431b69339cdc17dc342d42289f9cb866590586268e37e976fd42ded6b04330d33b38ead19c862669068e4c1ae590c2c76363d39bec7df80ba74da79d78f2d4fc77d821a6deb91203a3bbb459261bf8a299f1d35350bc89323f223d093213587ff", 0x9c}, {&(0x7f0000001980)="0935e2c6a4646f5d", 0x8}, {&(0x7f00000019c0)="01e4bcada7bd77f35c91e4bc2baf62628d8ebcc357b165dd4b3324ccb1670ed3b5f39af7ac5bbfa703430041468507be70cd3d3954ed7a179df62e52d5ec22b4e0ec0c25d6bbd158d4067c8654e36965cbff459fa99640bc2e0edec5a38b5039f6011b80c8ef29065206bb2f5703116b19ceafe5026961ed5e929593d184031a3f0f6d2c0fac6d2a96a1de29f9f44f47816a726bcef1a1912d4f1903b835a27a444db1c1f915206263ee026128721d42bab06e281731d8efa7ad5de3a4e78aaf2cb51a2bcfc705546051949c3a8c1ded6cbc744c85190b35cf40f3fedcd91a1aff670d8399", 0xe5}], 0x8, &(0x7f0000001b40)=[@cred={{0x1c}}], 0x20, 0x40000}, {&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001c00)="1c6653ce616e5f6c24fae7f5de6239047dfd40aefa9638", 0x17}], 0x1, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0, 0x24000001}, {&(0x7f0000001f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002000)="55d7b216b9b0e235c9a7f93d106d02dce809e703cd8fb5a1265de989e6983fec53ef22d154362287a3b40a168910e41c8672cd248f0bf7eb436c8a37c9f54b183052c9db1767ae064e5ffb9d3736cd20d4e8f603de560c2d5b528f39f1849a70c46c9113ddbedfb51c6881fc4028ca7673b19c04468c5613688f3490b83b18376ff3c42806130cf7d22d621b050f7488de585f206b22ced42bb53d69340b8ac42bf2621622bbee7aff9f1c", 0xab}, {&(0x7f00000020c0)="33676d630237c1ac146e3a7bedb4f37a12e56927c9a56231af226f1177a1199d6994650d750b773df5efffdb48b6981df9dfda1f9bc30d04783579ed8edbe2b2fb5d694d416b8b04f48a072430a4f95ff163a8e2b9806be0be8def80379a70edb106dec1dd027f496a4bdf06266c3b843d", 0x71}, {&(0x7f0000002140)="654062d86c91472786d99317ba9e61ef3380f1ce92cae7c8f916083057c22aab4ee720e050596f77deb9cf34505ca5ab44898530818a5c518bc04f622ed620199fb276e5ea3e4beb4ed9f925ec6ff362d234218108d86031f7c319de5522e2a2b27e148c25e39037ed26c324c9b141e676e1b869012b1d1ba0aa0c30f56d9e6c0c236ab94e3f1432d3f014f6219587afd99ebcfbe48ec782cdefab0c196208dabc13a912b525d2ae752b730eb4e2be570de2a284c7ece00a9ceb18a00722031788ffa97bdd9aa4c534579770a39dce52de7b2534", 0xd4}], 0x3, &(0x7f00000022c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x8000}, {&(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002380)="ae1e254eee2776a64b5413b6ac69508c9744202a0cd170bc47c30d5778e90fad638799e6fe710e2f820c380add96f76cd1db96682fbd39fd422b81c20259e44162d9012afdf7c438e8437c1f3aa19ed88cffb9f02f6722b95c6622ff1f55269853b5d0eb65d66d18eb8fca5f1c5746cbb96922ace4beb0e052ea950e5424be92b44e6135ba95a66c4512c07b26af7ea205656ca132ee08f6ebf222c5980f86218816d8b0542766a56d64afaa3b51b8f09117b38c8fe7f2012be7e78c77bf4e", 0xbf}], 0x1, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8004000}, {&(0x7f00000026c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000002740)="d4c12ec088a8", 0x6}, {&(0x7f0000002780)="cab469a309f7218f0fcd865c590c4e789129fc711d69e4242f2b6886075cf37766277098acbc0f72e3d7c784595ecf069617b15acd0cd8ccdf27a372e8ac82d263dbedbe391a50fb0dd974ec34588b0ad1c2dc5f5cc62c7947e4cbb053e204dc672ffaeacaed190ceb4ddacea290b653e67658950815c7bd0e6d84b81a9cff89bed1e66818816a3e56d682ab6d6f86b3d77e9615b6d1cc694bb00de21158c7117499f904b098f08626bd9caf6cb1034d3d151a05944b5ae9fda11f36fc98e5896de77c5064d7bf06f5a4f7ef72355f82be865167c78cadc0d14222f9edcc9efa62168729fde55368d3866385810c771d27b91f0310531937d8d71a3412e6cdbff24126ccfdc68182afe57ae686b490c0e79c695151ea7ec8cdce3e123ff9237c01197212ba3c33d1ea5c6f88e8656a94e12f0f20d140d4798d9e4807cd6f70a470ed2231ecb1f4cc0a9d718c80dfd5e62fcbc740d79c1bbe897a7aedda5910e8013c26174252e7402583e52dd59b2653da9e41442ed75837a94435850182fd94d5b89813ee01d5c0b091f6589152d19f50c919a942627201b2d713df5f34fcf0ed4d0dafd5539a9fe4456a44dcc8776940c75b97fe2e55e6ab48ccf040ad369f8a80a637a36c76896748f538e11572e740442cff9502441cab8c6a00acf3f9c4785f39bfaeacf612a529b00698b54041293aa15832e09abdccb9c5380bceffc35de7f4f75b0b6e827ab9dd35250794df0fcdf5c7e463628b8eaaac151bc580546f6a8edd68c1f7ea0283263ac49d28c3dc3ac7aa7b2d44348d79f4f642d10e63a3ac06b474f6c8bf645e4c88716eb5622939a7efc4f386b6fbca251acfb546a09b996ed037f82b2b8b10d6d4f929d2a111fdae43802777166b8d09ec8ac9138c7a4a36ed013e493b0e70c88ee4d18994ab86136520c6cdb5e85304df051324347a3d8853c3925d80db27c44837ea3fceb3caac697501cde183aff5be27e0a4de993bb12684183a403385166e80f7011c16e216af4c6a2985f6ec010fd4e09e31b927ad4480ff419af32d38d77032a7d1430e74f0907b1541c3b20bc15e60c7b5db233f52f12267c07a696931e90e1c3cd877ec8843b5f56b2499efd9ce0a9001c68c1d599fa469583085991e4b7a473edac1d255691582c82c247c130763988bd96463c48fce9518baf0ff7602baef361cc2af17078d2ea1977e925f6f3f2da8a44f06a5b54576359c76b1acce5f752d3c05eabfbbb6c0f9f9ca2216cd1da5d3bb84106880b4f96173db16f252f45df5bc8a6b082ed5b8d7da567896fd5576fa82ceb700171593d85259e084bedbfa53ff417e5ff0df50e6fa56149ea248d3410bd9e1efbc5c42f36569ddcb5a4e337e7dda80e0fddd4fe485690b18f17e8bd6d5aef605b1222bd916ed459262a680eefad3d0efa6f301f472070d970c6c23951e50bd4a432b1afa862ef6e789d6c9077d37bb3d8046081208475aaadf20aea6bd7fae8ff4b93f5cb419d1d0ef41f2d146f38bb25ce3c015e49a864612453fc09e148180025f2827f1dd2a15c948a4c1c57bbc95a5298c62d280280a45017d4c1d11b90a227510a85a74b4b867031e3d759917ea0818d104e0488bcc724eb4e598cbe25281b2a1c37d2004e7b4f6e0810d822e8b95c5e886db68d159c4605701a1c33edffff7951c3526dfe904b3b89f3329bd7cf39ecb8fa37874af39057b95ec6e11b5581c0adcf7d12a0ec774e9e43eb91d62163373ad806e5667946edbaec9b3c8811f46195d554ef7f0e97b12375ce81416cb7fd7132d1bcc4aa686dbfa2c832693810473dc1b364f44824b3bd660cbba324c100d9ea97bec1ec72eb462432f5d3f55bb873c981fb5dba1e13cc488d42efbfa1e3f3549b529a6b18d72abf8f3370cb29d7eb4421c72f778b91682cf130411fc17a0ebd9fd9f897590fd7fe505cdadb80dea07cc3bb21219613d56c40999fcc017e13441494e83c3f705e5c993f3b68e7170028a7a67d747ba8d8ea76a214c68037bcee8f9330c4a4c81bae67047be5a2bdda377daded313b39674c351da466d2d982c9bc8864f29315b5cef39ce73c269d468055425420faf33b89ad72ecc6c191603a619e7f82c6c47a5684f229d160f95e6889761a95bf263983934bcf757d71df3b4cde4f5455f75940514e82c2b5f57296d0d9f8b25a0dada3caae21773d1eb6e3230d4f18d558c46b041ba768f8e0372078747476cfbac323dc4105a1ca59f0ca5a437a6592cb712727fd9e01d25f756238e488b4d317c6d7ec8e2deffb391f0bb4fb47e649b4f34d38c5e473d1611271ad0e4295f3e987bb7a0424df4c120f24e26e59232c707fad573998eb6ff74964e13193dc4b5c94bd85446509a4f87559c11c1791c877a2ca228eb23ac902b6dab130ffd54ef0e4735a206ece8e78eaf24a0e523d49100b4857d5bfcbc7dd5f3a14f80ed52476ed1f60724d78c946db5b091219791c395cb837d29b07f0ddd9323ab009bee0cee552797dbb762ff96714e5af02609b3f3055b7713bbefedf4531994b7e8a8feffa8bec391dccaf7eefba2e1bcd990a135c6494d603b337dade23f5d3f9c65773acb00cda4d1aa023c84e15defdcb548aa76e605462fa03502f45a9d9521226b6414fb8695a45ff4382471efd9ee12282ca8f0a55c64e37290ad260a9437ca9f72afff8dbfaa584ab5bba307eeac5714a1dbaa14e098087bfdb811040187736f8b90ce046f93acf635be4c78b9cacb3761c13f1060f8ed1803ca720e083933320a4940a73ae73a4d7c046b4a9d848d526ff34c0350bff9d2ef5aebd6b3fe8412e7c5be1f7a1b149db2163cefd243e4572d3865eabdb248fd96f730186869511f523c36a4ca92b3fbdbc58d57b74ae770c7d4c66f5636e340a30d4b2c2d03d9a028b75635bd80e8881a8f1b9fe3e01a045aefe28d3753459f5ff450c724cb88c359d09d781acc554a8154fc26556b08ad1ca31b226bbbe140e8c51b42064bce18e0e3aaa2fc9e06be29b7c13f92da8197006a29e4b3c104b71ea631117bff8eec036853d3bdd035cee0c2ddfbfc228d56e622f0ba044f385cbcbc43ea4e5ba80446dea0ba6efd3da888a35d48ab5ab42b82fe0fa8e48cb9a44c584d940406fc47a4df8a22ef5fac7f08be1a278d6cd58267ddd69eee77fe4c7496d44f73fcc325cd26948f5144801ac43d81d168e6c68b0dbc3957ad311b88340029562d97f9ada3068cab3a5701d0533308f19185f1cc4cf56422c77622df6987d99c540c3af6b7fc77cd5b3e1d71f0c7ad31500294da55ae35b2327afebd7bbbdf9c8d362889d651f60664c3e8b3541086715fb68e1d8fdd4dc7289ada32dda4fffcc24478f703443bf6daceba77b1371f0c6810fec21e3b5bbe5eec8cfa12424b78273bd88140be2dbbc07eb8f3b2c187eeea0ca0c4b34db6b30ef14de3b1201f1c976199c822e7f0948baf5174e09d1a32c603a4537a2ce4e7ea0f33409ce340f26acdc618407d85a54c4381f1c8bd482683162f28f09485e786d2d23c2c2ec9ae5e570b4831676b964947c2b307179dc3fccb116501783a74285ac07ed3d6428258dc56511bdcc0a8eb5a2750468079e320f8ce5a6fe216eda42870059ac542112bc4b7fb168d9c9f0a02c49fe3d4d27620e15ea9e90300c78c55110cccdc9e602fd4157b9f13cdb0cd4617b0d4b7abb2e0718e55c13b3cb4b9adc17eab8528efdbb0d5e05ac681185adb96b6f86afcb747aab43fcbc9b3912dbe0f5e85fd644c0f42b1277a7471193f4674a68a2de22f5841403370224b640f051d18e70288abba73d0fa9451c5d080643bce38ad477587a00fb56b3e095b506cef3a39fce0217d951c843624cfe185f0cd5cf85e23d3cdeb64c6826961386651faa098facfc32512033290436743b7bba1b3ff0929c5d0ecaef26b22216fe581a37e704b02ec1fa5cf5843a133a87165024922301feddd0c07d84f2b84a434a4fe73a893147eea1d40723afa04064d50a778c4b4eccf7d01471ed8ed2c8b17094e3935b8244573e4072ccf7d92510c0d6fd64a4ead0646f5602238d86a7be1e8cf4cb1fe0dd849da1f315b4ee7770cbb7d14b2b476b974cc7d22d6bfe9498f7dbaff3ed20651c481a06b3c43960fd04a2fff25332eb44fa41c06d5af26a3933d04ef6269ca6f6581cb17856628af28f7b972286e74e86149915fd7e218ed6b5b96187337a909b9009712f9a635e42a0ae4a171580949327c583abf92e32dcd12ebe09f43d64a0fa66ca484b02422b61f44ad611fe9b9cfc6d6b67f47f77634059f52d31e26c12769b4d1d95bb6ac1e37f6841c8a7dc8efc3f8498528891db8a5a69e2d632389baa3244756d4d0d1e7b696c731f0ba989519453007c0e18bd8208dd3a78d634b2789497886438375d2d9bc5651d37c2011854908a50af2baabcd8c42ac8cd005e29d477cfff88055d6083915cc2ae12ed017348f14723b8b9f7cc017daf4c5a17e2cc793af725ef34b531c9ed310482733232b8a6f3c0a2365e157fcdbc3945e896420bc19a35ff4e9abeed9a60d1baae1f3d68c53c21ae15dea7664f7505d4f99372aeb2658fb73c901118e8370eff1b36d3f63dbac3762a23968699ed5a5198be3a3d2af30ac227441b8750d81732f8c4fdaddc7d0143327d3372cafeacba32d9fc06b07441777da6fd3d7ff1a93ae61361f1f0fe3b706190e713081fdacfb5e0c482f6e55090e0e86019efd5036f1751f6aa7b1b70d3622e2562ec200b4e0aa984cd6736e03994679d38cddd1523437d57bb49aa7b369f775582da153c09cc5e0dd8daad9b36420ad16ae73cb79ae11ea7597a7839db5fad47ce1a9e1a8cc4b108a6f89197989dc46f484cbc7c442a2c54ba080dbfd76fc9a8c5257f856bc0c3a4ffb07028d1730d4b7a24a88cada54e9865894841e41ddb8f79fd7b4e56484012532da3a39279cdafe28186d0ad21c165a00aa0fa28af084004f618ac1b37353d97ba672bb08acd2398e9ccc8af4bda8ea7982d6d43f6079301bded8f1d8b057666043ef803d2be1465f9a24d22decbeff984e203283d27188470fa9244daef84918c644c7e111fdafe2898a46de77b64707c15283d620f966a0e2d39a4697e2c3ef57d6d9c356678fb84dabba83a6804fcc1d6be5379ee6cca7ab03927a9eeba654105154d2a0edfa75b81f1caf60bd2a63b533f76b09c74c4311965534523632cb6c7755846b909caed264793ee59141912f6ba452a96a1a9c112f12ebcbeb3ed1e40451cf4fb9f0dd26d31867425542f505fabd39e4bc17642f1b8ead789b65855115daf44916cec3cab9e2b67cb99039a516c6d8a35df2d81ddd0f88fee4aa0a720903eddd0c22d460aab2f5d79edd49b8b19620e904ce1452302b1358dd64041ce1cbbdeb4e52d729f983d2cc87e3b9225ed1dd27a1453db0f8746b6516aa26f14993fb84e4000cb8ff9ad7bbed5c25c4fea6691b7a664eb82ea3d2c21b88f6386d74f717d96e74225502279572bf8abf6c0a01978d933fa2184ee82367ec561135e2c0a772bdcbc23fb1f3b0bd0bb638c7586ee0121d7b72641a7abca8ec98b8bf4105f10a6549944888ca53bcdde38379ae7767c2be5eae864423d63268b5003304ebcc7cf6f76d64634ac047a0d878976e4845a8e79231e670de471fe3eccfb85edee6fa6b8b2fa8caa097ed330c09eecbd4c9c6f878a573852ec706291a521e9fa21f98e1bea0e120b14e49842be56f7f00876a5e79ccb666be2f2699e54c46c8c7f5a0a7199d1c0b7ffcdf36f9893b", 0x1000}, {&(0x7f0000003780)="e3ee2a8b0e5e07d4f1babef45b856eb826c95dabbaca9082bf16553693d3837f853461967ab30d2b956902978006533b5409031a4223617bad940acd0cadd57148f54c4c132eb37ffcd2027a3fa935e2dded2e6375463aa623ff3a7743b9b43130b9cd74e68c60ecf9d5d1faffa96a6b90f5a606b943", 0x76}, {&(0x7f0000003800)="b0aeea", 0x3}, {&(0x7f0000003840)="ff57aa481d2f8e1fac16ab34ba5c3c04dff67a0c09690aeba425fe8620e66ba2d19824a2faffde0136679cb02acd690e353f1d9fb14d96d09c7183991fc62467a5333e7d2285dd1cd6c9b89f845e7237656674cadc1eb16bc008985985f771480d39", 0x62}, {&(0x7f00000038c0)="b3cdec9d8c1a692f373fceba7847844de51da814721c9fdf097fad830d04d6352bc9831b6264870f64306dc045a7b8e36ec5dbc1652a5fd4ba3429ccaaffe73bba43c8752cc9885e3981b190a15a940b486f8aac09de22b42ea0ef580a695b3345567b3fe0b1b0ec98ca9923c41f1e46cfe6fa3a63b5f5614c1dd1d7281b9e26d7e1ab515149f0840a3e3d99313c72cc0fbe474d481e9ad0a168c5e4d2deadd5a98c05adbafae81c5f33ad3c6dcbcd9e205624926ca16ba1c45ed39172361d2557512e52907c10bc02a612148f63e6e1acf38fbf421dd477823b4a2053bb8f04cbc85278890a3b5861cc16710b", 0xed}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="dd83ec7755f6908ed06f6177d4dc991ae291a88a5f79239cba5ef9a5", 0x1c}], 0x8, &(0x7f0000004c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x4000}, {&(0x7f0000004cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004d40)="a42cd231d19a7eeaf8b848c6920221fce8cf76dd58a4d1b35d236bc980344c6e2b6f31585ea617bbd07555caadd8dd97dec4", 0x32}, {&(0x7f0000004d80)="9f7e25e146fd475d3974e93d9cd1b29fe19e8980d33348f38f974499b938252d137e52e52f995aec51c41de2ddd0e64e094118c38edc02d2a09df7bbc5af4e10c1d207aa00fb8eb596f734af3df2f5d6fd7ea31c02ce2b1794c6f4b42f11e0c4b40d71d4b23cc0133f9334103e4e637954863560f6ec8b663530f37106d3542a585e53dca25add1d625f11d581a6ed50013982699591db468891eb90c6f9fd8ca1586fbb8655c266c08be2", 0xab}, {&(0x7f0000004e40)="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", 0xfc}, {&(0x7f0000004f40)="6a29142379345e83708ca5f3772a5a5687767c7c8ad4e98faee0266ba6a2292a40e8f9784fe382370ce72175269707c74330701fe8857af9d5ec3d7c2e47fa5eb7b99f09594fffd5b3b8500799c16c363043dfb1c75bee3bb21ab3f4f2120e60a79443783c175c942d3b67b61137be171f2e348119062b4cc53db659504f7dd5d2305b08bbd752e89053a021d969a501417e825f45c18404fd87d8cff331e68ad20cbb06b99d972686fa999262e8f43cd4986f80c3e5d5de495efbcbcafb01a4f998f218676e3d760966154079615dab4eb049", 0xd3}, {&(0x7f0000005040)="434a9a4ec15bf5ba9e65fd691dd51aad119293a1dbaf234dfcc57597e52398f7d1cfe2798a58e2038fa6bd709f365be3045c7f23233cda9d92cbb32edd22944de79b4483cc38278868a9b901cb03b1ebcbd61a1415575e17a8fd7f6a4057cc2b85dd1529498186fc19aeb59331a9a2511b0cd51c74ce68bf0df45b435af77914d554981a79dcea11e968a13d46317704a78e6a25621b6f3095bbe61d8ecdfd8fb1bae311b61ea8a974c004ed8fabd87ec2ed57599ae71186ff7792d0cb3412cb9968cf31c0404a44d62bf5b598928c1c3aa8ba228d686af852340b6030f500ef43a3fc6f9e76704168c8c920464fc149", 0xf0}, {&(0x7f0000005140)="0b7ca61ccc9b61658468d1b20638fe14", 0x10}], 0x6, &(0x7f0000005480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x108, 0x20040041}, {&(0x7f00000055c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000005640)="13ca20ee35e6c53f5d9f65a357d07a4c10392c6d8352ca98b773d59ac0e5eb66ae1fc4e138cfe191fd39ba68bd5c2824e42e4bfdfdab0fc4ed23d6591a3815dbccd87adb1e509359fdb8d6dec676e9a0597cbc758f5d57395c210244eda77485ecbaae62cd89b5df478b26b38b60d35dc490b3feaf8b0695c463f35a237888899da717b513899af7bd14e22cef258bffad4e863100afe469", 0x98}, {&(0x7f0000005700)="bcf19b65d7ab1d2178a249969ccd7065a4310240e41cf9bb8b197721204174b64fada11d23c7287fa06608d3ee20855547862cffd6b78000916199d95d38ca3bfbe3d8458ae30accec2d2a776db229770f217c5b36636483ba0770538687947e216dcc6d3a5ffc3807d8e0067c08831db368f7f0f182460c9d893c26069156f8a98f3e27bc1f48f096a5421bfa8bde622dee9d84d57fc53558320406a3679565ad2ffad6f712458b9638b19a11", 0xad}, {&(0x7f00000057c0)="c4d35564ddf3d98fe70ef17e2f7178d7dbb4db062654a4cdac8b4e0a14f9b2f27e9fde1bdc2d7f865dc8797f640fbf4fb72ace64dbc3a4d0667042d6775b07ce0ac6b3dcdfadd7a886a017fd317dd2f41fc40eb7dab53b1cebbdd43c9c1d0bc9bde14bbc4d685af57d3219257ce6fd3ae3d464ce9bd3e023ce2890e87b2d1b555eb702eb3f50c8aa94fe128b0e9f236d54d4c835fc720d", 0x97}, {&(0x7f0000005880)="4c2caa78172d5e535a461938a7c2a99e64760cf30cf98934bbbfb4b782d2c4d4f7c7a9b12221b90012866a3b632289e239cac78fe06be97d0e77a98788b2d4237c3a586ea7bbc6a66a2f7be3f5458297f8e1dccf49e491c9ae9acd27f3a2833245a0174d494847c58ed84a510378a6153437e1f802961eb361ed78a814c8c5ced330dcced71c2eab2f28175f801150ff55e7c287cf4cb2648b45c9fbf160bf2da90b7c9ec9270d1352f349090fa1ce128006c49a3260e842dc8fa8b727b3c7d63371fbe953b1bb96adaf115771b0ab49140e98be1f4fb66555d1a90716bdc207e8f96d070cb0c643a7c1932c86df", 0xee}], 0x4, 0x0, 0x0, 0x40800}], 0x9, 0x40) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8, 0x8000}, {0x5}, {0x682, 0x400}, {0x7, 0xbee}]}) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1404.570499][ T6428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1404.582885][ T6428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1404.598724][ T6428] device hsr0 entered promiscuous mode 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)="58e4c529d3deee5c8c5065cafcead2615e1d791d4474c0168516f114ef85c2cdfe4978eb5f91", 0x26}, {&(0x7f0000000540)="5024d0fc70c8a2f58301e02a461d53e9bbf8c0cbc706a098", 0x18}, {&(0x7f00000005c0)="a5", 0x1}, {0x0}], 0x5, &(0x7f0000000880)=[{0x10, 0x10e}], 0x10}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x9, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:44:55 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 01:44:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x100, @private0={0xfc, 0x0, [], 0x1}, 0x9}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1404.748722][ T6447] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="1371e969430b8cc8879430f3dafa94f9f3ce1867758be1e9ae1bbd25e528dbf23282461b1f73510928fe59ef2afaaaa6af67c6087c01af5a8e7ca163c7e1d3cbb5e9d77198b7d34a4461a693ce76daf2a49120dc473dea729a09e89f26d463e94d357817560504d037fabe41", 0x6c}, {&(0x7f0000000340)}, {&(0x7f0000000400)="70e4dcb5dd537df2f699be1c02e304d255100c2085c47436bad582bae1132b4d05fbcafd29f7d56244031a81f6944619ec61200d7b38abf43fea8482c489d0976ae9cbe7712abfceb348c0635b503ddb7f049e261b157e54994fed601a834c54e0cf3d691a2258a29f71a71d010680a2139db7992f1b1b7ef4c3740984cefd65c19a4e60be", 0x85}, {&(0x7f0000000000)="af1820a14f492b3a", 0x8}, {&(0x7f00000004c0)="58e4c529d3deee5c8c5065cafcead2615e1d791d4474c0168516f114ef85c2cdfe4978eb5f916f1ea51bef1efa8c1019f5e55d198b497fcecd859c02e02d379d20", 0x41}, {&(0x7f0000000540)="5024d0fc70c8a2f58301e02a461d53e9bbf8c0cbc706a0986fc8a998f73da31e68fd031a236178e0fc8b619cbde2bdd6a5b41da4367c2042e39d60bebd745b09819d2b9235d357b17f88833501", 0x4d}, {&(0x7f00000005c0)="a57b6aec6a3ed4b35797b18d66a5a23078779c96655373a03f2bd7bf9d92eb00a41a5ddeefd7fbba00adf558b0f9bfefc28d42555d4f1f5543f590800fc9313c797f78c8534c06936f00438e734220b292c96c52c3b16d46aa909e66f4bd98bce2bca448d439b8d5d6595221ab0212fc9c7d8ffa93f3da4b17e874f7b3f3eeadc9f9b25245d985dde253f0d7329618385fbd2360731e5ef940c25169c2163324fcfffd53a33f0e77fc89c17c588df6f39b785a4dbdb9e2e4f9cd0c0bbdc501cfaf3ad98e9a7c67865513cdceca2a854a9105c1ecb54a6b3d71c801651dd5e8b3bb22e53393f9a92156752e43002ff1", 0xef}, {&(0x7f00000006c0)="b9e62819db1a4e4b5b45416cb570cc3b1cd9e033f461b0ba846920a710ed5d9ba2b24fb2d528c8e1", 0x28}, {&(0x7f0000000080)}], 0x9, &(0x7f0000000880)=[{0x80, 0x10e, 0x4, "8549a464b5ad4a62e60acb5aa8ca9d1a9e9fb2d8a6673f69d1a5d022bea241c34c6ad1c5445de1ea4bd1cf5a50b60f900d324787fdb65accd5922e65ad1fbc0af98b39b7a906da2566f3c07297f75c8184dd9527e871098221a1a4cf114aea802dad97a60bbb1aa996e9f3831b"}], 0x80}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r1, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x80, 0xc6, 0x2, 0x0, 0xc00000000000, 0x10002, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x96, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x599b5968a33876a5, 0x100000001, 0x6, 0x9, 0x7, 0xf3, 0x8a4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1404.789520][ T6447] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1404.834872][ T6447] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1404.874059][ T6457] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 01:44:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0xb7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 1404.906245][ T6457] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1404.921923][ T6459] binder_alloc: 6454: binder_alloc_buf, no vma [ 1404.938173][ T6457] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1404.954142][ T6459] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.967627][ T6459] binder: 6454:6459 ioctl 40046207 0 returned -16 01:44:55 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x3000000, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b}, {0xffffffff}]}) 01:44:55 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 01:44:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) 01:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r7 = socket$bt_bnep(0x1f, 0x3, 0x4) signalfd(r7, &(0x7f0000000080)={[0x10000]}, 0x8) 01:44:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1405.131689][ T6474] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 01:44:56 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x17, 0x101}, 0x14}}, 0x0) 01:44:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) [ 1405.173605][ T6477] binder_alloc: 6475: binder_alloc_buf, no vma [ 1405.176372][ T6474] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1405.204540][ T6474] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 01:44:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 01:44:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 01:44:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1405.356608][ T6491] binder_alloc: 6486: binder_alloc_buf, no vma 01:44:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffe1, 0x1404, 0x10, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:44:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:56 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0/bus\x00', 0x81000226) 01:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="22630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc40, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440d4703c467f7b40a8226b882ecc688369266500634040014515e68a10998390c4fc6152e9801010cae7fbb3d4946a71d6866fc7db4b763ede59626306b06db84a534416412a66ede0f6b44674afdd794c887c5ad462f8a83ba92e415c6f99fd6662b4f56959f06b99eb74ed"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1405.605524][ T6514] binder: 6512:6514 unknown command 1074029346 [ 1405.622025][ T6514] binder: 6512:6514 ioctl c0306201 20000200 returned -22 01:44:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:56 executing program 2: prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000280)='sy\x00um$\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0200000000000000000000dfeb7bba00281213bd5d74dafc20380003"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RGETATTR(r2, &(0x7f0000000100)={0xa0, 0x19, 0x3, {0x0, {}, 0xc2}}, 0xa0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') [ 1405.679358][ T6514] binder: 6512:6514 ioctl 8912 10000 returned -22 [ 1405.702360][ T6514] binder: 6512:6514 unknown command -1472169089 [ 1405.732616][ T6514] binder: 6512:6514 ioctl c0306201 20000280 returned -22 [ 1405.783858][ T6523] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/4' not defined. 01:44:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x3f0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1e, @ipv4={[], [], @rand_addr=0x64010102}, 0x4ae9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x627f, @remote, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3636e552}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x207, @private2={0xfc, 0x2, [], 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private1, 0x7fff}}}}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x832c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "aaad959d7270da04c5b3a3a2b30a6b1b70fa4f7bbf"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @local, 0x75}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @private1, 0xffffffff}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1fd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000080)={0xf0, 0xf0, 0xf00, 0x1e0, 0x4, 0xb31, 0x0, 0x2, {0x6d480, 0x20, 0x1}, {0x100, 0xc7b0, 0x1}, {0x3ff, 0x800}, {0x4, 0x8}, 0x1, 0x0, 0x2, 0x6, 0x1, 0x748, 0x4, 0x7, 0x1, 0x7794, 0x151, 0x4, 0x20, 0x1, 0x3, 0xa3476c4768c15042}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05c72540000040000063424001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:57 executing program 2: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f00000001c0)={0x1ff}) 01:44:57 executing program 2: [ 1406.245088][ T6535] binder: 6531:6535 unknown command 1074033924 [ 1406.281388][ T6535] binder: 6531:6535 ioctl c0306201 20000200 returned -22 01:44:57 executing program 3: 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 2: 01:44:57 executing program 5: [ 1406.323826][ T6542] binder: 6531:6542 unknown command 1076217605 [ 1406.360700][ T6542] binder: 6531:6542 ioctl c0306201 20000280 returned -22 01:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x10000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:44:57 executing program 3: 01:44:57 executing program 2: 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="140000001f000503d25a809a666401001fffffff", 0x14}], 0x1, 0x0, 0x0, 0x3}, 0x0) 01:44:57 executing program 3: [ 1406.558606][ T6550] binder_alloc: 6548: binder_alloc_buf, no vma 01:44:57 executing program 2: 01:44:57 executing program 0: 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 5: 01:44:57 executing program 3: 01:44:57 executing program 0: 01:44:57 executing program 3: 01:44:57 executing program 2: 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 5: 01:44:57 executing program 0: 01:44:57 executing program 3: 01:44:57 executing program 2: 01:44:57 executing program 5: 01:44:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:57 executing program 0: 01:44:57 executing program 3: 01:44:57 executing program 2: 01:44:57 executing program 5: 01:44:58 executing program 0: 01:44:58 executing program 3: 01:44:58 executing program 5: 01:44:58 executing program 2: 01:44:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 0: 01:44:58 executing program 3: 01:44:58 executing program 2: 01:44:58 executing program 5: 01:44:58 executing program 3: 01:44:58 executing program 0: 01:44:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 5: 01:44:58 executing program 2: 01:44:58 executing program 3: 01:44:58 executing program 0: 01:44:58 executing program 5: 01:44:58 executing program 3: 01:44:58 executing program 2: 01:44:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 0: 01:44:58 executing program 5: 01:44:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 2: 01:44:58 executing program 3: 01:44:58 executing program 0: 01:44:58 executing program 2: 01:44:58 executing program 5: 01:44:58 executing program 3: 01:44:58 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 0: 01:44:58 executing program 2: 01:44:58 executing program 5: 01:44:58 executing program 3: 01:44:58 executing program 0: 01:44:58 executing program 2: 01:44:58 executing program 5: 01:44:58 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:58 executing program 3: 01:44:58 executing program 0: 01:44:58 executing program 2: 01:44:59 executing program 5: 01:44:59 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) mmap(&(0x7f0000832000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x0) 01:44:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x10000000000, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) 01:44:59 executing program 3: 01:44:59 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:44:59 executing program 5: 01:44:59 executing program 0: 01:44:59 executing program 3: 01:44:59 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') fchmod(r2, 0x0) 01:44:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:44:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 01:44:59 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x36) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x02'}, 0x0, 0x0, 0x0) 01:44:59 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) 01:44:59 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x29, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x8, "911486df9c0a"}, @generic={0x0, 0x5, "04e4f2"}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) 01:44:59 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x8003, 0x8020001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 01:44:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 01:44:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r3, &(0x7f0000000200)='\'', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)) 01:44:59 executing program 5: syz_emit_ethernet(0x8a, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x8, "911486df9c0a"}, @generic={0x0, 0x6, "04e4f20e"}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "76df00d26f75cdd7760ca91141bad6a7"}, @mptcp=@mp_fclose={0x1e, 0xc}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 01:44:59 executing program 3: r0 = socket$inet6(0x10, 0x800, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) fchdir(r2) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x14) 01:44:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r2, 0x0, 0x0) 01:44:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 01:44:59 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x4, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:44:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) 01:44:59 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@defcontext={'defcontext', 0x2c, 'root'}}]}}) 01:44:59 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x800000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0) 01:44:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) 01:45:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x22, 'root'}}]}}) 01:45:00 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @remote, @local, {[@hopopts={0x11}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 01:45:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:45:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) 01:45:00 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000100)="900000001c001f4d154a81739327abff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 01:45:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9b1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={r5, 0x7ff}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}}, &(0x7f00000007c0)=0x84) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) listen(r0, 0x7ff) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x4e26, r9, r10, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1409.785642][ T6717] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$snapshot(r2, &(0x7f0000000080)=""/86, 0x56) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4d0242, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$6lowpan_control(r7, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 01:45:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x33) setgroups(0x2, &(0x7f0000000040)=[r4, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') 01:45:00 executing program 1: 01:45:00 executing program 2: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:45:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 01:45:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$netlink(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="28000000290001", @ANYBLOB], 0x28}], 0x1}, 0x0) 01:45:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) [ 1409.980993][ T6737] IPVS: ftp: loaded support on port[0] = 21 01:45:00 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) socket(0x11, 0x800000003, 0x0) r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) [ 1410.068266][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1410.131011][ T6773] IPVS: ftp: loaded support on port[0] = 21 01:45:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 01:45:01 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socket(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) 01:45:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x200000c1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000300)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r6, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r6, r6, &(0x7f0000000200), 0xaa4) 01:45:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$packet(r2, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001700)=0x14, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) inotify_init() r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r5, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xaa4) 01:45:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"/599], 0x0) 01:45:01 executing program 3: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x6, 0x4) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) 01:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001300010000000000200000000800000002000000100000800400000008000400eefb62"], 0x28}], 0x1}, 0x0) 01:45:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x5, 0xfffffffffffffffd}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3100) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x5000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="56c9373a28b1e2353ad000b5bd71b26fe3475db778746e7c2164f1904618e745ebc8d3871ff956ed05e639f15d7a26e6a6889e43a04408ddb9125d8466cc4bb750cbcbf84504287ce2743ed075dac00d058b069ebf40dba3141f8188bf855dea209eae3151bb2518118c5c2b843e7990ac23473f557f34dfdb5bc7f76e9102128d", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300000000000800090000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090006000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008090900050000000e0001006e657464657673696d0000000f0002006e657464657673696d30003321000300030004000800090005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x8084) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0) 01:45:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xccb2706498a2f30c, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:01 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(0x0, r0, 0x3, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) times(&(0x7f0000000080)) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 01:45:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x5, 0xfffffffffffffffd}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3100) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x5000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="56c9373a28b1e2353ad000b5bd71b26fe3475db778746e7c2164f1904618e745ebc8d3871ff956ed05e639f15d7a26e6a6889e43a04408ddb9125d8466cc4bb750cbcbf84504287ce2743ed075dac00d058b069ebf40dba3141f8188bf855dea209eae3151bb2518118c5c2b843e7990ac23473f557f34dfdb5bc7f76e9102128d", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300000000000800090000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090006000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008090900050000000e0001006e657464657673696d0000000f0002006e657464657673696d30003321000300030004000800090005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x8084) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0) 01:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 01:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000009078ac141400ac1414aa00004e220000ca9b816d06aef5b7858537ffd84b87cd982cbb54fcb46ef04588e153d59d8321c6cfbbcf3840dad90726a68d8e3ece5184d33584073fd6a6f17e34bee00296211ab204c9d82c7cc46fcb637283e4b4e467daac8dadf5b2ceb3443cf32ca82461e68a9d6ac77af271ad5a843d104fc2acc2d63c524dc916833df77b1cf4ca87975ebfe7318638ec07cb3c45cbf437f69c8182b1cc3fcaa2817c2af73f741976024d7a94a116de39d9f7a8c82ec416ca4c5825c5ee7dd88eb4fb44660000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="11", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x3a4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) 01:45:02 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x6, 0x4) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) 01:45:02 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x8800000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x6, 0x4) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) 01:45:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x204a6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) dup(0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) open(0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000140)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x184) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000000c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)) 01:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = gettid() r5 = gettid() tkill(r5, 0xb) ptrace$setopts(0x4206, r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) r6 = getpid() tkill(r6, 0x2a) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x204a6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) dup(0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) open(0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000140)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x184) ioctl$BLKROTATIONAL(r5, 0x127e, 0x0) lstat(0x0, &(0x7f0000000180)) 01:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 01:45:02 executing program 1: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) open$dir(0x0, 0x4002, 0x0) truncate(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfffffefc) 01:45:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, @perf_bp={0x0, 0x7}, 0x52001, 0x401, 0x0, 0x4, 0x1, 0x7}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) r1 = socket(0xf, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r3 = open(0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) restart_syscall() r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee00) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth0_macvtap\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}) sendmsg$AUDIT_GET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffffffffffff7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x3e8, 0x200, 0x2000ffff, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x60010) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000300)=""/102, 0x66}], 0x4}, 0x26f0}], 0x1, 0x8063, 0x0) 01:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000200)=0x61) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x14, r5, 0xf, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$snapshot(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {"318c584724fc5a484aed0f3e"}}}}}}, 0x0) 01:45:03 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f5110800010002010002080002", 0x1f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x53f74f62, 0x0) 01:45:03 executing program 1: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 01:45:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)) 01:45:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x3, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @local, {[@end]}}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x0, {[@eol, @sack_perm, @nop]}}}}}}}, 0x0) 01:45:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) socket(0x11, 0x800000003, 0x0) r1 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x8482) socket$inet6(0xa, 0x3, 0x33) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6895287bbbb29958d21fa7eba2c06a69b50fadcb74079f30d829c14ed087b7007bd39d2c9580eb40c2c7b9ddd66fbaa7e743f096b0262ff7cdfe4459e8794b26b1691b0091b864ac5d1586bff274171ab757166dddb1a88a1102981a652f345ce64c185b74570e0509b0403b3684528ff5ace328fea2a491456268d7a27d6a53114b7ef78c82fce31f57b5131db535dd31994e3889677f6d7dabf2c3a6a7253af190f9705b18da6fc40a9721b7720d867dd766c6", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="11d3caa5e6651a890c8dbab63288a84086705b285980d3dbc29bb4451e9eebee0162424c9e1fd6566eae49a62b93e47449513dd220d42085c43b4f1556cbb9c37e9626422df335813a5d5968039cac54586e47f2e598d0512256c37e5183d6cc04c8dd247ab4ec4c7106f1d728040ed647cea2c2151cb7f5047a353d8da3baca888286ab29d7e59e1c38c826e74b3f1fb4cc16dfc86d659bddddcb7a545440799ad64194d68e857f4e316c0838a3612509a87c0552d2cd9bd1962aa71b89e33f693845d150cc1520c6678904d89eced0dda132e66faf1d32cf38f966e854e64335f2b6", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB], 0x3a4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) 01:45:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x9) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x200000c1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) r5 = open(0x0, 0x0, 0x0) write$nbd(r5, 0x0, 0x1) 01:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) chmod(&(0x7f0000000000)='./file0\x00', 0x23) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:04 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 01:45:04 executing program 2: open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfffffefc) 01:45:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @remote}}]}, 0x110) 01:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0x16, 0x8f}, 0x0, &(0x7f0000000080)="9e0b79f19fa021f35a55df07bfdafd2889546fccde8a", &(0x7f0000000140)=""/143) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r1, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r1, r1, &(0x7f0000000200), 0xaa4) 01:45:04 executing program 0: syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x5000) 01:45:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x27e06, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1380041, 0x0) 01:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r6, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xd0, r6, 0x128, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x41}, 0x8000) listen(r0, 0x7ff) syz_emit_ethernet(0x166, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x51, 0x4, 0x0, 0x0, 0x158, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xfffffffa}, {@private=0xa010100, 0x1ae3}]}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x4, [{@multicast1, 0x5}, {@broadcast, 0xec}, {@local, 0x3}, {@rand_addr=0x64010101, 0x7f}, {@multicast2, 0xffff}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x3, [{@loopback, 0x2}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0xce, 0x1, 0x0, [{@rand_addr=0x64010100, 0x524}, {@private=0xa010101, 0x1}, {@private=0xa010102, 0xfffff000}, {@local, 0x7}, {@loopback, 0x1ff}]}, @timestamp={0x44, 0x14, 0xf2, 0x0, 0x5, [0x2, 0x1, 0x8, 0xc2c]}, @timestamp_addr={0x44, 0x24, 0x51, 0x1, 0x3, [{@empty, 0x10001}, {@empty, 0x1f}, {@broadcast, 0x7b4}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x84a}]}, @timestamp_prespec={0x44, 0x54, 0xe4, 0x3, 0x9, [{@private=0xa010101, 0x7fff}, {@local, 0xffffffff}, {@private=0xa010101, 0x100}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x7}, {@loopback, 0x1}, {@local, 0x8e}, {@loopback, 0xfe}]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x4f, [@multicast1, @broadcast, @loopback, @private=0xa010102]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:04 executing program 5: perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 01:45:04 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 01:45:04 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) socket(0x11, 0x800000003, 0x0) r1 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x8482) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046) 01:45:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 01:45:04 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 01:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x80001, 0x0, [0xa3, 0x8, 0xc7, 0x2cd, 0x4, 0x2, 0x7fff]}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2400200) listen(r0, 0x7ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4138ae84, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64=r7, @ANYRESHEX=0x0, @ANYBLOB="790200afd4368efe"], 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x1f, "3c1d551ef579dc8abeeb026468125edfdbd178baa7a2893e059ffb71497bbe"}, &(0x7f0000000000)=0x43) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/239, 0xef, 0x9) 01:45:04 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sync() 01:45:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) dup(0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000140)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x184) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000000c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)) 01:45:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) getpgrp(0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xfe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xaa4) [ 1414.116230][ T6967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 01:45:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r4, &(0x7f0000000240)="f327e507eec3dc854d4087e67d0c031816529560d7c41bf9324fa28fa4d17b1ac4e0ac33217354ed4b4297c8dbd1ce6d755b5cdb675cb59f0511a143dadd9885c6269e5e2af958e95363ea68aea3bc948fb8c571035d9adae46af729c7ca87a156c4c886a793bfcc50e1311af81cdd4bf0bf99fc51834f716b523cee14ee7ee5af6bfbfbac41eae719db468d1fb373ff7ce3f17e90fa9765fb4ea00b31c323", 0x9f, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x7) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000140)={0x4, @vbi={0xd74, 0x9, 0x200, 0x4f565559, [0x5, 0x4], [0xfffff001, 0x958], 0x13a}}) 01:45:05 executing program 3: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f5110800010002010002080002", 0x1f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x53f74f62, 0x0) 01:45:05 executing program 0: [ 1414.217707][ T6967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 01:45:05 executing program 0: 01:45:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2a, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="030000000000000005582a8de3cde067b5b30d3f89e450384730accb8650e01dfae6802e9e0506f74cb1fe3011422acc9d3e0af0a107f4accbe745a2226fd99071176620cb65a94e2a05c6be2a973993a8f5dae2d436263cded1d200a2a3cf3575444dbddef8ef30fb2fa84ad269490bb658c34806a04809e774a394b57d73"], 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x60, 0x141803) 01:45:05 executing program 3: 01:45:05 executing program 0: 01:45:05 executing program 5: 01:45:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:05 executing program 3: 01:45:06 executing program 2: 01:45:06 executing program 0: 01:45:06 executing program 3: 01:45:06 executing program 1: 01:45:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x1a}, 0x2) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02008b870344755e6c2114"], 0x0) 01:45:06 executing program 5: 01:45:06 executing program 0: 01:45:06 executing program 5: 01:45:06 executing program 1: 01:45:06 executing program 3: 01:45:06 executing program 0: 01:45:06 executing program 2: 01:45:06 executing program 1: 01:45:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="730200ef6167cbc90090780000f2f4ec3467dbe62d7b72607c892eb57a6e97b3d06385a59ce6f550baeeb612803b3d338c9414df140c751450ed50d68be71900ef7e396ddd8b57f7c70aeda3804ba9965d6c9728e32148df46886d3e264eaba12cde7959315c7466e2d5d538d3f3be5441473fd11032f730b3f7baa3b3479acda6ad6d4cfbb67856d00af5954135a5ad339c67"], 0x0) 01:45:06 executing program 3: 01:45:06 executing program 0: 01:45:06 executing program 2: 01:45:06 executing program 5: 01:45:06 executing program 3: 01:45:07 executing program 1: 01:45:07 executing program 5: 01:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20000}, 0xfffffffffffffde7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r8, @ANYRES32=0x41424344, @ANYBLOB="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", @ANYBLOB="9d30fbf2e1"], 0x0) 01:45:07 executing program 0: 01:45:07 executing program 3: 01:45:07 executing program 2: 01:45:07 executing program 1: 01:45:07 executing program 2: 01:45:07 executing program 0: 01:45:07 executing program 5: 01:45:07 executing program 3: [ 1416.292373][ T7049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 01:45:07 executing program 0: 01:45:07 executing program 1: 01:45:07 executing program 2: 01:45:07 executing program 3: 01:45:07 executing program 5: 01:45:07 executing program 2: 01:45:07 executing program 0: 01:45:07 executing program 1: 01:45:07 executing program 4: ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000018941003bf3f887649af991aa7c45ba6bbf0c491123443891f0d1aaff16128e141000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000a1a3812bc4ba48c586d54ad94b1be91c9cf7baf687ea6443ce13596a6e8beda608121a9284b794e6ecd3fa23ff0b19e2c68b48f4b5ac12fdb3d22d4fa8d52206203219d10cb7b822"]) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000280)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'wp384-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="3dd5b71d351dfcaa31569ea03e8f1c426d65034ffe087d2039748d9d2a6baa1b426b175be7cf61c64c060bfbb50a3d51273125a471ac0ee7388d230ee8ff6578c39ab169166ecf505e", 0x49}, {&(0x7f0000000180)="4b3502edefd853c4d0f8fe61ad739c8f9f2198ad9bbe13531fddbb7e218db22133cde1f01071685ecd16a08286ed975bf06a2685cef2d8a333315238", 0x3c}, {&(0x7f0000000300)="ba9e8c09a1af040bd2236ab71fb4162be1d415ef3aa5d87fdeb72df62a0839a91332aaa0cbf49dca3926b725342d6ca4205a3e8ec7a3368f1a28cd9fc5804064748a7659a41847232e5a74ffe6fc621c1dc2b2a94e198f21319560c637067091ee93758137ca5ab1c42945ede5c37cdab44a78cf2ad4aeb6c62d1b73c16de67f86b32382646da97ada094b82a912458571949e5590ca", 0x96}], 0x3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e28, 0x3fb, @remote, 0x5}, 0x1c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000080)={0x4, 0x6, 0x400, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) listen(r5, 0x7ff) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000004000a7c978ba4811e356200004d77d4d655cac04918a4b593b7221d3498e2e52f7c387aa34c67ae8e133693ede396c9186bc6ec509e6f80879214744da8e51c919f31cca759141a8ae35a594164cfe5d51faf74a543b389f151d00e9"], 0x0) 01:45:07 executing program 1: 01:45:07 executing program 0: 01:45:07 executing program 5: 01:45:07 executing program 3: 01:45:07 executing program 2: 01:45:07 executing program 3: 01:45:07 executing program 2: 01:45:07 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) socket(0x11, 0x800000003, 0x0) r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x8482) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) 01:45:07 executing program 1: 01:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000001c0)={0x700, 0x4, &(0x7f00000000c0)=[0x0, 0x9, 0xffff9b7a, 0x7], &(0x7f0000000100)=[0xa18, 0x3, 0x0, 0x2], &(0x7f0000000140)=[0x8, 0x3, 0x2000], &(0x7f0000000180)=[0x8, 0x3, 0x5, 0x9, 0x4, 0x9], 0x0, 0x9}) r4 = dup(r1) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES64=r8, @ANYRES32=0x41424344, @ANYBLOB="5c020000906bd0790000"], 0x0) 01:45:07 executing program 5: 01:45:07 executing program 3: 01:45:07 executing program 2: 01:45:07 executing program 1: 01:45:07 executing program 0: 01:45:07 executing program 1: 01:45:07 executing program 5: 01:45:07 executing program 3: 01:45:07 executing program 1: 01:45:07 executing program 0: 01:45:07 executing program 2: 01:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) 01:45:08 executing program 5: 01:45:08 executing program 3: 01:45:08 executing program 1: 01:45:08 executing program 2: 01:45:08 executing program 0: 01:45:08 executing program 5: 01:45:08 executing program 3: 01:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) 01:45:08 executing program 0: 01:45:08 executing program 5: 01:45:08 executing program 1: 01:45:08 executing program 2: 01:45:08 executing program 3: 01:45:08 executing program 0: 01:45:08 executing program 3: 01:45:08 executing program 2: 01:45:08 executing program 1: 01:45:08 executing program 5: 01:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:08 executing program 5: 01:45:08 executing program 3: 01:45:08 executing program 1: 01:45:08 executing program 0: 01:45:08 executing program 2: [ 1417.508122][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:45:08 executing program 3: 01:45:08 executing program 5: 01:45:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:45:08 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1d, 0x0, 0x0) 01:45:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x59b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x62, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) [ 1417.631230][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:45:08 executing program 3: 01:45:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffd, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf2b6b2fb9dfe3db5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1417.708423][ T7173] can: request_module (can-proto-0) failed. 01:45:08 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x400002, 0x31, 0x2}, 0x18) write$eventfd(r0, &(0x7f00000000c0)=0xc9, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r1, 0x7ff) syz_emit_ethernet(0x181, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 01:45:08 executing program 2: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000002140)=""/70, 0x46}, {&(0x7f00000006c0)=""/36, 0x24}], 0x3, &(0x7f0000000840)=""/84, 0x54}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000009c0)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=""/241, 0xf1}, 0x7f}, {{&(0x7f0000000e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/165, 0xa5}, {&(0x7f0000000f40)=""/54, 0x36}, {&(0x7f0000000f80)=""/129, 0x81}], 0x3, &(0x7f0000001080)=""/52, 0x34}, 0x7f}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000010c0)=""/27, 0x1b}], 0x1}, 0x7}], 0x5, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2e2f66696c65302f66696c6530006e83fd289eb7fc4321b12ba9637e2a40fa5a106de021274b485ff36a037d81ee05171214a36242faf11aed85fd656ebf6235f1e2"], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='mqueue\x00', 0x0, &(0x7f0000000540)='^{[\x00') write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="3500000000aa190000000000000000000800000000000000cabccf258f89fc6d85a8c395aa018d83e0c6356cc7e99c74d427ae852bf95b80b95c85957da97fba0896741c3b4a18e6934167ddbe0c0570d3438eccb779ee1311dcdfdf829060face36020a87829ad8dc6794ba8425204fd2014fcb7feb8c886459fe1c0d6e", @ANYRES32, @ANYBLOB="1700757307000000000000009a7cd054617bbcefaada"], 0x35) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x49b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_)d=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00e8a674f418d31a3a90e3aa"]) 01:45:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000040, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 01:45:08 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x35) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 01:45:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf2b6b2fb9dfe3db5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000100012, r1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x55) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x59b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x62, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1417.986355][ T7217] fuse: Unknown parameter 'user_)d' 01:45:08 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x4, 0xd4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 01:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8, 0x0, 0x10}, &(0x7f0000000040)=0xc) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x59b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x204000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x62, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01012b", @ANYBLOB, @ANYBLOB], 0x9}}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) socket(0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x6, 0x0, 0x2, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) getpgrp(0x0) sched_setaffinity(0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$packet(r2, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001700)=0x14, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r5, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xaa4) 01:45:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf2b6b2fb9dfe3db5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000100012, r1, 0x0) write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x20, 0x4, 0x5}}, 0x14) prlimit64(0x0, 0xb, 0x0, &(0x7f0000000340)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x55) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 1418.278661][ T7245] can: request_module (can-proto-0) failed. 01:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480006001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r8, 0x0, {0x3, 0xf0, 0x4}, 0x1}, 0x18) 01:45:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x59b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x204000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x62, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01012b", @ANYBLOB], 0x9}}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) socket(0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x6, 0x0, 0x2, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1418.492562][ T7261] can: request_module (can-proto-0) failed. [ 1418.669234][ T7275] can: request_module (can-proto-0) failed. 01:45:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffd, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf2b6b2fb9dfe3db5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000100012, r1, 0x0) write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x20, 0x4, 0x5}}, 0x14) prlimit64(0x0, 0xb, 0x0, &(0x7f0000000340)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x55) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 01:45:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'batadv_slave_0\x00', 0x7fff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xfe) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r3, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r3, r3, &(0x7f0000000200), 0xaa4) 01:45:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$packet(r2, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001700)=0x14, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000300)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r6, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r6, r6, &(0x7f0000000200), 0xaa4) 01:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000000)={0x1, 0x3, 0x80000000}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1418.846243][ T7294] can: request_module (can-proto-0) failed. 01:45:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 01:45:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf2b6b2fb9dfe3db5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x300, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e26}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x286007, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x5, 0xb, 0x4, 0x10000, 0x3, {}, {0x5, 0x1, 0x7, 0xfe, 0x81, 0x1, "a28cd119"}, 0x10000000, 0x4, @fd=r3, 0x81}) listen(r0, 0x7ff) syz_emit_ethernet(0x1011, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) 01:45:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x42079, 0x0, 0x1f4) 01:45:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x59b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x62, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x2, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x10001, @remote, 0x6}, {0xa, 0x4e23, 0x1, @private1}, 0x8, [0x674, 0x5, 0x8, 0x1, 0x8, 0x22b961, 0xfffffff9, 0x9]}, 0x5c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r8, 0x7, 0x1, 0x0, 0x4, 0x3}, &(0x7f0000000140)=0x14) listen(r0, 0x7ff) syz_emit_ethernet(0xc7, &(0x7f00000001c0)=ANY=[@ANYBLOB="bb615f7cf8d6b9318aae3af347633c0081001c000800450000ef1a9c0b0000069078ac141400ac1414aa00004e224cb55e33d0aef9b32f1b482d0a5ff3ba98cfd1c005f6e0326a8e2d54477fd1c16c4f26bc585d94c7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000973b9adf38ae3671f960b4384a8e8a8ac153223c464d1b88c2bc6e8e9050d76248b0eb31a10e221220d275bd1501010000e5e032f5373030714e05d89958135a7eb2dbe9c28197c99ea53d05873486ecfcb1c5032f70721b0de802937aabc0c0fe55fc18473dc2554a64774befbcc09a266516fc3c584a6621d403f013983af080b9e7add8e2605197"], 0x0) 01:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty, @in=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0xa8}}, 0x0) 01:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000003380)={0xa10000, 0x100, 0x4, r5, 0x0, &(0x7f0000003340)={0x980925, 0x5, [], @value=0x6}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000033c0)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0x81}, @in6={0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0x1a}, 0x3}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x51}], 0x64) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001700)=0x14, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r2, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r2, r2, &(0x7f0000000200), 0xaa4) 01:45:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe(&(0x7f0000000300)) 01:45:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x9) write(r1, &(0x7f0000000340), 0x41395527) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001700), 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0xfe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200), 0xaa4) 01:45:10 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) close(r0) 01:45:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x0) 01:45:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec88317"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) 01:45:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000001400020064096d6d7930000000000000000000000900010073"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 01:45:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) 01:45:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[], 0xb5, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 01:45:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x204000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) socket(0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x6, 0x0, 0x2, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) 01:45:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 01:45:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:11 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x175}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc05c5340, &(0x7f00000001c0)={{}, 'port0\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 1420.503371][ T7390] can: request_module (can-proto-0) failed. [ 1420.689708][ T7397] can: request_module (can-proto-0) failed. 01:45:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ffff7f000000ebffff080000001c000480"], 0x30}}, 0x0) 01:45:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x32, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 1420.823623][T15763] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1420.840811][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:11 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe2841}, 0xfec4) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa4042}, 0x18) write$cgroup_int(r1, &(0x7f0000000000), 0x89000) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000140)={0x0, 0x0, 0x8005, 0x10004000, 0xe0}) 01:45:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1420.881954][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) 01:45:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:11 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x175}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0605345, &(0x7f00000001c0)={{}, 'port0\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:45:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0000000024000904000a", 0x11) splice(r0, 0x0, r1, 0x0, 0x1000, 0x0) 01:45:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1421.194275][T15763] usb 4-1: config 0 has no interfaces? [ 1421.199815][T15763] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1421.221599][T15763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.251077][T15763] usb 4-1: config 0 descriptor?? [ 1421.512574][ T2864] usb 4-1: USB disconnect, device number 13 [ 1422.073479][ T2864] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1422.434075][ T2864] usb 4-1: config 0 has no interfaces? [ 1422.439612][ T2864] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1422.463453][ T2864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.497814][ T2864] usb 4-1: config 0 descriptor?? [ 1422.749024][ T2864] usb 4-1: USB disconnect, device number 14 [ 1423.513379][ T8219] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1423.903437][ T8219] usb 4-1: config 0 has no interfaces? [ 1423.909671][ T8219] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1423.918820][ T8219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.931931][ T8219] usb 4-1: config 0 descriptor?? [ 1424.179591][ T2869] usb 4-1: USB disconnect, device number 15 [ 1424.963336][ T8219] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1425.353292][ T8219] usb 4-1: config 0 has no interfaces? [ 1425.358832][ T8219] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1425.369002][ T8219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.381468][ T8219] usb 4-1: config 0 descriptor?? 01:45:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0x1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) 01:45:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 01:45:16 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1, 0x0) 01:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x40000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x12}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x20000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={r5, 0xa}) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) listen(r0, 0x7ff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x100, 0x7c265e3f) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0xa8f, 0x7) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="a44ac6375e4baaaaaaaaaaaa08004500002c000000001f069078ac141400ac1414aa00004e22", @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="6c0200009077fffd142bf920"], 0x0) [ 1425.502692][ T2864] usb 4-1: USB disconnect, device number 16 [ 1425.582596][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1425.679475][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec88317"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe002000, &(0x7f00000000c0)="b9ff030e5affffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020cbf214f121b"], 0x0) 01:45:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1425.983217][ T12] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1425.983367][ T2864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1426.353784][ T2864] usb 4-1: config 0 has no interfaces? [ 1426.359319][ T2864] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1426.369599][ T2864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.383343][ T2864] usb 4-1: config 0 descriptor?? [ 1426.384043][ T12] usb 3-1: config 0 has no interfaces? [ 1426.398692][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1426.410288][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.425038][ T12] usb 3-1: config 0 descriptor?? [ 1426.650749][T15763] usb 4-1: USB disconnect, device number 17 [ 1426.704369][ T2864] usb 3-1: USB disconnect, device number 24 [ 1427.213089][T15763] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1427.263164][ T2864] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1427.573470][T15763] usb 4-1: config 0 has no interfaces? [ 1427.579136][T15763] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1427.590317][T15763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.603714][T15763] usb 4-1: config 0 descriptor?? [ 1427.624614][ T2864] usb 3-1: config 0 has no interfaces? [ 1427.630128][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1427.640201][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.652753][ T2864] usb 3-1: config 0 descriptor?? [ 1427.876888][ T2864] usb 4-1: USB disconnect, device number 18 [ 1427.932511][ T7550] usb 3-1: USB disconnect, device number 25 [ 1428.623068][ T7550] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1428.703029][ T2864] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1428.983186][ T7550] usb 4-1: config 0 has no interfaces? [ 1428.989558][ T7550] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1429.000014][ T7550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.013599][ T7550] usb 4-1: config 0 descriptor?? [ 1429.063232][ T2864] usb 3-1: config 0 has no interfaces? [ 1429.068764][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1429.079086][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.092423][ T2864] usb 3-1: config 0 descriptor?? [ 1429.273078][ T2864] usb 4-1: USB disconnect, device number 19 [ 1429.362763][ T12] usb 3-1: USB disconnect, device number 26 01:45:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:45:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaac3af7cc63c84a3ad6890d9149a22aaaae80520008bbb63996838b3171bab01", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:20 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 01:45:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x0, 0x0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3b}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x8], [], @remote}, @ipv4={[], [], @empty}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 01:45:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:20 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0x700}], 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x8010500d, &(0x7f0000000080)) 01:45:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ed95b193be5206a80cb985b018eacdb58d4b72193d0479284c2d41a6721874b2d634eb112f90ad7d58e1b437a15c208655e5373bf1e477cfab6d6ea322e5e7a5c712ca301d5585f6bdc677d491deef111af6dda6b3f1caafd9efb96f9b336fbbc52672c53822301130075947016f5f12b2ba5a85e2a8fa6006839ff63cf772ead8dba178fdcb0927e330fef785110fc2a83cb9d03b1da8c71a33ddaa1d23beb0e05ef62baa959b27fe1383f9663e9c74d01e9366e6deebc97365a4"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11c000}) 01:45:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x101}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800457000280000000000069078ac141400000001ff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0500000000000000"], 0x0) [ 1430.342996][ T12] usb 3-1: new high-speed USB device number 27 using dummy_hcd 01:45:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1430.733589][ T12] usb 3-1: config 0 has no interfaces? [ 1430.739954][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1430.794725][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.847641][ T12] usb 3-1: config 0 descriptor?? [ 1431.248864][ T2864] usb 3-1: USB disconnect, device number 27 01:45:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:45:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) 01:45:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:45:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0xc1, "e30020"}, "ccbfc12abc282c27820fd9118600820e000500110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) 01:45:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1431.812765][ T2864] usb 3-1: new high-speed USB device number 28 using dummy_hcd 01:45:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1432.193348][ T2864] usb 3-1: config 0 has no interfaces? [ 1432.198890][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1432.326787][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.498733][ T2864] usb 3-1: config 0 descriptor?? [ 1432.855125][ T2864] usb 3-1: USB disconnect, device number 28 [ 1433.612659][ T8219] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1433.982650][ T8219] usb 3-1: config 0 has no interfaces? [ 1433.988146][ T8219] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1434.002667][ T8219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.022671][ T8219] usb 3-1: config 0 descriptor?? [ 1434.280340][ T8219] usb 3-1: USB disconnect, device number 29 01:45:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0x1}}, [@filter_kind_options=@f_route={{0x10, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x0) 01:45:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:45:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:25 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x2c}}, 0x0) 01:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@private0={0xfc, 0x0, [], 0x1}, r4}, 0x14) r5 = dup(r3) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) listen(r0, 0x7ff) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004227007f00670000080690780a0101026401010101441068800000004000000000fffff0004420686080000000000000890000000200004361000000070000ab54000000e80000004e224e20", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="6001000290780034000001000000f3f671a3707cb73e0724884a05c7e24a8ae6cc42f67f83c1e612a4c0ff"], 0x0) [ 1434.839124][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:45:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:25 executing program 5: [ 1434.897269][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x6000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x7fffffff) write(r3, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) listen(r0, 0x7ff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x121000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x4545f0de, 0x100, r7, 0x0, &(0x7f00000000c0)={0x990a5f, 0xc4d, [], @value=0x7}}) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f00000001c0)='bridge_slave_1\x00') syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 01:45:25 executing program 0: 01:45:25 executing program 5: 01:45:26 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:26 executing program 5: [ 1435.172568][ T2864] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1435.563166][ T2864] usb 3-1: config 0 has no interfaces? [ 1435.577177][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1435.598991][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.610887][ T2864] usb 3-1: config 0 descriptor?? [ 1435.877764][ T2864] usb 3-1: USB disconnect, device number 30 [ 1436.432438][ T2864] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1436.792450][ T2864] usb 3-1: config 0 has no interfaces? [ 1436.798255][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1436.808335][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.821047][ T2864] usb 3-1: config 0 descriptor?? [ 1437.087466][T16127] usb 3-1: USB disconnect, device number 31 [ 1437.832351][ T2864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1438.192699][ T2864] usb 3-1: config 0 has no interfaces? [ 1438.198203][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1438.211322][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.221361][ T2864] usb 3-1: config 0 descriptor?? [ 1438.492936][ T12] usb 3-1: USB disconnect, device number 32 01:45:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:29 executing program 0: 01:45:29 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 01:45:29 executing program 5: 01:45:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:45:29 executing program 5: 01:45:30 executing program 0: 01:45:30 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x6, 0x3) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000000700ff270012000100010056ee746804358ee49ec00835894d09ecea67a180d35c6aba552c2f42357dfb8ee53ad368f8553b3a475bf2512c048211433a0ac75b6e5e1a9d216d6ad298cbb8fc3508f474bb3b5c4c99d03d3e0f48250e2de62a99ed0c974a41066fef450f3570c7248992a6468138c7ac31f6d3d94ba35c80dae536314283aac330fd26755fcf63d7b5002145cb813016a1d1c37f90e823bb0a115f4bffa0894ca9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="040000000000ffff000000000b0001006367726f75700000300002003400010030000000090001006d706c730000000004000280040006000c8e5d9e8333e800070000000000000000000c0008000000"], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r6, @ANYBLOB="e5ffffff0300ff003800020034000100300000000a000100706564697400000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x68}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005ea2b599f2f50f1ae7cb6fb2965f0465cdd45f16fc8204a5c1e975dc8c140abf406c60c6e97bfe7abd2c0f1deee314c5ec7b6e8452dfe7253f143635fb9f747d2302cb5d3acca12d396c95cef781db1ff80b760ac9910fd66a0408e84785b4f26dfae83df5d927c8395a641f37edafc4afbf4646d174424be3394f99719f04700c2896ba79892b07f53a2e8e269b6536ec2c049c43bdb2e832", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf251c00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x3f) listen(r0, 0x7ff) syz_emit_ethernet(0x162, &(0x7f0000000700)={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x154, 0x68, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x50, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0xf1, 0x5, 0x0, "cf2153719c3a8d0075cbe581b5dd5214b51afd16f499507e44fb35a1b6d0647d47e958ab155ac9c151098b643ad596428a3156a4629175b1810c66d50e62064e45483df72b8681d5c672f8367a8942bf29d07196ea532cd88cde3c4dacac914bd3911b696523235c98130b0b238feb5bc1bfe8ca20ccce4475fffb17882f593a003dafaf300bfa4f2a7ca9c47d9206c3bb1946c540e31c13791f4cb54309ec9621e037924b09765b467cce65e45cf0026a9cc8df1c6a00dc3fb3257e5d7250e0141e62520df064a21d97cb912429422825292aeb942b693f0a950791ce35fde7337bd51597344b49a72f55d93a3d"}, @nop, @generic={0x13, 0x12, "cfdb45246812e73308f3fe34ae9e0ac5"}, @exp_fastopen={0xfe, 0x14, 0xf989, "8a3ec7c99c998fa039a0c7fb591e65ce"}, @exp_fastopen={0xfe, 0x10, 0xf989, "8582f314042682847c847b64"}, @window={0x3, 0x3, 0x4}, @nop]}}}}}}}, 0x0) 01:45:30 executing program 5: 01:45:30 executing program 0: [ 1439.354959][ T8420] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.404758][ T12] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1439.437588][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.592306][ T8425] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.618539][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.793056][ T12] usb 3-1: config 0 has no interfaces? [ 1439.798901][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1439.845796][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.856825][ T12] usb 3-1: config 0 descriptor?? [ 1440.095872][ T12] usb 3-1: USB disconnect, device number 33 [ 1440.672103][ T12] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1441.052150][ T12] usb 3-1: config 0 has no interfaces? [ 1441.057694][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1441.067735][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.078227][ T12] usb 3-1: config 0 descriptor?? [ 1441.337298][ T2864] usb 3-1: USB disconnect, device number 34 01:45:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:33 executing program 5: 01:45:33 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:33 executing program 0: 01:45:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa78d753aaaaaaaaaabb0800000000000c9078ac141400ac3572f533", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) 01:45:33 executing program 0: 01:45:33 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:33 executing program 5: 01:45:33 executing program 0: 01:45:33 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:33 executing program 5: [ 1442.672115][T16127] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1443.032972][T16127] usb 3-1: config 0 has no interfaces? [ 1443.039071][T16127] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1443.120182][T16127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.215337][T16127] usb 3-1: config 0 descriptor?? [ 1443.498510][T19672] usb 3-1: USB disconnect, device number 35 [ 1444.091833][T19672] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1444.483189][T19672] usb 3-1: config 0 has no interfaces? [ 1444.488706][T19672] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1444.505515][T19672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.518829][T19672] usb 3-1: config 0 descriptor?? [ 1444.779510][ T2864] usb 3-1: USB disconnect, device number 36 01:45:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:36 executing program 0: 01:45:36 executing program 5: 01:45:36 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) 01:45:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x7ff) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22b75b077674776d4c11eb939665acd33af711cb1d9a9bff0fb459a7d5d738a1c1157c09e432c38ac5bed8b6eff522e793157ec73c1bf4a5ca25a18b18580638714c249dc8f16b000000000000010040035e587d0fada7558c2e669531", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:36 executing program 0: 01:45:36 executing program 5: 01:45:36 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0x1c) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450800000000000000069078df8884676e52e22c00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:36 executing program 5: 01:45:37 executing program 0: [ 1446.171843][ T7550] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1446.532372][ T7550] usb 3-1: config 0 has no interfaces? [ 1446.537928][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1446.612316][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.642752][ T7550] usb 3-1: config 0 descriptor?? [ 1446.910104][ T7550] usb 3-1: USB disconnect, device number 37 [ 1447.461623][ T7550] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1447.821661][ T7550] usb 3-1: config 0 has no interfaces? [ 1447.827213][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1447.836716][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.846031][ T7550] usb 3-1: config 0 descriptor?? [ 1448.086292][T19672] usb 3-1: USB disconnect, device number 38 01:45:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) 01:45:39 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:39 executing program 5: 01:45:39 executing program 0: 01:45:40 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x64340}, 0x18) mmap$qrtrtun(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{}, "eeb18b014090761e", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da167", "48b60516c7ad6c19"}, 0x38) 01:45:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @typed={0x8, 0x1a, 0x0, 0x0, @binary="36edcfbf"}]}, 0x28}], 0x1}, 0x0) 01:45:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$setpipe(r3, 0x407, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}], 0x1}, 0x0) 01:45:40 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "0002f3bf233e00", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567", "48b60516c7ad6c19"}, 0x38) write$binfmt_aout(r0, 0x0, 0xfdef) write$binfmt_aout(r0, &(0x7f00000002c0), 0x20) [ 1449.471553][T15763] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1449.524230][ T8982] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1449.616370][ T8998] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1449.832231][T15763] usb 3-1: config 0 has no interfaces? [ 1449.851088][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1449.929792][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.958302][T15763] usb 3-1: config 0 descriptor?? [ 1450.227803][T15763] usb 3-1: USB disconnect, device number 39 [ 1450.781440][T15763] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1451.141414][T15763] usb 3-1: config 0 has no interfaces? [ 1451.146972][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1451.156382][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.166156][T15763] usb 3-1: config 0 descriptor?? [ 1451.408037][T15763] usb 3-1: USB disconnect, device number 40 [ 1451.961406][T15763] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1452.231255][T15763] usb 3-1: device descriptor read/64, error 18 [ 1452.621356][T15763] usb 3-1: device descriptor read/64, error 18 01:45:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa5b78bd36034a35aa119467055eea8b060800450000280000000000069078ac141400ac1414aa00004e225538aefa1d61deebcc52fb5766f556d4d81a729c15f4ea92f5642b7971aea62d33028965cf4cee318b34b9002c1e46bdc15e0632890959be96032b4030676e42bfdc474a98be0615623b52953726e10ce325e5b748153e3b3d0c9970963c7248fc94bb4c004376967c882bf1f505b4f4a15ab9abfa2af0242d59567afb00d301edee2d45470117a93e6f73e080aa5dcfd521245c4200d89ad0bd9ab5804f11919c234e1f391371eb6d8c8de7e2436f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x34, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x34}], 0x1}, 0x0) 01:45:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:43 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1202"], 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 01:45:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x0, 0x3544, 0xa8000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000200)=""/255, 0xff}, {0x0}, {0x0}], 0x3) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e005b1) shutdown(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r5, &(0x7f0000000080)=@in={0x5a0e79934b65af66, 0x2}, 0x10) shutdown(r4, 0x0) [ 1453.111253][T15763] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1453.502709][T15763] usb 3-1: config 0 has no interfaces? [ 1453.508251][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1453.523967][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.541381][T15763] usb 3-1: config 0 descriptor?? [ 1453.787044][T15763] usb 3-1: USB disconnect, device number 42 [ 1454.351108][T15763] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1454.711564][T15763] usb 3-1: config 0 has no interfaces? [ 1454.717064][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1454.727587][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.736961][T15763] usb 3-1: config 0 descriptor?? [ 1454.985106][ T12] usb 3-1: USB disconnect, device number 43 [ 1455.581013][ T12] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1455.851018][ T12] usb 3-1: device descriptor read/64, error 18 01:45:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:45:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80003, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000080)={0x100000000, 0x0, 0x10001}) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:45:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1456.261005][ T12] usb 3-1: device descriptor read/64, error 18 01:45:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="78010000170001000000fbfffbfffffffe8000010000000000000000060c6a86170a33cd00000000ac141400000000000000000000000000ac142caa001000000000000000000000ac1414bb0000de0d6c1dc62100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000030080fa000000000000000000000000082b0000000100000002000000000a00000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000023200000001f00000000000000000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000037f38e0a59a44125ffff0000010000000000000044000500fe8000000000000000000000000000bb0000000032"], 0x178}}, 0x0) 01:45:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x7ff}}}}}}, 0x0) 01:45:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1456.550426][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1456.780977][ T12] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1457.163448][ T12] usb 3-1: config 0 has no interfaces? [ 1457.169056][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1457.199585][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.215591][ T12] usb 3-1: config 0 descriptor?? [ 1457.478799][ T12] usb 3-1: USB disconnect, device number 45 [ 1458.090868][ T12] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1458.461298][ T12] usb 3-1: config 0 has no interfaces? [ 1458.466803][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1458.476211][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.488811][ T12] usb 3-1: config 0 descriptor?? [ 1458.748667][ T12] usb 3-1: USB disconnect, device number 46 [ 1459.330821][ T12] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1459.640874][ T12] usb 3-1: device descriptor read/64, error 18 01:45:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x83c0550b, 0x0) 01:45:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa0b8eacb7bb08004500002800000000006be92afbb7168fbf149449f63dc666b5aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:45:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:50 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x20008000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r0, &(0x7f0000000180)='!', 0x1, 0x0, &(0x7f00000001c0)=@abs, 0x6e) 01:45:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 01:45:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8040, 0x0) linkat(r3, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) listen(r0, 0x7ff) syz_emit_ethernet(0xf7, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {"83e039ec87f490c0c71e8893590a4e645aeec79b89c89d0ce976ef8f465e66fe770a26d990c44a809667ec8c594ae03ce6c6e5d66c6bbbd4031908b59f365f8394fc2f67c2673f127779c607017501cb708a53fa05f781c99bf6ad43889308e164ad76ac1d3a5e75f31932943fceda01b2ff5ac3b450bf6a428e00e80dffdbcf1d71172f564398675c31bbf71dc81ffe9a184278d644cbe123b01b4cb3b2aecadc095d7e6fc54bf224cf24b7d0451cb98b183124d3fd28f07e039fdfa3093b20ea"}}}}}}, 0x0) 01:45:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:51 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) [ 1460.570867][ T12] usb 3-1: device descriptor read/64, error 18 [ 1460.840796][ T12] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1461.241322][ T12] usb 3-1: config 0 has no interfaces? [ 1461.246845][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1461.256902][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.268701][ T12] usb 3-1: config 0 descriptor?? [ 1461.536766][ T12] usb 3-1: USB disconnect, device number 48 [ 1462.150537][ T12] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1462.530646][ T12] usb 3-1: config 0 has no interfaces? [ 1462.536295][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1462.545414][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.558359][ T12] usb 3-1: config 0 descriptor?? [ 1462.806204][ T7550] usb 3-1: USB disconnect, device number 49 [ 1463.470496][ T2864] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1463.830998][ T2864] usb 3-1: config 0 has no interfaces? [ 1463.836524][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1463.846590][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.858283][ T2864] usb 3-1: config 0 descriptor?? [ 1464.104257][ T8219] usb 3-1: USB disconnect, device number 50 01:45:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x83c0550b, 0x0) 01:45:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0f2000090780000"], 0x0) 01:45:55 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6}]}) 01:45:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:45:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) msgget$private(0x0, 0x249) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x5, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 01:45:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x1e, &(0x7f0000000100)={@local, @broadcast, @void, {@can={0xc, {{0x2, 0x1}, 0x8, 0x2, 0x0, 0x0, "ec094bcf64871267"}}}}, 0x0) 01:45:55 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1465.030322][ T8219] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1465.057124][ T29] audit: type=1326 audit(1594863955.959:208): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9665 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f9ea code=0x0 01:45:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1465.440416][ T8219] usb 3-1: config 0 has no interfaces? [ 1465.446058][ T8219] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1465.470688][ T29] audit: type=1326 audit(1594863956.379:209): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9665 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f9ea code=0x0 [ 1465.510721][ T8219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.570038][ T8219] usb 3-1: config 0 descriptor?? [ 1465.838016][ T2864] usb 3-1: USB disconnect, device number 51 [ 1466.390252][ T2864] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1466.750299][ T2864] usb 3-1: config 0 has no interfaces? [ 1466.755858][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1466.765998][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.778360][ T2864] usb 3-1: config 0 descriptor?? [ 1467.026451][ T2864] usb 3-1: USB disconnect, device number 52 [ 1467.700129][ T7550] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1468.060156][ T7550] usb 3-1: config 0 has no interfaces? [ 1468.065669][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1468.078772][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.088290][ T7550] usb 3-1: config 0 descriptor?? [ 1468.337153][T19672] usb 3-1: USB disconnect, device number 53 01:45:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x83c0550b, 0x0) 01:45:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/127, 0x7f, &(0x7f0000000140)=""/147, 0x1, 0x5}}, 0x48) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff07780067eb5f00"], 0x0) 01:45:59 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:45:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:45:59 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:45:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:45:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:45:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1469.210074][ T7550] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1469.610786][ T7550] usb 3-1: config 0 has no interfaces? [ 1469.616334][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1469.656797][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.712077][ T7550] usb 3-1: config 0 descriptor?? [ 1469.997108][T19672] usb 3-1: USB disconnect, device number 54 [ 1470.589960][T19672] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1470.979959][T19672] usb 3-1: config 0 has no interfaces? [ 1470.985483][T19672] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1470.995615][T19672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.008705][T19672] usb 3-1: config 0 descriptor?? [ 1471.256140][T19672] usb 3-1: USB disconnect, device number 55 [ 1471.949802][T19672] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1472.349934][T19672] usb 3-1: config 0 has no interfaces? [ 1472.355466][T19672] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1472.364935][T19672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.377193][T19672] usb 3-1: config 0 descriptor?? [ 1472.636057][ T8219] usb 3-1: USB disconnect, device number 56 01:46:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabbd800450000280000000000069078ac141400ac1414aa00004e22338f527a5de571d184f4fc4182bef092f5c60bae603bb4fe92048f8ef6633d4e5903dac2b9a53a15", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:46:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:46:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1473.519850][ T8219] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1473.910224][ T8219] usb 3-1: config 0 has no interfaces? [ 1473.915740][ T8219] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1474.030269][ T8219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.073471][ T8219] usb 3-1: config 0 descriptor?? [ 1474.345374][ T8219] usb 3-1: USB disconnect, device number 57 [ 1474.919795][ T8219] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1475.309628][ T8219] usb 3-1: config 0 has no interfaces? [ 1475.315162][ T8219] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1475.325221][ T8219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.335288][ T8219] usb 3-1: config 0 descriptor?? [ 1475.594784][ T7550] usb 3-1: USB disconnect, device number 58 [ 1476.069556][ T7550] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1476.429593][ T7550] usb 3-1: config 0 has no interfaces? [ 1476.435165][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1476.448377][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.461432][ T7550] usb 3-1: config 0 descriptor?? [ 1476.703680][ T8219] usb 3-1: USB disconnect, device number 59 01:46:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000001800020403913844ee2010822638e2fe0a80a28b17ab47125b5fc18ac6dcd5dd55c170c63dabb7f3014b7a2c2fc5c6e2614648ef95c468c9cd8165cecee9dfbbdb11e7fbec5300f9d04fb4"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', r8}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@mcast2, 0x28, r9}) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) close(r0) 01:46:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1477.380440][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:46:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) close(r0) 01:46:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1477.537370][T10304] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1477.589208][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1477.640238][T15763] usb 3-1: new high-speed USB device number 60 using dummy_hcd 01:46:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) close(r0) 01:46:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1478.000014][T15763] usb 3-1: config 0 has no interfaces? [ 1478.005664][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1478.099446][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.163558][T15763] usb 3-1: config 0 descriptor?? [ 1478.444979][T15763] usb 3-1: USB disconnect, device number 60 [ 1478.999396][T15763] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1479.359347][T15763] usb 3-1: config 0 has no interfaces? [ 1479.364893][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1479.375572][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.387253][T15763] usb 3-1: config 0 descriptor?? [ 1479.633787][T15763] usb 3-1: USB disconnect, device number 61 [ 1480.199271][T15763] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1480.559319][T15763] usb 3-1: config 0 has no interfaces? [ 1480.564857][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1480.575261][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.584602][T15763] usb 3-1: config 0 descriptor?? [ 1480.833589][ T7550] usb 3-1: USB disconnect, device number 62 01:46:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r1, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2}}, 0x80) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000907800006d31d46ec011c9d34cdfdbce5f371bbb8ab7d47f3499b00c32de54e8df71b6a2d43623044964a2341bbade5a83042d437dc36bce7977ec540fd647d125cc8f47f30d7950f2a51ff1c4705754a4d4f1969093417aabd1c1754dbe969f3e52ab94e29171aa"], 0x0) 01:46:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x1, 0x3ff, 0x1, 0xffffffff}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3382f966f2211e3c"], 0x0) 01:46:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1481.789363][ T7550] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1482.200552][ T7550] usb 3-1: config 0 has no interfaces? [ 1482.206086][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1482.273507][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.294863][ T7550] usb 3-1: config 0 descriptor?? [ 1482.543450][ T7550] usb 3-1: USB disconnect, device number 63 [ 1483.099019][ T7550] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1483.459036][ T7550] usb 3-1: config 0 has no interfaces? [ 1483.464740][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1483.473899][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.488119][ T7550] usb 3-1: config 0 descriptor?? [ 1483.735249][ T7550] usb 3-1: USB disconnect, device number 64 [ 1484.288950][ T7550] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1484.648991][ T7550] usb 3-1: config 0 has no interfaces? [ 1484.654552][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1484.664781][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.676559][ T7550] usb 3-1: config 0 descriptor?? [ 1484.933211][T19672] usb 3-1: USB disconnect, device number 65 01:46:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="005992bd7000fcdbdf2501000000000000000741000000140018000000036574683a67656ec26576653100"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 01:46:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1485.948916][T15763] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1486.319616][T15763] usb 3-1: config 0 has no interfaces? [ 1486.327716][T15763] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1486.384267][T15763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.473835][T15763] usb 3-1: config 0 descriptor?? [ 1486.737896][T15763] usb 3-1: USB disconnect, device number 66 [ 1487.608694][ T2864] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1487.878657][ T2864] usb 3-1: device descriptor read/64, error 18 [ 1488.268709][ T2864] usb 3-1: device descriptor read/64, error 18 [ 1488.538651][ T2864] usb 3-1: new high-speed USB device number 68 using dummy_hcd 01:46:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aabdaaaaaaaaaaaaaaaaaabb0800450000280000000000068478ac141400ac1414aa0000254e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:46:19 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:46:19 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:46:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) recvfrom(r2, &(0x7f00000000c0)=""/38, 0x26, 0x2, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000000006907864010101ac1414aa00004e22302ac2e45da657a8393c96349bc1f58ccb88bbb6a9e5e658b4c304e69f418c45d07a58bff7456686872e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:46:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040), 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 01:46:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040), 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1489.108582][ T2864] usb 3-1: device descriptor read/64, error -71 [ 1489.588640][ T2864] usb 3-1: config 0 has no interfaces? [ 1489.594320][ T2864] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1489.603968][ T2864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.615427][ T2864] usb 3-1: config 0 descriptor?? [ 1489.867565][ T2864] usb 3-1: USB disconnect, device number 68 [ 1490.738459][ T7550] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1491.008918][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1491.398429][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1491.668390][ T7550] usb 3-1: new high-speed USB device number 70 using dummy_hcd 01:46:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:22 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:46:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 01:46:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040), 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200402, 0x0) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x1, 0x1, 0x4, 0x4, "6dcb9e57bd3613318c2ec3480300837faec3e8a12d8f7fd6cc3d7e186c3504b47087847aff2638729a0a82cff7bfa31f85a6303341289e98f41271b90767399b917999b6e16421ea0439ba3aee05107cef401a0dab5111a8d4e29f8f"}, 0x6c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 01:46:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1492.238370][ T7550] usb 3-1: device descriptor read/64, error -71 [ 1492.724698][ T7550] usb 3-1: config 0 has no interfaces? [ 1492.730292][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1492.750666][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.773029][ T7550] usb 3-1: config 0 descriptor?? [ 1493.022865][ T8219] usb 3-1: USB disconnect, device number 70 [ 1493.918280][ T8219] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1494.218223][ T8219] usb 3-1: device descriptor read/64, error 18 [ 1494.608185][ T8219] usb 3-1: device descriptor read/64, error 18 [ 1494.878176][ T8219] usb 3-1: new high-speed USB device number 72 using dummy_hcd 01:46:25 executing program 2: syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80), 0x0, 0x0) 01:46:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80), 0x0, 0x0) 01:46:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:46:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 01:46:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80), 0x0, 0x0) 01:46:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, 0x0, 0x0) [ 1495.338155][ T8219] usb 3-1: device descriptor read/64, error -71 [ 1495.858130][ T8219] usb 3-1: config 0 has no interfaces? [ 1495.863759][ T8219] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1495.944268][ T8219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.022401][ T8219] usb 3-1: config 0 descriptor?? [ 1496.284970][T10917] udc-core: couldn't find an available UDC or it's busy [ 1496.293148][T10917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1496.718104][T10917] udc-core: couldn't find an available UDC or it's busy [ 1496.725071][T10917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1496.736256][ T7550] usb 3-1: USB disconnect, device number 72 01:46:28 executing program 2: syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:46:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 01:46:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, 0x0, 0x0) 01:46:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) fcntl$getown(r3, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000180)) listen(r0, 0x7ff) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x6, 0xffff) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x7fff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, r7, r6, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:28 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x74}, {0x6, 0x0, 0x0, 0x50000}]}) 01:46:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:46:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:46:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x24002, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c300476ae9e3fc0dec2586a732e96d8ccc4fbde478e4a0c4a0fde892c9cd739eef3560fc422ab83e4dc54168725de6"], 0x0) 01:46:28 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1497.698204][T19672] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1498.078634][T19672] usb 3-1: config 0 has no interfaces? [ 1498.084524][T19672] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 1498.177107][T19672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.284788][T19672] usb 3-1: config 0 descriptor?? [ 1498.548373][T11111] udc-core: couldn't find an available UDC or it's busy [ 1498.559512][T11111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1498.986246][T11111] udc-core: couldn't find an available UDC or it's busy [ 1499.006780][T11111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1499.036691][ T8219] usb 3-1: USB disconnect, device number 73 01:46:30 executing program 2: syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a0528004000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:46:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="0f22e4c4c2459d810500000066baf80cb856cee88bef66bafc0c66b8009866ef0f32b900090000b800800000ba000000000f3066ba2100b052ee640f01d1b97c030000b871000000ba000000000f30b8010010000f01d9", 0x57}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:46:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)}, 0x0) 01:46:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1499.987975][ T7550] usb 3-1: new high-speed USB device number 74 using dummy_hcd 01:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)}, 0x0) 01:46:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:31 executing program 1: 01:46:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)}, 0x0) [ 1500.378482][ T7550] usb 3-1: config 0 has no interfaces? [ 1500.384306][ T7550] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 01:46:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1500.476504][ T7550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.580535][ T7550] usb 3-1: config 0 descriptor?? [ 1500.852146][T11305] udc-core: couldn't find an available UDC or it's busy [ 1500.859261][T11305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1501.271577][T11305] udc-core: couldn't find an available UDC or it's busy [ 1501.278731][T11305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1501.294598][ T7550] usb 3-1: USB disconnect, device number 74 01:46:32 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/606], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000636c77", 0x0, 0x100, 0x6000000000000000}, 0x28) 01:46:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{0x0, 0x1c}], 0x1}, 0x0) 01:46:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=0x0, @ANYBLOB="0200000034d4873d66d15e080400ffff000000000b00010063670600000000000000020034000100300000000a000100706564697400000004000280040006100c00070000000000200000000c0008000000000000000000331b32cdc95e8888d791716a026fe08623e417d7bf4f06920d260100000086d3d4e0d3107b9676b820ed6f2027e3ebc38c3a00bff64810fbe7370feb26388f28f1935b92ce62192e6f091f11043b0c860fd5838516b0f5a8ad6111533d462e97f8b1fe7b686ce32d4704c4c331f7b75a920eccb6ceeae84dcaf16b13dd0dff"], 0x68}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[@ANYBLOB='h\x00\x00\x00(\x00'/18, @ANYRES32=r8, @ANYBLOB="020000000400ffff000000000b0001006367726f757000003800020034000100300000000a000100706564697400000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x68}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8110000fee320007f531ce62d30572cf4edd1742189cbcf2c68301e3ba08abd564a48e89eca3408b17d7f9b9a0cd34b4a58359fba75b955b0c65ba50c02723312a926ae817385fc23f4497d03b9f7", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="e400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400020001050200000000000309020000001b040102ca0000000300030408000000ff039b81060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="a00002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040008000101fdffffff0600034006000000000800017103000096fb1406000000002bee14010000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) 01:46:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{0x0, 0x1c}], 0x1}, 0x0) 01:46:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x2593a, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1501.923957][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:46:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 1502.030631][T11505] HTB: quantum of class FFFF0004 is big. Consider r2q change. 01:46:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{0x0, 0x1c}], 0x1}, 0x0) 01:46:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) [ 1502.427825][T15763] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1502.747798][T15763] usb 3-1: device descriptor read/64, error 18 [ 1503.137587][T15763] usb 3-1: device descriptor read/64, error 18 [ 1503.407585][T15763] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1503.677573][T15763] usb 3-1: device descriptor read/64, error 18 [ 1504.067519][T15763] usb 3-1: device descriptor read/64, error 18 [ 1504.188323][T15763] usb usb3-port1: attempt power cycle 01:46:35 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:35 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa00450000280000000000069078ac141400ac1414aa00004e220000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 01:46:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) 01:46:35 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1504.897545][T15763] usb 3-1: new high-speed USB device number 77 using dummy_hcd 01:46:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) 01:46:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:46:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) sendfile(r6, r4, 0x0, 0x9b1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={r10, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010101}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:36 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) 01:46:36 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1505.387657][T15763] usb 3-1: device not accepting address 77, error -71 [ 1505.787659][T15763] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1505.987493][T15763] usb 3-1: device descriptor read/8, error -61 [ 1506.257440][T15763] usb 3-1: device descriptor read/8, error -61 [ 1506.378485][T15763] usb usb3-port1: unable to enumerate USB device 01:46:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 01:46:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140e, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000fc39f482798c87b622a9edfec374372755ff4ed22137f642a6d6a8efc92f39ed3800524391bda78ccd4481c3cbef3962d7897a4cc5b8a64c272be06c48a5969651ed462c11ec7a03f53009bb578a3de159b1299e515c302613dff0aa"], 0x0) 01:46:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:38 executing program 2: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) 01:46:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0) 01:46:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0) 01:46:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) set_mempolicy(0x1, &(0x7f0000000040)=0x2, 0x8) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 01:46:39 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @remote, @void, {@x25={0x805, {0x2, 0x2, 0xf, "248b8533703b5b639ec69c1c4eebe9a2c15a7269553f4eb792e32edd117f68f0b99601484263639500ea00d48c2faee4d7e03ad7701438af559899a4dae1e2ba0acb56e6ed4a6362971820c9b41be5f047e5646f6c923c64f22c1cce4c"}}}}, 0x0) 01:46:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0) 01:46:39 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000ea23000705c81635ae00a455002000000000800000001f008b8665de482b9cd276e75d8a42c5c2315f692485532e70353421b2d12efe9afd572d7ee795793758bfc16442c37f00767b85d1dbdc4a6595d9d9862dc68027e2083a6a7217fc7e5672a5d179c46293a754e671b39f7be8168670aa2dffb8f0e3ffb5baf9137ff3db50e4dbdaab3b15769114e18f73909f3f5718ceae1592a1e57c38a86e40d11dd35f4c5ab1f9769da9f9dfd6a8dc14a6af15", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x2f, 0x3, 0xa8, 0x3, 0x71, @loopback, @mcast1, 0x40, 0x1, 0x200, 0x7fffffff}}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008814) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x1, r4}) [ 1508.577645][T15763] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1508.877397][T15763] usb 3-1: device descriptor read/64, error 18 [ 1509.267139][T15763] usb 3-1: device descriptor read/64, error 18 [ 1509.537193][T15763] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1509.807184][T15763] usb 3-1: device descriptor read/64, error 18 [ 1510.197106][T15763] usb 3-1: device descriptor read/64, error 18 [ 1510.317175][T15763] usb usb3-port1: attempt power cycle [ 1511.027057][T15763] usb 3-1: new high-speed USB device number 81 using dummy_hcd 01:46:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000"], 0x1c}], 0x1}, 0x0) 01:46:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000200)={0x0, 0x7fffffff, 0x1000, [], &(0x7f00000001c0)=0x7}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x24, r9, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9c400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xaf7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004008}, 0x20000000) r10 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1511.137199][T15763] usb 3-1: device descriptor read/8, error -71 01:46:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000"], 0x1c}], 0x1}, 0x0) 01:46:42 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1511.347067][T15763] usb 3-1: device descriptor read/8, error -71 [ 1511.371058][T12079] FAULT_INJECTION: forcing a failure. [ 1511.371058][T12079] name failslab, interval 1, probability 0, space 0, times 0 01:46:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000"], 0x1c}], 0x1}, 0x0) 01:46:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1511.527666][T12079] CPU: 0 PID: 12079 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1511.536369][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.546775][T12079] Call Trace: [ 1511.550077][T12079] dump_stack+0x18f/0x20d [ 1511.554418][T12079] should_fail.cold+0x5/0x14 [ 1511.559051][T12079] should_failslab+0x5/0xf [ 1511.563479][T12079] kmem_cache_alloc_node+0x257/0x3c0 [ 1511.568779][T12079] __alloc_skb+0x71/0x550 [ 1511.573116][T12079] alloc_skb_with_frags+0x92/0x570 [ 1511.578241][T12079] ? mark_lock+0xbc/0x1710 [ 1511.582663][T12079] sock_alloc_send_pskb+0x72a/0x880 [ 1511.587878][T12079] ? sock_wmalloc+0x120/0x120 [ 1511.592566][T12079] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1511.598551][T12079] ? lock_acquire+0x1f1/0xad0 [ 1511.603229][T12079] ? __bpf_address_lookup+0x290/0x290 [ 1511.608612][T12079] __ip6_append_data.isra.0+0x1b7d/0x3890 [ 1511.614352][T12079] ? ip_frag_init+0x330/0x330 [ 1511.619042][T12079] ? ip6_finish_output2+0x17b0/0x17b0 [ 1511.624485][T12079] ? ip6_mtu+0x170/0x470 [ 1511.628740][T12079] ? ip6_setup_cork+0xfac/0x1690 [ 1511.633684][T12079] ip6_make_skb+0x2de/0x4e0 [ 1511.638188][T12079] ? ip_frag_init+0x330/0x330 [ 1511.642872][T12079] ? ip_frag_init+0x330/0x330 [ 1511.647573][T12079] ? ip6_push_pending_frames+0xe0/0xe0 [ 1511.653041][T12079] ? ip6_dst_check+0x3bc/0x800 [ 1511.657811][T12079] ? sk_dst_check+0x271/0x440 [ 1511.662511][T12079] udpv6_sendmsg+0x22bd/0x2b90 [ 1511.667282][T12079] ? ip_frag_init+0x330/0x330 [ 1511.671974][T12079] ? udp_v6_push_pending_frames+0x360/0x360 [ 1511.677874][T12079] ? ima_get_action+0x76/0xa0 [ 1511.682558][T12079] ? __lock_acquire+0xc1e/0x56e0 [ 1511.687500][T12079] ? lock_acquire+0x1f1/0xad0 [ 1511.692177][T12079] ? __might_fault+0xef/0x1d0 [ 1511.696861][T12079] ? find_held_lock+0x2d/0x110 [ 1511.701629][T12079] ? lock_is_held_type+0xb0/0xe0 [ 1511.706578][T12079] ? aa_af_perm+0x230/0x230 [ 1511.711085][T12079] ? __copy_msghdr_from_user+0x2b4/0x4b0 [ 1511.716728][T12079] inet6_sendmsg+0x99/0xe0 [ 1511.721151][T12079] ? inet6_compat_ioctl+0x310/0x310 [ 1511.726358][T12079] sock_sendmsg+0xcf/0x120 [ 1511.730787][T12079] ____sys_sendmsg+0x331/0x810 [ 1511.735567][T12079] ? kernel_sendmsg+0x50/0x50 [ 1511.740240][T12079] ? do_recvmmsg+0x6d0/0x6d0 [ 1511.744840][T12079] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1511.750827][T12079] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1511.756829][T12079] ___sys_sendmsg+0xf3/0x170 [ 1511.761425][T12079] ? sendmsg_copy_msghdr+0x160/0x160 [ 1511.766708][T12079] ? __fget_files+0x272/0x400 [ 1511.771389][T12079] ? lock_downgrade+0x820/0x820 [ 1511.776260][T12079] ? __fget_files+0x294/0x400 [ 1511.780946][T12079] ? __fget_light+0xea/0x280 [ 1511.785542][T12079] __sys_sendmmsg+0x195/0x480 [ 1511.790225][T12079] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1511.795252][T12079] ? lock_downgrade+0x820/0x820 [ 1511.800102][T12079] ? vfs_write+0x397/0x6b0 [ 1511.804531][T12079] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1511.810071][T12079] ? lock_is_held_type+0xb0/0xe0 [ 1511.815012][T12079] ? wait_for_completion+0x260/0x260 [ 1511.820301][T12079] ? vfs_write+0x1b0/0x6b0 [ 1511.824718][T12079] ? fput_many+0x2f/0x1a0 [ 1511.829043][T12079] ? ksys_write+0x1a5/0x250 [ 1511.833546][T12079] ? lock_is_held_type+0xb0/0xe0 [ 1511.838611][T12079] __x64_sys_sendmmsg+0x99/0x100 [ 1511.843551][T12079] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1511.848664][T12079] do_syscall_64+0x60/0xe0 [ 1511.853081][T12079] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1511.856976][T15763] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1511.858962][T12079] RIP: 0033:0x45cba9 [ 1511.858968][T12079] Code: Bad RIP value. [ 1511.858976][T12079] RSP: 002b:00007f7dff59fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1511.858990][T12079] RAX: ffffffffffffffda RBX: 00000000004ff000 RCX: 000000000045cba9 [ 1511.858998][T12079] RDX: 0000000000000001 RSI: 0000000020005c80 RDI: 0000000000000005 [ 1511.859006][T12079] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1511.859013][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1511.859026][T12079] R13: 000000000000093b R14: 00000000004cc08a R15: 00007f7dff5a06d4 01:46:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1512.027910][T15763] usb 3-1: device descriptor read/8, error -61 [ 1512.297676][T15763] usb 3-1: device descriptor read/8, error -61 [ 1512.423627][T15763] usb usb3-port1: unable to enumerate USB device 01:46:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:45 executing program 1 (fault-call:6 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 01:46:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='TIPCv2\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000080)='\x00', r4}, 0x30) r6 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2f1cd94d5a00080428bd7000fcdbdf251616000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="1ae169e1", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x1) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1514.215100][T12161] FAULT_INJECTION: forcing a failure. [ 1514.215100][T12161] name failslab, interval 1, probability 0, space 0, times 0 01:46:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @val={@val={0x9100, 0x5, 0x1, 0x3}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xfffe}}}}}}, 0x0) 01:46:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 01:46:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000080)) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1514.342827][T12161] CPU: 1 PID: 12161 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1514.351642][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.361695][T12161] Call Trace: [ 1514.364993][T12161] dump_stack+0x18f/0x20d [ 1514.369335][T12161] should_fail.cold+0x5/0x14 [ 1514.373937][T12161] should_failslab+0x5/0xf [ 1514.378360][T12161] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1514.384186][T12161] __kmalloc_node_track_caller+0x38/0x60 [ 1514.389832][T12161] __alloc_skb+0xae/0x550 [ 1514.394170][T12161] alloc_skb_with_frags+0x92/0x570 [ 1514.399293][T12161] ? mark_lock+0xbc/0x1710 [ 1514.403713][T12161] sock_alloc_send_pskb+0x72a/0x880 [ 1514.408923][T12161] ? sock_wmalloc+0x120/0x120 [ 1514.413611][T12161] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1514.419599][T12161] ? lock_acquire+0x1f1/0xad0 [ 1514.424280][T12161] ? __bpf_address_lookup+0x290/0x290 [ 1514.429665][T12161] __ip6_append_data.isra.0+0x1b7d/0x3890 [ 1514.435397][T12161] ? ip_frag_init+0x330/0x330 [ 1514.440087][T12161] ? ip6_finish_output2+0x17b0/0x17b0 [ 1514.445463][T12161] ? ip6_mtu+0x170/0x470 [ 1514.449711][T12161] ? ip6_setup_cork+0xfac/0x1690 [ 1514.454651][T12161] ip6_make_skb+0x2de/0x4e0 [ 1514.459155][T12161] ? ip_frag_init+0x330/0x330 [ 1514.463837][T12161] ? ip_frag_init+0x330/0x330 [ 1514.468526][T12161] ? ip6_push_pending_frames+0xe0/0xe0 [ 1514.473995][T12161] ? ip6_dst_check+0x3bc/0x800 [ 1514.478766][T12161] ? sk_dst_check+0x271/0x440 [ 1514.483452][T12161] udpv6_sendmsg+0x22bd/0x2b90 [ 1514.488220][T12161] ? ip_frag_init+0x330/0x330 [ 1514.492905][T12161] ? udp_v6_push_pending_frames+0x360/0x360 [ 1514.498800][T12161] ? ima_get_action+0x76/0xa0 [ 1514.503482][T12161] ? __lock_acquire+0xc1e/0x56e0 [ 1514.508432][T12161] ? lock_acquire+0x1f1/0xad0 [ 1514.513106][T12161] ? __might_fault+0xef/0x1d0 [ 1514.517783][T12161] ? find_held_lock+0x2d/0x110 [ 1514.522560][T12161] ? lock_is_held_type+0xb0/0xe0 [ 1514.527517][T12161] ? aa_af_perm+0x230/0x230 [ 1514.532022][T12161] ? __copy_msghdr_from_user+0x2b4/0x4b0 [ 1514.537677][T12161] inet6_sendmsg+0x99/0xe0 [ 1514.542098][T12161] ? inet6_compat_ioctl+0x310/0x310 [ 1514.547294][T12161] sock_sendmsg+0xcf/0x120 [ 1514.551711][T12161] ____sys_sendmsg+0x331/0x810 [ 1514.556482][T12161] ? kernel_sendmsg+0x50/0x50 [ 1514.561153][T12161] ? do_recvmmsg+0x6d0/0x6d0 [ 1514.565747][T12161] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1514.571729][T12161] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1514.577714][T12161] ___sys_sendmsg+0xf3/0x170 [ 1514.582315][T12161] ? sendmsg_copy_msghdr+0x160/0x160 [ 1514.587604][T12161] ? __fget_files+0x272/0x400 [ 1514.592313][T12161] ? lock_downgrade+0x820/0x820 [ 1514.597173][T12161] ? __fget_files+0x294/0x400 [ 1514.601853][T12161] ? __fget_light+0xea/0x280 [ 1514.606451][T12161] __sys_sendmmsg+0x195/0x480 [ 1514.611134][T12161] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1514.616161][T12161] ? lock_downgrade+0x820/0x820 [ 1514.621014][T12161] ? vfs_write+0x397/0x6b0 [ 1514.625445][T12161] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1514.630987][T12161] ? lock_is_held_type+0xb0/0xe0 [ 1514.635927][T12161] ? wait_for_completion+0x260/0x260 [ 1514.641214][T12161] ? vfs_write+0x1b0/0x6b0 [ 1514.645633][T12161] ? fput_many+0x2f/0x1a0 [ 1514.649959][T12161] ? ksys_write+0x1a5/0x250 [ 1514.654461][T12161] ? lock_is_held_type+0xb0/0xe0 [ 1514.659402][T12161] __x64_sys_sendmmsg+0x99/0x100 [ 1514.664338][T12161] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1514.669452][T12161] do_syscall_64+0x60/0xe0 [ 1514.673868][T12161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1514.679755][T12161] RIP: 0033:0x45cba9 [ 1514.683641][T12161] Code: Bad RIP value. [ 1514.687699][T12161] RSP: 002b:00007f7dff59fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1514.696103][T12161] RAX: ffffffffffffffda RBX: 00000000004ff000 RCX: 000000000045cba9 [ 1514.704072][T12161] RDX: 0000000000000001 RSI: 0000000020005c80 RDI: 0000000000000005 [ 1514.712053][T12161] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1514.720021][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1514.727989][T12161] R13: 000000000000093b R14: 00000000004cc08a R15: 00007f7dff5a06d4 01:46:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x7ff) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {"6f1c72d333ccc20004"}}}}}}, 0x0) [ 1514.886966][ T12] usb 3-1: new high-speed USB device number 83 using dummy_hcd 01:46:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000080)) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) [ 1515.186805][ T12] usb 3-1: device descriptor read/64, error 18 [ 1515.596724][ T12] usb 3-1: device descriptor read/64, error 18 [ 1515.866750][ T12] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1516.166651][ T12] usb 3-1: device descriptor read/64, error 18 [ 1516.576617][ T12] usb 3-1: device descriptor read/64, error 18 [ 1516.707356][ T12] usb usb3-port1: attempt power cycle 01:46:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000080)) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}], 0x1}, 0x0) 01:46:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}], 0x1}, 0x0) 01:46:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:46:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@empty, @remote, @val={@val={0x9100, 0x7, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9a0000, 0xdc0a, 0x0, r4, 0x0, &(0x7f0000000100)={0x990a72, 0x8d2d, [], @p_u32=&(0x7f00000000c0)=0x8}}) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000180)=0x10, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x10001) 01:46:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x2, 0x0}}], 0x1, 0x0) 01:46:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1517.886656][ T12] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1518.116747][ T12] usb 3-1: device descriptor read/8, error -61 [ 1518.427215][ T12] usb 3-1: device descriptor read/8, error -61 [ 1518.706530][ T12] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1518.887178][ T12] usb 3-1: device descriptor read/8, error -61 [ 1519.176635][ T12] usb 3-1: device descriptor read/8, error -61 [ 1519.307455][ T12] usb usb3-port1: unable to enumerate USB device 01:46:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}], 0x1}, 0x0) 01:46:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) 01:46:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x22, 0x3, 0x0, {0x1, 0x1, 0x0, '\''}}, 0x22) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x7}, 0x8) r7 = dup(r1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000140)="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", 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:46:51 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7, 0x0}}], 0x1, 0x0) 01:46:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1520.716384][ T12] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1521.006328][ T12] usb 3-1: device descriptor read/64, error 18 [ 1521.436276][ T12] usb 3-1: device descriptor read/64, error 18 [ 1521.716281][ T12] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1521.996242][ T12] usb 3-1: device descriptor read/64, error 18 [ 1522.416260][ T12] usb 3-1: device descriptor read/64, error 18 [ 1522.539489][ T12] usb usb3-port1: attempt power cycle [ 1523.256204][ T12] usb 3-1: new high-speed USB device number 89 using dummy_hcd 01:46:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000907a0000"], 0x0) 01:46:54 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x8, 0x0}}], 0x1, 0x0) 01:46:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1523.445634][T12550] FAULT_INJECTION: forcing a failure. [ 1523.445634][T12550] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.466396][ T12] usb 3-1: device descriptor read/8, error -71 [ 1523.509590][T12550] CPU: 1 PID: 12550 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1523.518286][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.528336][T12550] Call Trace: [ 1523.531632][T12550] dump_stack+0x18f/0x20d [ 1523.535973][T12550] should_fail.cold+0x5/0x14 [ 1523.540568][T12550] should_failslab+0x5/0xf [ 1523.544988][T12550] kmem_cache_alloc_node+0x257/0x3c0 [ 1523.549226][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1523.550272][T12550] __alloc_skb+0x71/0x550 [ 1523.550310][T12550] netlink_sendmsg+0x94f/0xd90 [ 1523.550335][T12550] ? netlink_unicast+0x7d0/0x7d0 [ 1523.573582][T12550] ? netlink_unicast+0x7d0/0x7d0 [ 1523.574329][T12560] HTB: quantum of class FFFF0004 is big. Consider r2q change. [ 1523.578522][T12550] sock_sendmsg+0xcf/0x120 [ 1523.578542][T12550] ____sys_sendmsg+0x6e8/0x810 [ 1523.578561][T12550] ? kernel_sendmsg+0x50/0x50 [ 1523.578573][T12550] ? do_recvmmsg+0x6d0/0x6d0 [ 1523.578591][T12550] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1523.578611][T12550] ? _parse_integer+0x132/0x180 [ 1523.587626][T12560] HTB: quantum of class FFFF0002 is big. Consider r2q change. [ 1523.590439][T12550] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1523.590458][T12550] ___sys_sendmsg+0xf3/0x170 [ 1523.590475][T12550] ? sendmsg_copy_msghdr+0x160/0x160 [ 1523.590488][T12550] ? __fget_files+0x272/0x400 [ 1523.590506][T12550] ? lock_downgrade+0x820/0x820 [ 1523.605481][T12560] HTB: quantum of class FFFF0002 is big. Consider r2q change. [ 1523.610450][T12550] ? find_held_lock+0x2d/0x110 [ 1523.610467][T12550] ? ksys_write+0x212/0x250 [ 1523.610486][T12550] ? __fget_files+0x294/0x400 [ 1523.610504][T12550] ? __fget_light+0xea/0x280 [ 1523.610522][T12550] __sys_sendmsg+0xe5/0x1b0 [ 1523.610540][T12550] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1523.683479][T12550] ? do_syscall_64+0x1c/0xe0 [ 1523.688072][T12550] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1523.694055][T12550] do_syscall_64+0x60/0xe0 [ 1523.698474][T12550] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1523.704362][T12550] RIP: 0033:0x45cba9 01:46:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) socket$inet(0x2, 0x4, 0x46d) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r8, 0x2f, 0x1, 0x1, 0x9, 0xc, @remote, @remote, 0x8000, 0x40, 0x5, 0x7}}) 01:46:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r8, 0x7}, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) syz_emit_ethernet(0x186, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) 01:46:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x9, 0x0, 0x2, "a6ddfc210ad9555c5b365dd7e001b2d2d90c240c07353246efe022690eeaa6f2", 0x36314d4e}) syz_emit_ethernet(0x5b, &(0x7f0000000080)=ANY=[@ANYBLOB="aacd000000aaaaaaaaaaaabb08004ee3004d00010000730690787f0000010a01010294040000440c0913ac14143e000100004410d76000000004000007ff0000000794040000bc3a943b68cbed67a0eadebecceebe286e708461cb"], 0x0) 01:46:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x9, 0x0}}], 0x1, 0x0) [ 1523.708280][T12550] Code: Bad RIP value. [ 1523.712344][T12550] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.720757][T12550] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 [ 1523.728725][T12550] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1523.736714][T12550] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1523.744687][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1523.752654][T12550] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 01:46:54 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1523.862122][ T12] usb 3-1: device descriptor read/8, error -71 [ 1524.376087][ T12] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1524.566838][ T12] usb 3-1: device descriptor read/8, error -61 [ 1524.866794][ T12] usb 3-1: device descriptor read/8, error -61 [ 1524.986164][ T12] usb usb3-port1: unable to enumerate USB device 01:46:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:46:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x6, 0x8000, 0x807, 0x58efc43, 0x1, 0xff], 0x6, 0x100000, 0x0, r3}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac14148319b34922", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffcff000000"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4138ae84, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x7}) 01:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:57 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:46:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xa, 0x0}}], 0x1, 0x0) 01:46:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1526.546127][T12587] FAULT_INJECTION: forcing a failure. [ 1526.546127][T12587] name failslab, interval 1, probability 0, space 0, times 0 01:46:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1526.633805][T12587] CPU: 0 PID: 12587 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1526.642507][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.652561][T12587] Call Trace: [ 1526.655855][T12587] dump_stack+0x18f/0x20d [ 1526.660191][T12587] should_fail.cold+0x5/0x14 [ 1526.664798][T12587] should_failslab+0x5/0xf [ 1526.669225][T12587] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1526.675040][T12587] __kmalloc_node_track_caller+0x38/0x60 [ 1526.680671][T12587] __alloc_skb+0xae/0x550 [ 1526.685006][T12587] netlink_sendmsg+0x94f/0xd90 [ 1526.689776][T12587] ? netlink_unicast+0x7d0/0x7d0 [ 1526.694727][T12587] ? netlink_unicast+0x7d0/0x7d0 [ 1526.699669][T12587] sock_sendmsg+0xcf/0x120 [ 1526.704090][T12587] ____sys_sendmsg+0x6e8/0x810 [ 1526.708862][T12587] ? kernel_sendmsg+0x50/0x50 [ 1526.713540][T12587] ? do_recvmmsg+0x6d0/0x6d0 [ 1526.718133][T12587] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1526.724114][T12587] ? _parse_integer+0x132/0x180 01:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1526.728976][T12587] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1526.734975][T12587] ___sys_sendmsg+0xf3/0x170 [ 1526.739576][T12587] ? sendmsg_copy_msghdr+0x160/0x160 [ 1526.744864][T12587] ? __fget_files+0x272/0x400 [ 1526.749551][T12587] ? lock_downgrade+0x820/0x820 [ 1526.754406][T12587] ? find_held_lock+0x2d/0x110 [ 1526.759175][T12587] ? ksys_write+0x212/0x250 [ 1526.763691][T12587] ? __fget_files+0x294/0x400 [ 1526.768371][T12587] ? __fget_light+0xea/0x280 [ 1526.772969][T12587] __sys_sendmsg+0xe5/0x1b0 [ 1526.777470][T12587] ? __sys_sendmsg_sock+0xb0/0xb0 01:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1526.782505][T12587] ? do_syscall_64+0x1c/0xe0 [ 1526.787102][T12587] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1526.793084][T12587] do_syscall_64+0x60/0xe0 [ 1526.797502][T12587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1526.803392][T12587] RIP: 0033:0x45cba9 [ 1526.807275][T12587] Code: Bad RIP value. [ 1526.811335][T12587] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1526.819743][T12587] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 01:46:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xe, 0x0}}], 0x1, 0x0) [ 1526.827711][T12587] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1526.835678][T12587] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1526.843644][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1526.851611][T12587] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 [ 1526.901902][T15763] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1527.017022][T12589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1527.206077][T15763] usb 3-1: device descriptor read/64, error 18 [ 1527.596029][T15763] usb 3-1: device descriptor read/64, error 18 [ 1527.865854][T15763] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1528.135951][T15763] usb 3-1: device descriptor read/64, error 18 [ 1528.525789][T15763] usb 3-1: device descriptor read/64, error 18 [ 1528.646686][T15763] usb usb3-port1: attempt power cycle [ 1529.355814][T15763] usb 3-1: new high-speed USB device number 93 using dummy_hcd 01:47:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x11, 0x0}}], 0x1, 0x0) 01:47:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:47:00 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'geneve0\x00', 0x7f}) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1529.525796][T15763] usb 3-1: device descriptor read/8, error -61 [ 1529.623933][T12765] FAULT_INJECTION: forcing a failure. [ 1529.623933][T12765] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.688892][T12765] CPU: 0 PID: 12765 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1529.697589][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.707643][T12765] Call Trace: [ 1529.710940][T12765] dump_stack+0x18f/0x20d [ 1529.715279][T12765] should_fail.cold+0x5/0x14 [ 1529.719876][T12765] should_failslab+0x5/0xf [ 1529.724300][T12765] kmem_cache_alloc+0x40/0x3b0 [ 1529.729073][T12765] skb_clone+0x14f/0x3c0 [ 1529.733325][T12765] netlink_deliver_tap+0x990/0xb70 [ 1529.735777][T15763] usb 3-1: device descriptor read/8, error -71 [ 1529.738447][T12765] netlink_unicast+0x5e5/0x7d0 [ 1529.738469][T12765] ? netlink_attachskb+0x810/0x810 [ 1529.738485][T12765] ? _copy_from_iter_full+0x247/0x890 [ 1529.738499][T12765] ? __phys_addr+0x9a/0x110 [ 1529.738516][T12765] ? __phys_addr_symbol+0x2c/0x70 [ 1529.769337][T12765] ? __check_object_size+0x171/0x3e4 [ 1529.774629][T12765] netlink_sendmsg+0x856/0xd90 [ 1529.779407][T12765] ? netlink_unicast+0x7d0/0x7d0 [ 1529.784359][T12765] ? netlink_unicast+0x7d0/0x7d0 01:47:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x30, 0x0}}], 0x1, 0x0) [ 1529.789299][T12765] sock_sendmsg+0xcf/0x120 [ 1529.793720][T12765] ____sys_sendmsg+0x6e8/0x810 [ 1529.798485][T12765] ? kernel_sendmsg+0x50/0x50 [ 1529.803159][T12765] ? do_recvmmsg+0x6d0/0x6d0 [ 1529.807753][T12765] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1529.813736][T12765] ? _parse_integer+0x132/0x180 [ 1529.818590][T12765] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1529.824570][T12765] ___sys_sendmsg+0xf3/0x170 [ 1529.829163][T12765] ? sendmsg_copy_msghdr+0x160/0x160 [ 1529.834447][T12765] ? __fget_files+0x272/0x400 01:47:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000000)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r5, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x4}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1529.839131][T12765] ? lock_downgrade+0x820/0x820 [ 1529.843983][T12765] ? find_held_lock+0x2d/0x110 [ 1529.848767][T12765] ? ksys_write+0x212/0x250 [ 1529.853279][T12765] ? __fget_files+0x294/0x400 [ 1529.857965][T12765] ? __fget_light+0xea/0x280 [ 1529.862559][T12765] __sys_sendmsg+0xe5/0x1b0 [ 1529.867062][T12765] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1529.872102][T12765] ? do_syscall_64+0x1c/0xe0 [ 1529.876693][T12765] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1529.882678][T12765] do_syscall_64+0x60/0xe0 [ 1529.887093][T12765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1529.892979][T12765] RIP: 0033:0x45cba9 [ 1529.896864][T12765] Code: Bad RIP value. [ 1529.900923][T12765] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.909331][T12765] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 [ 1529.917301][T12765] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1529.925269][T12765] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1529.933322][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1529.941293][T12765] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 01:47:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:47:01 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x60, 0x0}}], 0x1, 0x0) 01:47:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x29, 0x21, 0x10, 0x3, 0x8, 0x2, 0x0, 0xfffff800}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090788000"], 0x0) [ 1530.225696][T15763] usb 3-1: new high-speed USB device number 94 using dummy_hcd 01:47:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1530.356912][T12881] FAULT_INJECTION: forcing a failure. [ 1530.356912][T12881] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.401921][T12881] CPU: 0 PID: 12881 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1530.410638][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.415936][T15763] usb 3-1: device descriptor read/8, error -61 [ 1530.420690][T12881] Call Trace: [ 1530.420712][T12881] dump_stack+0x18f/0x20d [ 1530.420734][T12881] should_fail.cold+0x5/0x14 [ 1530.439036][T12881] should_failslab+0x5/0xf [ 1530.443461][T12881] kmem_cache_alloc_node+0x257/0x3c0 [ 1530.448758][T12881] __alloc_skb+0x71/0x550 [ 1530.453101][T12881] netlink_dump+0x68a/0xf60 [ 1530.457621][T12881] ? netlink_insert+0x1670/0x1670 [ 1530.462650][T12881] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1530.468203][T12881] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1530.474532][T12881] ? lock_downgrade+0x820/0x820 [ 1530.479742][T12881] __netlink_dump_start+0x643/0x900 [ 1530.484949][T12881] rtnetlink_rcv_msg+0x70f/0xad0 [ 1530.489946][T12881] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1530.494984][T12881] ? rtnetlink_put_metrics+0x510/0x510 [ 1530.500448][T12881] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1530.505477][T12881] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1530.511456][T12881] ? trace_hardirqs_on+0x5f/0x220 [ 1530.516481][T12881] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1530.521604][T12881] netlink_rcv_skb+0x15a/0x430 [ 1530.526368][T12881] ? rtnetlink_put_metrics+0x510/0x510 [ 1530.531827][T12881] ? netlink_ack+0xa10/0xa10 [ 1530.536445][T12881] netlink_unicast+0x533/0x7d0 [ 1530.541217][T12881] ? netlink_attachskb+0x810/0x810 [ 1530.546334][T12881] ? _copy_from_iter_full+0x247/0x890 [ 1530.551708][T12881] ? __phys_addr+0x9a/0x110 [ 1530.556211][T12881] ? __phys_addr_symbol+0x2c/0x70 [ 1530.561233][T12881] ? __check_object_size+0x171/0x3e4 [ 1530.566522][T12881] netlink_sendmsg+0x856/0xd90 [ 1530.571289][T12881] ? netlink_unicast+0x7d0/0x7d0 [ 1530.576235][T12881] ? netlink_unicast+0x7d0/0x7d0 [ 1530.581179][T12881] sock_sendmsg+0xcf/0x120 [ 1530.585608][T12881] ____sys_sendmsg+0x6e8/0x810 [ 1530.590377][T12881] ? kernel_sendmsg+0x50/0x50 [ 1530.595058][T12881] ? do_recvmmsg+0x6d0/0x6d0 [ 1530.599654][T12881] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1530.605635][T12881] ? _parse_integer+0x132/0x180 [ 1530.610491][T12881] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1530.616475][T12881] ___sys_sendmsg+0xf3/0x170 [ 1530.621069][T12881] ? sendmsg_copy_msghdr+0x160/0x160 [ 1530.626353][T12881] ? __fget_files+0x272/0x400 [ 1530.631035][T12881] ? lock_downgrade+0x820/0x820 [ 1530.635886][T12881] ? find_held_lock+0x2d/0x110 [ 1530.640656][T12881] ? ksys_write+0x212/0x250 [ 1530.645161][T12881] ? __fget_files+0x294/0x400 [ 1530.649843][T12881] ? __fget_light+0xea/0x280 [ 1530.654441][T12881] __sys_sendmsg+0xe5/0x1b0 [ 1530.658942][T12881] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1530.663980][T12881] ? do_syscall_64+0x1c/0xe0 [ 1530.668575][T12881] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1530.674567][T12881] do_syscall_64+0x60/0xe0 [ 1530.679087][T12881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1530.684974][T12881] RIP: 0033:0x45cba9 [ 1530.689075][T12881] Code: Bad RIP value. [ 1530.693135][T12881] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1530.701544][T12881] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 [ 1530.709512][T12881] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1530.717482][T12881] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1530.725447][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1530.733414][T12881] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 [ 1530.836110][T15763] usb 3-1: device descriptor read/8, error -61 [ 1530.955890][T15763] usb usb3-port1: unable to enumerate USB device 01:47:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x1f4, 0x0}}], 0x1, 0x0) 01:47:03 executing program 0 (fault-call:3 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@empty}, &(0x7f0000000080)=0x14) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x9b1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r8, 0xe2, "df71a11b4e8f176b830bd5b965964c1cbce90231689adce36f795d843e19154c81cc4e142d2ffd2afb478bdb780140c96f896b33b5fb384a1cb402aeafc217fa4abc58c7ff6f70b127057bf81d473fec63a7a06a14de9fa9158bd92138b2c05050626cce64ba2a04242a03aba8fb29872a0e00fbe71cb7a57e20ac64141aa7498effdd550f60fcde507468c59aa483f25d8b6639d18dda8464921216754a3817264ddfc7e6ea45ea4e3f976805c8cf0a378350ab5c1475c58f352a3d0f1e2b1b1208172afda8242d24b5775637edd10b2c9fe036a37e8af4b5d8d506697bb880d9ac"}, &(0x7f00000000c0)=0xea) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 01:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:47:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1532.674415][T12952] FAULT_INJECTION: forcing a failure. [ 1532.674415][T12952] name failslab, interval 1, probability 0, space 0, times 0 01:47:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1532.738229][T12952] CPU: 1 PID: 12952 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1532.746932][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.756986][T12952] Call Trace: [ 1532.760283][T12952] dump_stack+0x18f/0x20d [ 1532.764620][T12952] should_fail.cold+0x5/0x14 [ 1532.769219][T12952] should_failslab+0x5/0xf [ 1532.773638][T12952] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1532.779459][T12952] __kmalloc_node_track_caller+0x38/0x60 [ 1532.785094][T12952] __alloc_skb+0xae/0x550 [ 1532.789436][T12952] netlink_dump+0x68a/0xf60 [ 1532.793949][T12952] ? netlink_insert+0x1670/0x1670 [ 1532.798979][T12952] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1532.804534][T12952] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1532.810863][T12952] ? lock_downgrade+0x820/0x820 [ 1532.815721][T12952] __netlink_dump_start+0x643/0x900 [ 1532.820925][T12952] rtnetlink_rcv_msg+0x70f/0xad0 [ 1532.825864][T12952] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1532.830897][T12952] ? rtnetlink_put_metrics+0x510/0x510 [ 1532.836361][T12952] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1532.841395][T12952] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1532.846698][T12952] netlink_rcv_skb+0x15a/0x430 [ 1532.851465][T12952] ? rtnetlink_put_metrics+0x510/0x510 [ 1532.856943][T12952] ? netlink_ack+0xa10/0xa10 [ 1532.861549][T12952] netlink_unicast+0x533/0x7d0 [ 1532.866321][T12952] ? netlink_attachskb+0x810/0x810 [ 1532.871438][T12952] ? _copy_from_iter_full+0x247/0x890 [ 1532.876809][T12952] ? __phys_addr+0x9a/0x110 [ 1532.881316][T12952] ? __phys_addr_symbol+0x2c/0x70 [ 1532.886344][T12952] ? __check_object_size+0x171/0x3e4 [ 1532.891630][T12952] netlink_sendmsg+0x856/0xd90 [ 1532.896404][T12952] ? netlink_unicast+0x7d0/0x7d0 [ 1532.901351][T12952] ? netlink_unicast+0x7d0/0x7d0 [ 1532.906292][T12952] sock_sendmsg+0xcf/0x120 [ 1532.910707][T12952] ____sys_sendmsg+0x6e8/0x810 [ 1532.915478][T12952] ? kernel_sendmsg+0x50/0x50 [ 1532.920153][T12952] ? do_recvmmsg+0x6d0/0x6d0 [ 1532.924747][T12952] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1532.930728][T12952] ? _parse_integer+0x132/0x180 [ 1532.935580][T12952] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1532.941563][T12952] ___sys_sendmsg+0xf3/0x170 [ 1532.946157][T12952] ? sendmsg_copy_msghdr+0x160/0x160 [ 1532.951439][T12952] ? __fget_files+0x272/0x400 [ 1532.956117][T12952] ? lock_downgrade+0x820/0x820 [ 1532.960971][T12952] ? find_held_lock+0x2d/0x110 [ 1532.965734][T12952] ? ksys_write+0x212/0x250 [ 1532.970244][T12952] ? __fget_files+0x294/0x400 [ 1532.974938][T12952] ? __fget_light+0xea/0x280 [ 1532.979537][T12952] __sys_sendmsg+0xe5/0x1b0 [ 1532.984042][T12952] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1532.989081][T12952] ? do_syscall_64+0x1c/0xe0 [ 1532.993672][T12952] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1532.999657][T12952] do_syscall_64+0x60/0xe0 [ 1533.004077][T12952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1533.009965][T12952] RIP: 0033:0x45cba9 [ 1533.013849][T12952] Code: Bad RIP value. [ 1533.017910][T12952] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.026319][T12952] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 [ 1533.034402][T12952] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1533.042370][T12952] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1533.050341][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1533.058331][T12952] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 01:47:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x3e8, 0x0}}], 0x1, 0x0) 01:47:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1533.398123][ T7550] usb 3-1: new high-speed USB device number 95 using dummy_hcd 01:47:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000180)={0x64, "cff09ade72e6a66fb67b13a642932e8233bbc36867e17c72dea5d7909cc12bf7898056301e6313192418af40419ed03abddb0ec51dc57239049ac9b4c0d0d1d4"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaabaaaaaaaaaaaaaaaaabb0890ad009e5c5e34c82cd76700450000280000000000dd9078ac141400ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cbd9c7558440e4902000a08000000"], 0x0) 01:47:04 executing program 0 (fault-call:3 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:04 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1533.632341][T13107] FAULT_INJECTION: forcing a failure. [ 1533.632341][T13107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1533.645572][T13107] CPU: 1 PID: 13107 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1533.654239][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1533.664292][T13107] Call Trace: [ 1533.667590][T13107] dump_stack+0x18f/0x20d [ 1533.671925][T13107] should_fail.cold+0x5/0x14 [ 1533.676523][T13107] __alloc_pages_nodemask+0x1a3/0x930 [ 1533.681896][T13107] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1533.687881][T13107] ? do_syscall_64+0x60/0xe0 [ 1533.692470][T13107] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1533.698548][T13107] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1533.705305][T13107] ? lock_acquire+0x1f1/0xad0 [ 1533.709968][T13107] ? fs_reclaim_acquire+0xf/0x40 [ 1533.714901][T13107] ? find_held_lock+0x2d/0x110 [ 1533.719674][T13107] cache_grow_begin+0x8c/0xb20 [ 1533.724449][T13107] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1533.729914][T13107] cache_alloc_refill+0x27b/0x340 [ 1533.734941][T13107] ? lockdep_hardirqs_off+0x66/0xa0 [ 1533.740148][T13107] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 1533.745968][T13107] __kmalloc_node_track_caller+0x38/0x60 [ 1533.751604][T13107] __alloc_skb+0xae/0x550 [ 1533.755940][T13107] netlink_dump+0x68a/0xf60 [ 1533.760447][T13107] ? netlink_insert+0x1670/0x1670 [ 1533.765461][T13107] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1533.770984][T13107] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1533.777311][T13107] ? lock_downgrade+0x820/0x820 [ 1533.782152][T13107] __netlink_dump_start+0x643/0x900 [ 1533.787342][T13107] rtnetlink_rcv_msg+0x70f/0xad0 [ 1533.792280][T13107] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1533.797290][T13107] ? rtnetlink_put_metrics+0x510/0x510 [ 1533.802742][T13107] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1533.807755][T13107] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1533.813018][T13107] netlink_rcv_skb+0x15a/0x430 [ 1533.817757][T13107] ? rtnetlink_put_metrics+0x510/0x510 [ 1533.823194][T13107] ? netlink_ack+0xa10/0xa10 [ 1533.827766][T13107] netlink_unicast+0x533/0x7d0 [ 1533.832506][T13107] ? netlink_attachskb+0x810/0x810 [ 1533.837593][T13107] ? _copy_from_iter_full+0x247/0x890 [ 1533.842941][T13107] ? __phys_addr+0x9a/0x110 [ 1533.847420][T13107] ? __phys_addr_symbol+0x2c/0x70 [ 1533.852421][T13107] ? __check_object_size+0x171/0x3e4 [ 1533.857682][T13107] netlink_sendmsg+0x856/0xd90 [ 1533.862427][T13107] ? netlink_unicast+0x7d0/0x7d0 [ 1533.867347][T13107] ? netlink_unicast+0x7d0/0x7d0 [ 1533.872280][T13107] sock_sendmsg+0xcf/0x120 [ 1533.876674][T13107] ____sys_sendmsg+0x6e8/0x810 [ 1533.881413][T13107] ? kernel_sendmsg+0x50/0x50 [ 1533.886064][T13107] ? do_recvmmsg+0x6d0/0x6d0 [ 1533.890633][T13107] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1533.896588][T13107] ? _parse_integer+0x132/0x180 [ 1533.901414][T13107] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1533.907370][T13107] ___sys_sendmsg+0xf3/0x170 [ 1533.911954][T13107] ? sendmsg_copy_msghdr+0x160/0x160 [ 1533.917229][T13107] ? __fget_files+0x272/0x400 [ 1533.921895][T13107] ? lock_downgrade+0x820/0x820 [ 1533.926730][T13107] ? find_held_lock+0x2d/0x110 [ 1533.931470][T13107] ? ksys_write+0x212/0x250 [ 1533.935949][T13107] ? __fget_files+0x294/0x400 [ 1533.940600][T13107] ? __fget_light+0xea/0x280 [ 1533.945178][T13107] __sys_sendmsg+0xe5/0x1b0 [ 1533.949680][T13107] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1533.954696][T13107] ? do_syscall_64+0x1c/0xe0 [ 1533.959264][T13107] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1533.965223][T13107] do_syscall_64+0x60/0xe0 [ 1533.969622][T13107] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1533.975622][T13107] RIP: 0033:0x45cba9 [ 1533.979495][T13107] Code: Bad RIP value. [ 1533.983558][T13107] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.991962][T13107] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 [ 1533.999913][T13107] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1534.007867][T13107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1534.015815][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1534.023760][T13107] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 [ 1534.037026][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1534.425448][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1534.695364][ T7550] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1534.965345][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1535.355783][ T7550] usb 3-1: device descriptor read/64, error 18 [ 1535.475717][ T7550] usb usb3-port1: attempt power cycle 01:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:47:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) close(r0) 01:47:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x534, 0x0}}], 0x1, 0x0) 01:47:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f401d69f90780000"], 0x0) 01:47:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:06 executing program 0 (fault-call:3 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1535.760419][T13131] FAULT_INJECTION: forcing a failure. [ 1535.760419][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.810606][T13131] CPU: 1 PID: 13131 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1535.819392][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.829444][T13131] Call Trace: [ 1535.832744][T13131] dump_stack+0x18f/0x20d [ 1535.837087][T13131] should_fail.cold+0x5/0x14 [ 1535.841690][T13131] should_failslab+0x5/0xf [ 1535.846110][T13131] kmem_cache_alloc+0x40/0x3b0 [ 1535.850884][T13131] skb_clone+0x14f/0x3c0 [ 1535.855141][T13131] netlink_deliver_tap+0x990/0xb70 [ 1535.860438][T13131] netlink_dump+0xc1b/0xf60 [ 1535.864946][T13131] ? netlink_insert+0x1670/0x1670 [ 1535.870069][T13131] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1535.875642][T13131] ? __rhashtable_lookup.constprop.0+0x660/0x660 [ 1535.881987][T13131] ? lock_downgrade+0x820/0x820 [ 1535.886849][T13131] __netlink_dump_start+0x643/0x900 [ 1535.892055][T13131] rtnetlink_rcv_msg+0x70f/0xad0 [ 1535.896996][T13131] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1535.902027][T13131] ? rtnetlink_put_metrics+0x510/0x510 [ 1535.907490][T13131] ? fib_nl_delrule+0x1aa0/0x1aa0 [ 1535.912521][T13131] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1535.917817][T13131] netlink_rcv_skb+0x15a/0x430 [ 1535.922586][T13131] ? rtnetlink_put_metrics+0x510/0x510 [ 1535.928050][T13131] ? netlink_ack+0xa10/0xa10 [ 1535.932655][T13131] netlink_unicast+0x533/0x7d0 [ 1535.937423][T13131] ? netlink_attachskb+0x810/0x810 [ 1535.942534][T13131] ? _copy_from_iter_full+0x247/0x890 [ 1535.947909][T13131] ? __phys_addr+0x9a/0x110 [ 1535.952410][T13131] ? __phys_addr_symbol+0x2c/0x70 [ 1535.957440][T13131] ? __check_object_size+0x171/0x3e4 [ 1535.962730][T13131] netlink_sendmsg+0x856/0xd90 [ 1535.967499][T13131] ? netlink_unicast+0x7d0/0x7d0 [ 1535.972446][T13131] ? netlink_unicast+0x7d0/0x7d0 [ 1535.977386][T13131] sock_sendmsg+0xcf/0x120 [ 1535.981807][T13131] ____sys_sendmsg+0x6e8/0x810 [ 1535.986576][T13131] ? kernel_sendmsg+0x50/0x50 [ 1535.991250][T13131] ? do_recvmmsg+0x6d0/0x6d0 [ 1535.995845][T13131] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1536.001826][T13131] ? _parse_integer+0x132/0x180 [ 1536.006680][T13131] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1536.012659][T13131] ___sys_sendmsg+0xf3/0x170 [ 1536.017253][T13131] ? sendmsg_copy_msghdr+0x160/0x160 [ 1536.022538][T13131] ? __fget_files+0x272/0x400 [ 1536.027224][T13131] ? lock_downgrade+0x820/0x820 [ 1536.032078][T13131] ? find_held_lock+0x2d/0x110 [ 1536.036841][T13131] ? ksys_write+0x212/0x250 [ 1536.041349][T13131] ? __fget_files+0x294/0x400 [ 1536.046034][T13131] ? __fget_light+0xea/0x280 [ 1536.050633][T13131] __sys_sendmsg+0xe5/0x1b0 [ 1536.055141][T13131] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1536.060179][T13131] ? do_syscall_64+0x1c/0xe0 [ 1536.064778][T13131] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1536.070768][T13131] do_syscall_64+0x60/0xe0 [ 1536.075224][T13131] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1536.081115][T13131] RIP: 0033:0x45cba9 [ 1536.085000][T13131] Code: Bad RIP value. [ 1536.089059][T13131] RSP: 002b:00007f16f950bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.097469][T13131] RAX: ffffffffffffffda RBX: 0000000000504380 RCX: 000000000045cba9 01:47:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x700, 0x0}}], 0x1, 0x0) [ 1536.105440][T13131] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1536.113409][T13131] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1536.121375][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1536.129349][T13131] R13: 0000000000000a89 R14: 00000000004cd5e1 R15: 00007f16f950c6d4 01:47:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000800000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000091) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1536.535264][ T7550] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1536.588676][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:47:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x900, 0x0}}], 0x1, 0x0) 01:47:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) close(r0) 01:47:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1536.733208][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1536.743556][ T7550] usb 3-1: device descriptor read/8, error -61 01:47:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000002c0)={{0x1, 0x0, @identifier="3a5df865eb641c8babe1948c4dbc67b5"}}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000140)=""/183, &(0x7f0000000080)=0xb7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000300), 0x4) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000340)={0x10001, 0x6, 0x3, 0x9, 0x10000, 0x80000000}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x5f, "8071cf5d0d8ebfc1f44219a723d9ca4e080965f4175be58398c2f6ed9544faae91caf935ba4921a9967357bf358e5a1be660adbc589c5b2a33b74b87ca2c322ef5c47317cc07eda7fa2e5b6d22498539712aab8069cd43a31d653a0e72df48"}, &(0x7f00000000c0)=0x83) [ 1537.026358][ T7550] usb 3-1: device descriptor read/8, error -61 [ 1537.295263][ T7550] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1537.465811][ T7550] usb 3-1: device descriptor read/8, error -61 [ 1537.735267][ T7550] usb 3-1: device descriptor read/8, error -61 [ 1537.856204][ T7550] usb usb3-port1: unable to enumerate USB device 01:47:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) close(r0) 01:47:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0) 01:47:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:47:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000000)={0x3, 0x100, 0x10001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000000c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRESDEC=r8], 0x0) 01:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xbb8, 0x0}}], 0x1, 0x0) 01:47:09 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(r0) 01:47:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7ff) syz_emit_ethernet(0x92, &(0x7f0000000140)={@dev={[], 0x1c}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x31, 0x84, 0x67, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x2, 0x0, 0x0, 0x1, {[@timestamp={0x8, 0xa, 0x6, 0x325b}, @generic={0x8, 0x11, "c77c711c30b8cccab64b010000007c"}, @generic={0xfe, 0x2}, @fastopen={0x22, 0x7, "211c050418"}, @generic={0x22, 0xa, "fca7da5ca46cbc04"}, @nop, @exp_fastopen={0xfe, 0xc, 0xf989, "e991da4e0e89b69c"}, @mptcp=@ack={0x1e, 0x12, 0x20, 0x4, "26489bf6c146e3795ffe2a531aa0"}, @generic={0x3, 0xf, "11da5cf4ef70a22687aef03b21"}]}}}}}}}, 0x0) 01:47:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xe00, 0x0}}], 0x1, 0x0) 01:47:10 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(r0) 01:47:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1539.215073][ T7550] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1539.515736][ T7550] usb 3-1: no configurations [ 1539.520481][ T7550] usb 3-1: can't read configurations, error -22 [ 1539.715278][ T7550] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1539.995476][ T7550] usb 3-1: no configurations [ 1540.000138][ T7550] usb 3-1: can't read configurations, error -22 [ 1540.010598][ T7550] usb usb3-port1: attempt power cycle [ 1540.724996][ T7550] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1540.855421][ T7550] usb 3-1: no configurations [ 1540.860111][ T7550] usb 3-1: can't read configurations, error -22 [ 1541.014935][ T7550] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1541.145050][ T7550] usb 3-1: no configurations [ 1541.149679][ T7550] usb 3-1: can't read configurations, error -22 [ 1541.156287][ T7550] usb usb3-port1: unable to enumerate USB device 01:47:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:12 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) close(r0) 01:47:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(r0) 01:47:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x1100, 0x0}}], 0x1, 0x0) 01:47:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 01:47:12 executing program 4 (fault-call:7 fault-nth:0): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:47:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) close(r0) 01:47:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x2000, 0x0}}], 0x1, 0x0) 01:47:13 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) close(r0) [ 1542.153835][T13697] FAULT_INJECTION: forcing a failure. [ 1542.153835][T13697] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.276537][T13697] CPU: 0 PID: 13697 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 1542.285236][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.294866][ T2864] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1542.295284][T13697] Call Trace: [ 1542.295313][T13697] dump_stack+0x18f/0x20d [ 1542.295333][T13697] should_fail.cold+0x5/0x14 [ 1542.295354][T13697] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1542.295374][T13697] should_failslab+0x5/0xf [ 1542.325245][T13697] __kmalloc+0x27d/0x340 [ 1542.329523][T13697] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1542.335075][T13697] tomoyo_realpath_from_path+0xc3/0x620 [ 1542.340628][T13697] ? tomoyo_profile+0x42/0x50 [ 1542.345306][T13697] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1542.350766][T13697] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1542.356404][T13697] ? tomoyo_execute_permission+0x470/0x470 [ 1542.362218][T13697] ? lock_acquire+0x1f1/0xad0 [ 1542.366892][T13697] ? delayed_put_pid+0x30/0x30 [ 1542.371661][T13697] ? find_held_lock+0x2d/0x110 [ 1542.376445][T13697] ? sched_clock+0x2a/0x40 [ 1542.380862][T13697] ? sched_clock_cpu+0x18/0x1b0 [ 1542.385713][T13697] ? lock_is_held_type+0xb0/0xe0 [ 1542.390655][T13697] ? __fget_files+0x294/0x400 [ 1542.395346][T13697] security_file_ioctl+0x50/0xb0 [ 1542.400288][T13697] ksys_ioctl+0x50/0x180 [ 1542.404532][T13697] __x64_sys_ioctl+0x6f/0xb0 [ 1542.409123][T13697] do_syscall_64+0x60/0xe0 [ 1542.413548][T13697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1542.419439][T13697] RIP: 0033:0x45cba9 [ 1542.423325][T13697] Code: Bad RIP value. 01:47:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1542.427386][T13697] RSP: 002b:00007efe389aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.435793][T13697] RAX: ffffffffffffffda RBX: 00000000004e2fc0 RCX: 000000000045cba9 [ 1542.443761][T13697] RDX: 0000000020000080 RSI: 000000000000127f RDI: 0000000000000003 [ 1542.451838][T13697] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1542.459809][T13697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1542.467862][T13697] R13: 000000000000023a R14: 00000000004c49c1 R15: 00007efe389ab6d4 [ 1542.575458][ T2864] usb 3-1: no configurations [ 1542.580092][ T2864] usb 3-1: can't read configurations, error -22 [ 1542.774812][ T2864] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1542.785598][T13697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1543.054904][ T2864] usb 3-1: no configurations [ 1543.060063][ T2864] usb 3-1: can't read configurations, error -22 [ 1543.067560][ T2864] usb usb3-port1: attempt power cycle [ 1543.774745][ T2864] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1543.905209][ T2864] usb 3-1: no configurations [ 1543.909935][ T2864] usb 3-1: can't read configurations, error -22 [ 1544.064737][ T2864] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1544.196264][ T2864] usb 3-1: no configurations [ 1544.200935][ T2864] usb 3-1: can't read configurations, error -22 [ 1544.208306][ T2864] usb usb3-port1: unable to enumerate USB device 01:47:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x3000, 0x0}}], 0x1, 0x0) 01:47:15 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) close(r0) 01:47:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:15 executing program 4 (fault-call:7 fault-nth:1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 01:47:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1545.047816][T13827] FAULT_INJECTION: forcing a failure. [ 1545.047816][T13827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.061032][T13827] CPU: 1 PID: 13827 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 1545.069712][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.079772][T13827] Call Trace: [ 1545.083077][T13827] dump_stack+0x18f/0x20d [ 1545.087417][T13827] should_fail.cold+0x5/0x14 [ 1545.092021][T13827] __alloc_pages_nodemask+0x1a3/0x930 [ 1545.097406][T13827] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1545.104184][T13827] cache_grow_begin+0x8c/0xb20 [ 1545.108955][T13827] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1545.114427][T13827] cache_alloc_refill+0x27b/0x340 [ 1545.119457][T13827] ? lockdep_hardirqs_off+0x66/0xa0 [ 1545.124670][T13827] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1545.130392][T13827] __kmalloc+0x319/0x340 [ 1545.134655][T13827] tomoyo_realpath_from_path+0xc3/0x620 [ 1545.140206][T13827] ? tomoyo_profile+0x42/0x50 [ 1545.144891][T13827] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1545.150352][T13827] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1545.155996][T13827] ? tomoyo_execute_permission+0x470/0x470 [ 1545.161805][T13827] ? lock_acquire+0x1f1/0xad0 [ 1545.166480][T13827] ? delayed_put_pid+0x30/0x30 [ 1545.171273][T13827] ? find_held_lock+0x2d/0x110 [ 1545.176067][T13827] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1545.181610][T13827] ? lock_is_held_type+0xb0/0xe0 [ 1545.186559][T13827] ? __fget_files+0x294/0x400 [ 1545.191246][T13827] security_file_ioctl+0x50/0xb0 [ 1545.196196][T13827] ksys_ioctl+0x50/0x180 [ 1545.200447][T13827] __x64_sys_ioctl+0x6f/0xb0 [ 1545.205048][T13827] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1545.210166][T13827] do_syscall_64+0x60/0xe0 [ 1545.214583][T13827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1545.220469][T13827] RIP: 0033:0x45cba9 [ 1545.224353][T13827] Code: Bad RIP value. [ 1545.228413][T13827] RSP: 002b:00007efe389aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.236824][T13827] RAX: ffffffffffffffda RBX: 00000000004e2fc0 RCX: 000000000045cba9 01:47:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) close(r0) 01:47:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 01:47:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x3405, 0x0}}], 0x1, 0x0) [ 1545.244792][T13827] RDX: 0000000020000080 RSI: 000000000000127f RDI: 0000000000000003 [ 1545.252763][T13827] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1545.260736][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1545.268710][T13827] R13: 000000000000023a R14: 00000000004c49c1 R15: 00007efe389ab6d4 01:47:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) close(r0) [ 1545.434819][ T2864] usb 3-1: new high-speed USB device number 107 using dummy_hcd 01:47:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x6000, 0x0}}], 0x1, 0x0) [ 1545.715422][ T2864] usb 3-1: no configurations [ 1545.720081][ T2864] usb 3-1: can't read configurations, error -22 [ 1545.904675][ T2864] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1546.191266][ T2864] usb 3-1: no configurations [ 1546.201954][ T2864] usb 3-1: can't read configurations, error -22 [ 1546.272493][ T2864] usb usb3-port1: attempt power cycle [ 1546.984571][ T2864] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1547.114979][ T2864] usb 3-1: no configurations [ 1547.119590][ T2864] usb 3-1: can't read configurations, error -22 [ 1547.274489][ T2864] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1547.404573][ T2864] usb 3-1: no configurations [ 1547.409805][ T2864] usb 3-1: can't read configurations, error -22 [ 1547.416540][ T2864] usb usb3-port1: unable to enumerate USB device 01:47:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) close(r0) 01:47:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xb80b, 0x0}}], 0x1, 0x0) 01:47:18 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) [ 1548.027328][T14123] FAULT_INJECTION: forcing a failure. [ 1548.027328][T14123] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.049439][T14123] CPU: 1 PID: 14123 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1548.058139][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.068190][T14123] Call Trace: [ 1548.071484][T14123] dump_stack+0x18f/0x20d [ 1548.075822][T14123] should_fail.cold+0x5/0x14 [ 1548.080429][T14123] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1548.086149][T14123] should_failslab+0x5/0xf [ 1548.090567][T14123] __kmalloc+0x27d/0x340 [ 1548.094819][T14123] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1548.100375][T14123] tomoyo_realpath_from_path+0xc3/0x620 [ 1548.105924][T14123] ? tomoyo_profile+0x42/0x50 [ 1548.110605][T14123] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1548.116067][T14123] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1548.121705][T14123] ? tomoyo_execute_permission+0x470/0x470 01:47:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x2, &(0x7f0000000080)={0x0, 0x882200}) [ 1548.127519][T14123] ? __schedule+0x8e9/0x1eb0 [ 1548.132120][T14123] ? find_held_lock+0x2d/0x110 [ 1548.136915][T14123] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1548.142453][T14123] ? lock_is_held_type+0xb0/0xe0 [ 1548.147392][T14123] ? __fget_files+0x294/0x400 [ 1548.152083][T14123] security_file_ioctl+0x50/0xb0 [ 1548.157026][T14123] ksys_ioctl+0x50/0x180 [ 1548.161272][T14123] __x64_sys_ioctl+0x6f/0xb0 [ 1548.165843][T14123] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1548.170933][T14123] do_syscall_64+0x60/0xe0 [ 1548.175350][T14123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1548.181216][T14123] RIP: 0033:0x45cba9 [ 1548.185092][T14123] Code: Bad RIP value. [ 1548.189131][T14123] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.197518][T14123] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1548.205466][T14123] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1548.213416][T14123] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 01:47:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xe803, 0x0}}], 0x1, 0x0) 01:47:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x10, &(0x7f0000000080)={0x0, 0x882200}) [ 1548.221362][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1548.229309][T14123] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) close(r0) 01:47:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1548.370001][T14123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1548.556222][ T7550] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1548.842033][ T7550] usb 3-1: no configurations [ 1548.860306][ T7550] usb 3-1: can't read configurations, error -22 [ 1549.034457][ T7550] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1549.324992][ T7550] usb 3-1: no configurations [ 1549.329618][ T7550] usb 3-1: can't read configurations, error -22 [ 1549.336483][ T7550] usb usb3-port1: attempt power cycle [ 1550.044306][ T7550] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1550.174475][ T7550] usb 3-1: no configurations [ 1550.179870][ T7550] usb 3-1: can't read configurations, error -22 [ 1550.334308][ T7550] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1550.464932][ T7550] usb 3-1: no configurations [ 1550.469562][ T7550] usb 3-1: can't read configurations, error -22 [ 1550.477024][ T7550] usb usb3-port1: unable to enumerate USB device 01:47:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xf401, 0x0}}], 0x1, 0x0) 01:47:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x301, &(0x7f0000000080)={0x0, 0x882200}) 01:47:21 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) close(r0) 01:47:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:21 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1551.099014][T14294] FAULT_INJECTION: forcing a failure. [ 1551.099014][T14294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1551.112247][T14294] CPU: 1 PID: 14294 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1551.120916][T14294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.130970][T14294] Call Trace: [ 1551.134269][T14294] dump_stack+0x18f/0x20d [ 1551.138613][T14294] should_fail.cold+0x5/0x14 [ 1551.143214][T14294] __alloc_pages_nodemask+0x1a3/0x930 01:47:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x34000, 0x0}}], 0x1, 0x0) [ 1551.148597][T14294] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1551.155376][T14294] cache_grow_begin+0x8c/0xb20 [ 1551.160147][T14294] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1551.165615][T14294] cache_alloc_refill+0x27b/0x340 [ 1551.170641][T14294] ? lockdep_hardirqs_off+0x66/0xa0 [ 1551.175847][T14294] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1551.181568][T14294] __kmalloc+0x319/0x340 [ 1551.185823][T14294] tomoyo_realpath_from_path+0xc3/0x620 [ 1551.191371][T14294] ? tomoyo_profile+0x42/0x50 [ 1551.196053][T14294] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1551.201513][T14294] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1551.207148][T14294] ? tomoyo_execute_permission+0x470/0x470 [ 1551.212958][T14294] ? lock_acquire+0x1f1/0xad0 [ 1551.217638][T14294] ? delayed_put_pid+0x30/0x30 [ 1551.222409][T14294] ? find_held_lock+0x2d/0x110 [ 1551.227196][T14294] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1551.232742][T14294] ? lock_is_held_type+0xb0/0xe0 [ 1551.237686][T14294] ? __fget_files+0x294/0x400 [ 1551.242373][T14294] security_file_ioctl+0x50/0xb0 01:47:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x0) 01:47:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x400300, 0x0}}], 0x1, 0x0) [ 1551.247318][T14294] ksys_ioctl+0x50/0x180 [ 1551.251566][T14294] __x64_sys_ioctl+0x6f/0xb0 [ 1551.256156][T14294] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1551.261274][T14294] do_syscall_64+0x60/0xe0 [ 1551.265705][T14294] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1551.271596][T14294] RIP: 0033:0x45cba9 [ 1551.275481][T14294] Code: Bad RIP value. [ 1551.279540][T14294] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.287948][T14294] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 01:47:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1551.295916][T14294] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1551.303889][T14294] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1551.311866][T14294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1551.319836][T14294] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) close(r0) 01:47:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x125d, &(0x7f0000000080)={0x0, 0x882200}) [ 1551.684248][T15763] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1551.984959][T15763] usb 3-1: no configurations [ 1551.989962][T15763] usb 3-1: can't read configurations, error -22 [ 1552.174161][T15763] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1552.454599][T15763] usb 3-1: no configurations [ 1552.459253][T15763] usb 3-1: can't read configurations, error -22 [ 1552.467426][T15763] usb usb3-port1: attempt power cycle [ 1553.174133][T15763] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1553.304794][T15763] usb 3-1: no configurations [ 1553.309436][T15763] usb 3-1: can't read configurations, error -22 [ 1553.464173][T15763] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1553.594162][T15763] usb 3-1: no configurations [ 1553.598817][T15763] usb 3-1: can't read configurations, error -22 [ 1553.606341][T15763] usb usb3-port1: unable to enumerate USB device 01:47:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:47:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xa2ffff, 0x0}}], 0x1, 0x0) 01:47:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x125e, &(0x7f0000000080)={0x0, 0x882200}) 01:47:25 executing program 3 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1554.232796][T14477] FAULT_INJECTION: forcing a failure. [ 1554.232796][T14477] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.276737][T14477] CPU: 0 PID: 14477 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1554.285430][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.295472][T14477] Call Trace: [ 1554.298743][T14477] dump_stack+0x18f/0x20d [ 1554.303069][T14477] should_fail.cold+0x5/0x14 [ 1554.307645][T14477] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1554.312996][T14477] should_failslab+0x5/0xf [ 1554.317396][T14477] __kmalloc+0x27d/0x340 [ 1554.321622][T14477] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1554.327323][T14477] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1554.332506][T14477] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1554.338208][T14477] tomoyo_encode+0x28/0x50 [ 1554.342604][T14477] tomoyo_realpath_from_path+0x186/0x620 [ 1554.348219][T14477] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1554.353665][T14477] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1554.359287][T14477] ? tomoyo_execute_permission+0x470/0x470 [ 1554.365074][T14477] ? lock_acquire+0x1f1/0xad0 [ 1554.369728][T14477] ? delayed_put_pid+0x30/0x30 [ 1554.374471][T14477] ? find_held_lock+0x2d/0x110 [ 1554.379225][T14477] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1554.384743][T14477] ? lock_is_held_type+0xb0/0xe0 [ 1554.389662][T14477] ? __fget_files+0x294/0x400 [ 1554.394320][T14477] security_file_ioctl+0x50/0xb0 [ 1554.399234][T14477] ksys_ioctl+0x50/0x180 [ 1554.403457][T14477] __x64_sys_ioctl+0x6f/0xb0 [ 1554.408023][T14477] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1554.413113][T14477] do_syscall_64+0x60/0xe0 [ 1554.417506][T14477] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1554.423372][T14477] RIP: 0033:0x45cba9 [ 1554.427238][T14477] Code: Bad RIP value. [ 1554.431278][T14477] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.439666][T14477] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1554.447614][T14477] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1554.455562][T14477] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1554.463509][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:47:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x1000000, 0x0}}], 0x1, 0x0) [ 1554.471471][T14477] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x125f, &(0x7f0000000080)={0x0, 0x882200}) 01:47:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:47:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1554.570013][T14477] ERROR: Out of memory at tomoyo_realpath_from_path. 01:47:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0xffffffffffffffff) 01:47:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x2000000, 0x0}}], 0x1, 0x0) [ 1554.764204][T19672] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1555.054637][T19672] usb 3-1: no configurations [ 1555.059265][T19672] usb 3-1: can't read configurations, error -22 [ 1555.264249][T19672] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1555.554601][T19672] usb 3-1: no configurations [ 1555.559398][T19672] usb 3-1: can't read configurations, error -22 [ 1555.567495][T19672] usb usb3-port1: attempt power cycle [ 1556.283883][T19672] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1556.424597][T19672] usb 3-1: no configurations [ 1556.429223][T19672] usb 3-1: can't read configurations, error -22 [ 1556.593873][T19672] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1556.753952][T19672] usb 3-1: no configurations [ 1556.758653][T19672] usb 3-1: can't read configurations, error -22 [ 1556.766278][T19672] usb usb3-port1: unable to enumerate USB device 01:47:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xec0, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1260, &(0x7f0000000080)={0x0, 0x882200}) 01:47:28 executing program 5 (fault-call:6 fault-nth:0): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:47:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x4000000, 0x0}}], 0x1, 0x0) 01:47:28 executing program 3 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1557.290246][T14657] FAULT_INJECTION: forcing a failure. [ 1557.290246][T14657] name failslab, interval 1, probability 0, space 0, times 0 01:47:28 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1557.352659][T14657] CPU: 1 PID: 14657 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1557.361352][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.371390][T14657] Call Trace: [ 1557.374669][T14657] dump_stack+0x18f/0x20d [ 1557.378982][T14657] should_fail.cold+0x5/0x14 [ 1557.383644][T14657] should_failslab+0x5/0xf [ 1557.388040][T14657] kmem_cache_alloc_trace+0x240/0x2d0 [ 1557.393392][T14657] gsmld_open+0xa0/0x8d0 [ 1557.397615][T14657] ? gsm_dlci_data+0x180/0x180 [ 1557.402357][T14657] tty_ldisc_open+0x9b/0x110 [ 1557.406924][T14657] tty_set_ldisc+0x2e8/0x670 [ 1557.411495][T14657] tty_ioctl+0xadf/0x15f0 [ 1557.415805][T14657] ? tty_fasync+0x390/0x390 [ 1557.420287][T14657] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1557.426160][T14657] ? do_vfs_ioctl+0x27d/0x1090 [ 1557.430902][T14657] ? generic_block_fiemap+0x60/0x60 [ 1557.436082][T14657] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1557.441621][T14657] ? lock_is_held_type+0xb0/0xe0 [ 1557.446584][T14657] ? __fget_files+0x294/0x400 [ 1557.451273][T14657] ? tty_fasync+0x390/0x390 [ 1557.455758][T14657] ksys_ioctl+0x11a/0x180 [ 1557.460071][T14657] __x64_sys_ioctl+0x6f/0xb0 [ 1557.464647][T14657] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1557.469735][T14657] do_syscall_64+0x60/0xe0 [ 1557.474135][T14657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1557.480022][T14657] RIP: 0033:0x45cba9 [ 1557.483900][T14657] Code: Bad RIP value. [ 1557.487946][T14657] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:47:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7000000, 0x0}}], 0x1, 0x0) 01:47:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1261, &(0x7f0000000080)={0x0, 0x882200}) [ 1557.496336][T14657] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1557.504287][T14657] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1557.512240][T14657] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1557.520291][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1557.528241][T14657] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x2064, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1262, &(0x7f0000000080)={0x0, 0x882200}) [ 1557.843802][T15763] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1558.244211][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1558.251805][T15763] usb 3-1: can't read configurations, error -61 [ 1558.403783][T15763] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1558.803773][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1558.811412][T15763] usb 3-1: can't read configurations, error -61 [ 1558.818067][T15763] usb usb3-port1: attempt power cycle [ 1559.523659][T15763] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1559.773715][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1559.781779][T15763] usb 3-1: can't read configurations, error -61 [ 1559.933694][T15763] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1560.184255][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1560.191890][T15763] usb 3-1: can't read configurations, error -61 [ 1560.199446][T15763] usb usb3-port1: unable to enumerate USB device 01:47:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:31 executing program 3 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0xb1) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) pipe2$9p(&(0x7f0000000000), 0x4000) 01:47:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x8000000, 0x0}}], 0x1, 0x0) 01:47:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x5865, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1263, &(0x7f0000000080)={0x0, 0x882200}) [ 1560.327118][T14688] FAULT_INJECTION: forcing a failure. [ 1560.327118][T14688] name failslab, interval 1, probability 0, space 0, times 0 01:47:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1560.369958][T14688] CPU: 1 PID: 14688 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1560.378658][T14688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.388717][T14688] Call Trace: [ 1560.392014][T14688] dump_stack+0x18f/0x20d [ 1560.396360][T14688] should_fail.cold+0x5/0x14 [ 1560.400967][T14688] should_failslab+0x5/0xf [ 1560.405395][T14688] kmem_cache_alloc_trace+0x240/0x2d0 [ 1560.410776][T14688] gsmld_open+0xe7/0x8d0 [ 1560.415023][T14688] ? gsm_dlci_data+0x180/0x180 [ 1560.419792][T14688] tty_ldisc_open+0x9b/0x110 [ 1560.424382][T14688] tty_set_ldisc+0x2e8/0x670 [ 1560.428984][T14688] tty_ioctl+0xadf/0x15f0 [ 1560.433320][T14688] ? tty_fasync+0x390/0x390 [ 1560.437831][T14688] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1560.443739][T14688] ? do_vfs_ioctl+0x27d/0x1090 [ 1560.448501][T14688] ? generic_block_fiemap+0x60/0x60 [ 1560.453710][T14688] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1560.459237][T14688] ? lock_is_held_type+0xb0/0xe0 [ 1560.464158][T14688] ? __fget_files+0x294/0x400 [ 1560.468838][T14688] ? tty_fasync+0x390/0x390 [ 1560.473328][T14688] ksys_ioctl+0x11a/0x180 [ 1560.477644][T14688] __x64_sys_ioctl+0x6f/0xb0 [ 1560.482216][T14688] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1560.487321][T14688] do_syscall_64+0x60/0xe0 [ 1560.491719][T14688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1560.497589][T14688] RIP: 0033:0x45cba9 [ 1560.501452][T14688] Code: Bad RIP value. [ 1560.505494][T14688] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:47:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x6420, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1264, &(0x7f0000000080)={0x0, 0x882200}) 01:47:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x9000000, 0x0}}], 0x1, 0x0) [ 1560.513884][T14688] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1560.521830][T14688] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1560.529776][T14688] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1560.537723][T14688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1560.545671][T14688] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xa000000, 0x0}}], 0x1, 0x0) 01:47:31 executing program 3 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1560.697487][T14716] FAULT_INJECTION: forcing a failure. [ 1560.697487][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.710311][T14716] CPU: 0 PID: 14716 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1560.718982][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.729030][T14716] Call Trace: [ 1560.732312][T14716] dump_stack+0x18f/0x20d [ 1560.736624][T14716] should_fail.cold+0x5/0x14 [ 1560.741195][T14716] should_failslab+0x5/0xf [ 1560.745592][T14716] kmem_cache_alloc_trace+0x47/0x2d0 [ 1560.750861][T14716] ? lockdep_init_map_waits+0x26a/0x890 [ 1560.756388][T14716] gsm_dlci_alloc+0x46/0x3e0 [ 1560.760962][T14716] gsm_activate_mux+0x1fe/0x290 [ 1560.765791][T14716] gsmld_open+0x567/0x8d0 [ 1560.770097][T14716] ? gsm_dlci_data+0x180/0x180 [ 1560.774837][T14716] tty_ldisc_open+0x9b/0x110 [ 1560.779408][T14716] tty_set_ldisc+0x2e8/0x670 [ 1560.783979][T14716] tty_ioctl+0xadf/0x15f0 [ 1560.788290][T14716] ? tty_fasync+0x390/0x390 [ 1560.792775][T14716] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1560.798652][T14716] ? do_vfs_ioctl+0x27d/0x1090 [ 1560.803393][T14716] ? generic_block_fiemap+0x60/0x60 [ 1560.808574][T14716] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1560.814094][T14716] ? lock_is_held_type+0xb0/0xe0 [ 1560.819011][T14716] ? __fget_files+0x294/0x400 [ 1560.823674][T14716] ? tty_fasync+0x390/0x390 [ 1560.828158][T14716] ksys_ioctl+0x11a/0x180 [ 1560.832468][T14716] __x64_sys_ioctl+0x6f/0xb0 [ 1560.837034][T14716] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1560.842123][T14716] do_syscall_64+0x60/0xe0 [ 1560.846532][T14716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1560.852399][T14716] RIP: 0033:0x45cba9 [ 1560.856264][T14716] Code: Bad RIP value. [ 1560.860304][T14716] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.868690][T14716] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1560.876641][T14716] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1560.884590][T14716] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1560.892538][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1560.900487][T14716] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 [ 1561.053550][T15763] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1561.453645][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1561.461273][T15763] usb 3-1: can't read configurations, error -61 [ 1561.613545][T15763] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1562.013587][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1562.021198][T15763] usb 3-1: can't read configurations, error -61 [ 1562.027809][T15763] usb usb3-port1: attempt power cycle [ 1562.733464][T15763] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1562.983993][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1562.991590][T15763] usb 3-1: can't read configurations, error -61 [ 1563.143397][T15763] usb 3-1: new high-speed USB device number 4 using dummy_hcd 01:47:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a052800400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1144, 0x13, 0x1, 0x70bd25, 0x25dfdbff, {0x3, 0x9, 0xff, 0x9, {0x4e23, 0x4e23, [0x200, 0x5, 0xffffffff, 0x200], [0x80000001, 0x4, 0xfffffffe, 0x9], r2, [0x7, 0xf46]}, 0x1, 0x76}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "f19954ca5de9b49e23b153e78809bfbf9ce6e24c7aad9cc9a2329f24d47cd2e4376ad9f1e2b5eafaedea83c0a701b5cfe7896d503ce9ff9fd00d6f3b77589d7a832f83e9548b110178c602904d4a8872dc4e64db21e8d9c5fdf9a239875a9ba0159ae35f026651d5b1270ebeba140b689100bdda3e8e9d7a6eb262a3ed91a0c276ca880bf4317043222ea1d910d8c42e254d5c012529359d5b9da2d706573af2b0515fe31f2e09c2f145efddfb794f1b254eb3ae2bd0648e0a89e2184749aacd206e2237bd1b2573a63c30c38d927c5ccd852e89d3cd22f09c06cee31703f0cecb3428d8ab452381e6de42c089376cfa"}]}, 0x1144}, 0x1, 0x0, 0x0, 0x8004}, 0x814) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:47:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x6558, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xe000000, 0x0}}], 0x1, 0x0) 01:47:34 executing program 3 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1265, &(0x7f0000000080)={0x0, 0x882200}) [ 1563.374149][T15763] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1563.381765][T15763] usb 3-1: can't read configurations, error -71 [ 1563.393825][T14727] FAULT_INJECTION: forcing a failure. [ 1563.393825][T14727] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.429845][T15763] usb usb3-port1: unable to enumerate USB device [ 1563.442006][T14727] CPU: 1 PID: 14727 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1563.450696][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.460746][T14727] Call Trace: [ 1563.464033][T14727] dump_stack+0x18f/0x20d [ 1563.468348][T14727] should_fail.cold+0x5/0x14 [ 1563.472944][T14727] should_failslab+0x5/0xf [ 1563.477345][T14727] kmem_cache_alloc_trace+0x47/0x2d0 [ 1563.482618][T14727] ? lockdep_init_map_waits+0x26a/0x890 [ 1563.488149][T14727] gsm_dlci_alloc+0x46/0x3e0 [ 1563.492727][T14727] gsm_activate_mux+0x1fe/0x290 [ 1563.497584][T14727] gsmld_open+0x567/0x8d0 [ 1563.501892][T14727] ? gsm_dlci_data+0x180/0x180 [ 1563.506636][T14727] tty_ldisc_open+0x9b/0x110 [ 1563.511202][T14727] tty_set_ldisc+0x2e8/0x670 [ 1563.515773][T14727] tty_ioctl+0xadf/0x15f0 [ 1563.520079][T14727] ? tty_fasync+0x390/0x390 [ 1563.524566][T14727] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1563.530438][T14727] ? do_vfs_ioctl+0x27d/0x1090 [ 1563.535193][T14727] ? generic_block_fiemap+0x60/0x60 [ 1563.540372][T14727] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1563.545901][T14727] ? lock_is_held_type+0xb0/0xe0 [ 1563.550823][T14727] ? __fget_files+0x294/0x400 [ 1563.555498][T14727] ? tty_fasync+0x390/0x390 [ 1563.559977][T14727] ksys_ioctl+0x11a/0x180 [ 1563.564287][T14727] __x64_sys_ioctl+0x6f/0xb0 [ 1563.568851][T14727] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1563.573940][T14727] do_syscall_64+0x60/0xe0 [ 1563.578334][T14727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1563.584202][T14727] RIP: 0033:0x45cba9 [ 1563.588067][T14727] Code: Bad RIP value. [ 1563.592114][T14727] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.600498][T14727] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1563.608447][T14727] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1563.616395][T14727] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 01:47:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x11000000, 0x0}}], 0x1, 0x0) [ 1563.624351][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1563.632315][T14727] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1267, &(0x7f0000000080)={0x0, 0x882200}) 01:47:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x8100, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) accept(r3, 0x0, &(0x7f0000000000)) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="92cabd63add98eac5ee271c263a344b6d8f6d767318c05952d5354a04ec5c18cb4d026c680a066b37ec15fed2c4f8ad0bdddba5a189b"], 0x48}}, 0x0) 01:47:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x20000000, 0x0}}], 0x1, 0x0) 01:47:34 executing program 3 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1563.813107][T14754] FAULT_INJECTION: forcing a failure. [ 1563.813107][T14754] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.828722][T14754] CPU: 0 PID: 14754 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1563.837415][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.847467][T14754] Call Trace: [ 1563.850758][T14754] dump_stack+0x18f/0x20d [ 1563.855098][T14754] should_fail.cold+0x5/0x14 [ 1563.859694][T14754] should_failslab+0x5/0xf [ 1563.864118][T14754] kmem_cache_alloc_trace+0x47/0x2d0 [ 1563.869396][T14754] ? lockdep_init_map_waits+0x26a/0x890 [ 1563.874936][T14754] gsm_dlci_alloc+0x46/0x3e0 [ 1563.879517][T14754] gsm_activate_mux+0x1fe/0x290 [ 1563.884356][T14754] gsmld_open+0x567/0x8d0 [ 1563.888674][T14754] ? gsm_dlci_data+0x180/0x180 [ 1563.893433][T14754] tty_ldisc_open+0x9b/0x110 [ 1563.898015][T14754] tty_set_ldisc+0x2e8/0x670 [ 1563.902585][T14754] tty_ioctl+0xadf/0x15f0 [ 1563.906952][T14754] ? tty_fasync+0x390/0x390 [ 1563.911438][T14754] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1563.917309][T14754] ? do_vfs_ioctl+0x27d/0x1090 [ 1563.922051][T14754] ? generic_block_fiemap+0x60/0x60 [ 1563.927234][T14754] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1563.932754][T14754] ? lock_is_held_type+0xb0/0xe0 [ 1563.937671][T14754] ? __fget_files+0x294/0x400 [ 1563.942331][T14754] ? tty_fasync+0x390/0x390 [ 1563.946812][T14754] ksys_ioctl+0x11a/0x180 [ 1563.951123][T14754] __x64_sys_ioctl+0x6f/0xb0 [ 1563.955701][T14754] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1563.960803][T14754] do_syscall_64+0x60/0xe0 [ 1563.965208][T14754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1563.971090][T14754] RIP: 0033:0x45cba9 [ 1563.974967][T14754] Code: Bad RIP value. [ 1563.979085][T14754] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.987475][T14754] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1563.995436][T14754] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1564.003419][T14754] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1564.011426][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1564.013591][T15763] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1564.019382][T14754] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 [ 1564.453422][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1564.461218][T15763] usb 3-1: can't read configurations, error -61 [ 1564.613349][T15763] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1565.013375][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1565.021032][T15763] usb 3-1: can't read configurations, error -61 [ 1565.028557][T15763] usb usb3-port1: attempt power cycle [ 1565.743285][T15763] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1565.993318][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1566.000943][T15763] usb 3-1: can't read configurations, error -61 [ 1566.153242][T15763] usb 3-1: new high-speed USB device number 8 using dummy_hcd 01:47:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05280040000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1268, &(0x7f0000000080)={0x0, 0x882200}) 01:47:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x30000000, 0x0}}], 0x1, 0x0) 01:47:37 executing program 3 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000300)={0x1, @capture={0x1000, 0x1, {0xd322, 0x9}, 0x7, 0x2}}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x1410, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000085}, 0x4008004) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xba44) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000000400)={0xcf6d, 0xbf, "c410cb7612c326e8a79c691038d469f4f92e327ff7608bc0dce8daffc9b4ea931a81a035b0c77318f470c294668332879b22c762baae4fd2d109dad1e5356bb9ef79816a1a837425c8c3530b205a6f2ff7253306897353397b18343ab0948ba516c0fab2e5b8477acf7703284c9fc25f6f29975e3b6350fb97d3c763163314e1f9c2b0f10d71c9c3adcb5257108523135b7dded80724c53f682171f61d864817d52a34b14e011fed16b601c090c67e9112fb80d4ffb0abda082cc2d549decc"}) close(r0) [ 1566.386564][T15763] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1566.407530][T15763] usb 3-1: can't read configurations, error -71 [ 1566.433784][T15763] usb usb3-port1: unable to enumerate USB device [ 1566.458628][T14767] FAULT_INJECTION: forcing a failure. [ 1566.458628][T14767] name failslab, interval 1, probability 0, space 0, times 0 01:47:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x34050000, 0x0}}], 0x1, 0x0) [ 1566.501708][T14767] CPU: 1 PID: 14767 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1566.510421][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.520478][T14767] Call Trace: [ 1566.523933][T14767] dump_stack+0x18f/0x20d [ 1566.528258][T14767] should_fail.cold+0x5/0x14 [ 1566.532835][T14767] ? __kfifo_alloc+0x174/0x290 [ 1566.537590][T14767] should_failslab+0x5/0xf [ 1566.541993][T14767] __kmalloc+0x27d/0x340 [ 1566.546226][T14767] __kfifo_alloc+0x174/0x290 [ 1566.550808][T14767] gsm_dlci_alloc+0xab/0x3e0 [ 1566.555386][T14767] gsm_activate_mux+0x1fe/0x290 [ 1566.560227][T14767] gsmld_open+0x567/0x8d0 [ 1566.564543][T14767] ? gsm_dlci_data+0x180/0x180 [ 1566.569293][T14767] tty_ldisc_open+0x9b/0x110 [ 1566.573870][T14767] tty_set_ldisc+0x2e8/0x670 [ 1566.578446][T14767] tty_ioctl+0xadf/0x15f0 [ 1566.582763][T14767] ? tty_fasync+0x390/0x390 [ 1566.587253][T14767] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1566.593156][T14767] ? do_vfs_ioctl+0x27d/0x1090 [ 1566.597908][T14767] ? generic_block_fiemap+0x60/0x60 [ 1566.603100][T14767] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1566.608629][T14767] ? lock_is_held_type+0xb0/0xe0 [ 1566.613555][T14767] ? __fget_files+0x294/0x400 [ 1566.618223][T14767] ? tty_fasync+0x390/0x390 [ 1566.622711][T14767] ksys_ioctl+0x11a/0x180 [ 1566.627027][T14767] __x64_sys_ioctl+0x6f/0xb0 [ 1566.631600][T14767] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1566.636695][T14767] do_syscall_64+0x60/0xe0 [ 1566.641094][T14767] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1566.646971][T14767] RIP: 0033:0x45cba9 [ 1566.650846][T14767] Code: Bad RIP value. [ 1566.654894][T14767] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.663291][T14767] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1566.671247][T14767] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1566.679201][T14767] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1566.687156][T14767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:47:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1566.695113][T14767] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1269, &(0x7f0000000080)={0x0, 0x882200}) 01:47:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x60000000, 0x0}}], 0x1, 0x0) 01:47:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:37 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1567.053161][T15763] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1567.453191][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1567.460863][T15763] usb 3-1: can't read configurations, error -61 [ 1567.613122][T15763] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1568.013173][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1568.020818][T15763] usb 3-1: can't read configurations, error -61 [ 1568.029139][T15763] usb usb3-port1: attempt power cycle [ 1568.743101][T15763] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1568.993984][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1569.001762][T15763] usb 3-1: can't read configurations, error -61 [ 1569.153026][T15763] usb 3-1: new high-speed USB device number 12 using dummy_hcd 01:47:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05280040000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:40 executing program 3 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7ffffff7, 0x0}}], 0x1, 0x0) 01:47:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1274, &(0x7f0000000080)={0x0, 0x882200}) 01:47:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3f80000000000, 0x200) fsmount(r5, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000000c0), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) [ 1569.403063][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1569.410706][T15763] usb 3-1: can't read configurations, error -61 [ 1569.417476][T15763] usb usb3-port1: unable to enumerate USB device [ 1569.495534][T14803] FAULT_INJECTION: forcing a failure. [ 1569.495534][T14803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1569.508773][T14803] CPU: 0 PID: 14803 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1569.517453][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.527506][T14803] Call Trace: [ 1569.530807][T14803] dump_stack+0x18f/0x20d [ 1569.535147][T14803] should_fail.cold+0x5/0x14 [ 1569.539748][T14803] __alloc_pages_nodemask+0x1a3/0x930 01:47:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x8dffffff, 0x0}}], 0x1, 0x0) [ 1569.545122][T14803] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1569.551103][T14803] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1569.557177][T14803] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1569.563949][T14803] ? lock_acquire+0x1f1/0xad0 [ 1569.568626][T14803] ? fs_reclaim_acquire+0xf/0x40 [ 1569.573571][T14803] ? find_held_lock+0x2d/0x110 [ 1569.578345][T14803] cache_grow_begin+0x8c/0xb20 [ 1569.583119][T14803] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1569.588585][T14803] cache_alloc_refill+0x27b/0x340 01:47:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xb80b0000, 0x0}}], 0x1, 0x0) [ 1569.593610][T14803] ? lockdep_hardirqs_off+0x66/0xa0 [ 1569.598820][T14803] ? __kfifo_alloc+0x174/0x290 [ 1569.603588][T14803] __kmalloc+0x319/0x340 [ 1569.607835][T14803] __kfifo_alloc+0x174/0x290 [ 1569.612433][T14803] gsm_dlci_alloc+0xab/0x3e0 [ 1569.617029][T14803] gsm_activate_mux+0x1fe/0x290 [ 1569.621881][T14803] gsmld_open+0x567/0x8d0 [ 1569.626208][T14803] ? gsm_dlci_data+0x180/0x180 [ 1569.630973][T14803] tty_ldisc_open+0x9b/0x110 [ 1569.635569][T14803] tty_set_ldisc+0x2e8/0x670 [ 1569.640163][T14803] tty_ioctl+0xadf/0x15f0 [ 1569.644498][T14803] ? tty_fasync+0x390/0x390 [ 1569.649005][T14803] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1569.654896][T14803] ? do_vfs_ioctl+0x27d/0x1090 [ 1569.659659][T14803] ? generic_block_fiemap+0x60/0x60 [ 1569.664865][T14803] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1569.670416][T14803] ? lock_is_held_type+0xb0/0xe0 [ 1569.675364][T14803] ? __fget_files+0x294/0x400 [ 1569.680048][T14803] ? tty_fasync+0x390/0x390 [ 1569.684649][T14803] ksys_ioctl+0x11a/0x180 [ 1569.689002][T14803] __x64_sys_ioctl+0x6f/0xb0 01:47:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xe8030000, 0x0}}], 0x1, 0x0) [ 1569.693590][T14803] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1569.698705][T14803] do_syscall_64+0x60/0xe0 [ 1569.703128][T14803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1569.709019][T14803] RIP: 0033:0x45cba9 [ 1569.712899][T14803] Code: Bad RIP value. [ 1569.716956][T14803] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.725362][T14803] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1569.733413][T14803] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 01:47:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1276, &(0x7f0000000080)={0x0, 0x882200}) [ 1569.741377][T14803] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1569.749347][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1569.757321][T14803] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xeffdffff, 0x0}}], 0x1, 0x0) [ 1569.954276][T15763] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1570.353600][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1570.369135][T15763] usb 3-1: can't read configurations, error -61 [ 1570.553118][T15763] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1570.982993][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1570.990655][T15763] usb 3-1: can't read configurations, error -61 [ 1570.998792][T15763] usb usb3-port1: attempt power cycle [ 1571.712831][T15763] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1571.962915][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1571.970552][T15763] usb 3-1: can't read configurations, error -61 [ 1572.122870][T15763] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1572.372883][T15763] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1572.380482][T15763] usb 3-1: can't read configurations, error -61 [ 1572.387263][T15763] usb usb3-port1: unable to enumerate USB device 01:47:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05280040000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0xffffff03, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x1c, 0xb8, 0x0, 0x5c6, 0x9053, 0x7ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x27, 0xa1}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x83c0550b, 0x0) 01:47:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x28}, 0x10) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='b'], 0x48}}, 0x0) close(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) 01:47:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xf4010000, 0x0}}], 0x1, 0x0) 01:47:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1277, &(0x7f0000000080)={0x0, 0x882200}) 01:47:43 executing program 3 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:47:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) [ 1572.613859][T14993] FAULT_INJECTION: forcing a failure. [ 1572.613859][T14993] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.660987][T14993] CPU: 1 PID: 14993 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1572.669689][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.679735][T14993] Call Trace: [ 1572.683016][T14993] dump_stack+0x18f/0x20d [ 1572.687328][T14993] should_fail.cold+0x5/0x14 [ 1572.691900][T14993] should_failslab+0x5/0xf [ 1572.696294][T14993] kmem_cache_alloc_trace+0x240/0x2d0 [ 1572.701649][T14993] tty_register_device_attr+0x212/0x7b0 [ 1572.707177][T14993] ? put_tty_driver+0xa0/0xa0 [ 1572.711833][T14993] ? __raw_spin_lock_init+0x34/0x100 [ 1572.717094][T14993] ? tty_port_init+0x152/0x1b0 [ 1572.721834][T14993] ? gsm_dlci_alloc+0x32f/0x3e0 [ 1572.726661][T14993] gsmld_open+0x5cc/0x8d0 [ 1572.730967][T14993] ? gsm_dlci_data+0x180/0x180 [ 1572.735706][T14993] tty_ldisc_open+0x9b/0x110 [ 1572.740272][T14993] tty_set_ldisc+0x2e8/0x670 [ 1572.744845][T14993] tty_ioctl+0xadf/0x15f0 [ 1572.749156][T14993] ? tty_fasync+0x390/0x390 [ 1572.753642][T14993] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1572.759511][T14993] ? do_vfs_ioctl+0x27d/0x1090 [ 1572.764252][T14993] ? generic_block_fiemap+0x60/0x60 [ 1572.769433][T14993] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1572.774957][T14993] ? lock_is_held_type+0xb0/0xe0 [ 1572.779875][T14993] ? __fget_files+0x294/0x400 [ 1572.784535][T14993] ? tty_fasync+0x390/0x390 [ 1572.789016][T14993] ksys_ioctl+0x11a/0x180 [ 1572.793326][T14993] __x64_sys_ioctl+0x6f/0xb0 [ 1572.797895][T14993] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1572.802985][T14993] do_syscall_64+0x60/0xe0 [ 1572.807379][T14993] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1572.813247][T14993] RIP: 0033:0x45cba9 [ 1572.817113][T14993] Code: Bad RIP value. [ 1572.821153][T14993] RSP: 002b:00007f4d1b40ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.829538][T14993] RAX: ffffffffffffffda RBX: 00000000004f1040 RCX: 000000000045cba9 [ 1572.837492][T14993] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 1572.845452][T14993] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1572.853400][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 01:47:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xf7ffff7f, 0x0}}], 0x1, 0x0) 01:47:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r0, 0x1278, &(0x7f0000000080)={0x0, 0x882200}) [ 1572.861346][T14993] R13: 00000000000005bc R14: 00000000004c885a R15: 00007f4d1b40f6d4 01:47:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(r0) 01:47:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {}, {}, 0xffffffff}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000001980)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}], 0x1}, 0x0) 01:47:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x46, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0xffffa200, 0x0}}], 0x1, 0x0) [ 1573.222958][T15763] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1573.234636][T14986] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN [ 1573.246357][T14986] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1573.254762][T14986] CPU: 1 PID: 14986 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1573.263424][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.273482][T14986] RIP: 0010:cdev_del+0x22/0x90 [ 1573.278238][T14986] Code: b5 0f 1f 80 00 00 00 00 55 48 89 fd 48 83 ec 08 e8 63 f9 b4 ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f 48 [ 1573.297838][T14986] RSP: 0018:ffffc90016e2fcf0 EFLAGS: 00010207 [ 1573.303898][T14986] RAX: dffffc0000000000 RBX: ffff88821848ff00 RCX: ffffffff83e7567f [ 1573.311866][T14986] RDX: 000000000000000c RSI: ffffffff81bec09d RDI: 0000000000000064 [ 1573.319836][T14986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1573.327801][T14986] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88821848ff08 [ 1573.335771][T14986] R13: ffff8882184e4008 R14: ffff88808e109028 R15: ffff8880508b2650 [ 1573.343735][T14986] FS: 000000000103f940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1573.352654][T14986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1573.359230][T14986] CR2: 0000001b2eb23000 CR3: 000000009f946000 CR4: 00000000001406e0 [ 1573.367204][T14986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1573.375167][T14986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1573.383129][T14986] Call Trace: [ 1573.386415][T14986] tty_unregister_device+0x112/0x1b0 [ 1573.391694][T14986] gsmld_close+0xaa/0x260 [ 1573.396016][T14986] ? gsmtty_cleanup+0x1d0/0x1d0 [ 1573.400860][T14986] tty_ldisc_close+0x110/0x190 [ 1573.405614][T14986] tty_ldisc_kill+0x94/0x150 [ 1573.410200][T14986] tty_ldisc_release+0xe1/0x2a0 [ 1573.415045][T14986] tty_release_struct+0x20/0xe0 [ 1573.419888][T14986] tty_release+0xc67/0xf60 [ 1573.424300][T14986] ? tty_release_struct+0xe0/0xe0 [ 1573.429314][T14986] __fput+0x33c/0x880 [ 1573.433287][T14986] task_work_run+0xdd/0x190 [ 1573.437785][T14986] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 1573.443499][T14986] do_syscall_64+0x6c/0xe0 [ 1573.447910][T14986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1573.453791][T14986] RIP: 0033:0x416721 [ 1573.457667][T14986] Code: Bad RIP value. [ 1573.461722][T14986] RSP: 002b:0000000000c9fbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1573.470125][T14986] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416721 [ 1573.478090][T14986] RDX: 0000000000000000 RSI: 000000000000182d RDI: 0000000000000003 [ 1573.486059][T14986] RBP: 0000000000000001 R08: 00000000162e982c R09: 00000000162e9830 [ 1573.494020][T14986] R10: 0000000000c9fcd0 R11: 0000000000000293 R12: 000000000078c900 [ 1573.501986][T14986] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078c04c [ 1573.509954][T14986] Modules linked in: [ 1573.545059][T14986] ---[ end trace 641cbf0f88e760bc ]--- [ 1573.558649][T14986] RIP: 0010:cdev_del+0x22/0x90 [ 1573.575486][T14986] Code: b5 0f 1f 80 00 00 00 00 55 48 89 fd 48 83 ec 08 e8 63 f9 b4 ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f 48 [ 1573.596052][T14986] RSP: 0018:ffffc90016e2fcf0 EFLAGS: 00010207 [ 1573.602196][T14986] RAX: dffffc0000000000 RBX: ffff88821848ff00 RCX: ffffffff83e7567f [ 1573.611021][T14986] RDX: 000000000000000c RSI: ffffffff81bec09d RDI: 0000000000000064 [ 1573.619581][T14986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1573.628114][T14986] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88821848ff08 [ 1573.636514][T14986] R13: ffff8882184e4008 R14: ffff88808e109028 R15: ffff8880508b2650 [ 1573.645008][T14986] FS: 000000000103f940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1573.654290][T14986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1573.660876][T14986] CR2: 00007f2566ac5000 CR3: 000000009f946000 CR4: 00000000001406e0 [ 1573.668891][T14986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1573.676911][T14986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1573.684900][T14986] Kernel panic - not syncing: Fatal exception [ 1573.692224][T14986] Kernel Offset: disabled [ 1573.696534][T14986] Rebooting in 86400 seconds..