DER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) sendfile(r1, r0, 0x0, 0x800000080004103) 23:27:01 executing program 0 (fault-call:9 fault-nth:2): socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x20002, 0x5, 0x0, 0x1000000003, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x3) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000000c0)={0x2, 0xb000, 0xff, 0xffff75fa, 0x7}) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x39, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2402880c}, 0x0) 23:27:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x10) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f, 0xffffffff}, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x3db9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1284.357712] ? creds_are_invalid+0x44/0x100 [ 1284.357725] do_signal+0x7c/0x15d0 [ 1284.357733] ? __vfs_read+0xec/0x610 [ 1284.357740] ? signalfd_poll+0x1f0/0x1f0 [ 1284.357748] ? inode_has_perm.isra.0+0x1d0/0x1d0 [ 1284.357757] ? vfs_copy_file_range+0x990/0x990 [ 1284.357764] ? setup_sigcontext+0x820/0x820 [ 1284.357774] ? selinux_file_permission+0x7a/0x440 [ 1284.357785] ? check_preemption_disabled+0x35/0x240 [ 1284.393613] binder: BINDER_SET_CONTEXT_MGR already set [ 1284.395302] ? kick_process+0xe4/0x170 23:27:02 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x538c61, 0x0) recvfrom$phonet(r1, &(0x7f0000000d80)=""/4096, 0x1000, 0x122, &(0x7f0000000040)={0x23, 0xf7, 0x4, 0x81}, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffb]}, 0x8) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1284.395316] ? task_work_add+0x87/0xe0 [ 1284.402673] binder: 25985:25986 ioctl 40046207 0 returned -16 [ 1284.402902] ? fput+0xaa/0x140 23:27:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x0) 23:27:02 executing program 0 (fault-call:9 fault-nth:3): socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:02 executing program 0 (fault-call:9 fault-nth:4): socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04620440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x68) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x3, 0x8, 0xca, 0xff, 0x0, 0xffffffff, 0x100a0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x952e, 0x2, @perf_config_ext={0xffffffff, 0x85c}, 0x1b063, 0x6, 0x0, 0x1, 0x8, 0x9, 0x24}, 0x0, 0xc, r3, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x8}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:02 executing program 0 (fault-call:9 fault-nth:5): socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1284.473029] ? exit_to_usermode_loop+0x41/0x200 [ 1284.473042] exit_to_usermode_loop+0x160/0x200 [ 1284.473054] do_syscall_64+0x4a3/0x640 [ 1284.473070] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.473077] RIP: 0033:0x45cb29 [ 1284.473082] RSP: 002b:00007f8d0a133c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1284.473091] RAX: fffffffffffffe00 RBX: 00000000004fbe20 RCX: 000000000045cb29 [ 1284.473096] RDX: 00000000200008c0 RSI: 0000000020000740 RDI: 0000000000000003 [ 1284.473101] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.473106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1284.473111] R13: 000000000000089f R14: 00000000004ca35e R15: 00007f8d0a1346d4 [ 1284.518696] FAULT_INJECTION: forcing a failure. [ 1284.518696] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.518766] CPU: 0 PID: 25997 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1284.518773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.518778] Call Trace: [ 1284.518800] dump_stack+0x1b2/0x283 [ 1284.518819] should_fail.cold+0x10a/0x154 [ 1284.518837] should_failslab+0xd6/0x130 [ 1284.518850] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1284.518866] __kmalloc_node+0x38/0x70 [ 1284.518882] kvmalloc_node+0x46/0xd0 [ 1284.518901] iov_iter_get_pages_alloc+0x48c/0xe40 [ 1284.518923] ? iov_iter_get_pages+0xc70/0xc70 [ 1284.518934] ? iov_iter_pipe+0x93/0x2b0 [ 1284.518950] default_file_splice_read+0x17c/0x870 [ 1284.518962] ? depot_save_stack+0x10d/0x401 [ 1284.518981] ? do_splice_direct+0x210/0x210 [ 1284.518993] ? alloc_pipe_info+0x156/0x380 [ 1284.519004] ? splice_direct_to_actor+0x581/0x730 [ 1284.519014] ? do_splice_direct+0x164/0x210 [ 1284.519024] ? do_sendfile+0x469/0xaf0 [ 1284.519033] ? SyS_sendfile64+0xff/0x110 [ 1284.519043] ? do_syscall_64+0x1d5/0x640 [ 1284.519053] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.519069] ? retint_kernel+0x2d/0x2d [ 1284.519090] ? fsnotify+0x897/0x1110 [ 1284.519113] ? __fsnotify_inode_delete+0x20/0x20 [ 1284.519127] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1284.519146] ? __inode_security_revalidate+0xcf/0x120 [ 1284.519159] ? audit_add_tree_rule.cold+0x2f/0x2f [ 1284.519170] ? avc_policy_seqno+0x5/0x10 [ 1284.519179] ? selinux_file_permission+0x7a/0x440 [ 1284.519198] ? security_file_permission+0x82/0x1e0 [ 1284.519217] ? rw_verify_area+0xe1/0x290 [ 1284.519227] ? do_splice_direct+0x210/0x210 [ 1284.519238] do_splice_to+0xfb/0x150 [ 1284.519249] ? alloc_pipe_info+0x294/0x380 [ 1284.519270] splice_direct_to_actor+0x20a/0x730 [ 1284.519291] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1284.519309] ? do_splice_to+0x150/0x150 [ 1284.519326] ? rw_verify_area+0xe1/0x290 [ 1284.519340] do_splice_direct+0x164/0x210 [ 1284.519354] ? splice_direct_to_actor+0x730/0x730 [ 1284.519377] ? do_sendfile+0x325/0xaf0 [ 1284.519393] do_sendfile+0x469/0xaf0 [ 1284.519422] ? do_compat_pwritev64+0x140/0x140 [ 1284.519436] ? retint_kernel+0x2d/0x2d [ 1284.519451] SyS_sendfile64+0xff/0x110 [ 1284.519473] ? SyS_sendfile+0x130/0x130 [ 1284.519487] ? do_syscall_64+0x4c/0x640 [ 1284.519499] ? SyS_sendfile+0x130/0x130 [ 1284.519511] do_syscall_64+0x1d5/0x640 [ 1284.519535] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.519544] RIP: 0033:0x45cb29 [ 1284.519550] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1284.519562] RAX: ffffffffffffffda RBX: 00000000004fd6e0 RCX: 000000000045cb29 [ 1284.519569] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1284.519576] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1284.519583] R10: 0050000000000443 R11: 0000000000000246 R12: 0000000000000008 [ 1284.519590] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007fe2c892a6d4 [ 1284.841880] FAULT_INJECTION: forcing a failure. [ 1284.841880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1284.841925] CPU: 0 PID: 26014 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1284.841932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.841936] Call Trace: [ 1284.841957] dump_stack+0x1b2/0x283 [ 1284.841977] should_fail.cold+0x10a/0x154 [ 1284.841996] __alloc_pages_nodemask+0x22b/0x2730 [ 1284.842014] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1284.842029] ? kvmalloc_node+0x46/0xd0 [ 1284.842042] ? default_file_splice_read+0x17c/0x870 [ 1284.842052] ? do_splice_to+0xfb/0x150 [ 1284.842062] ? splice_direct_to_actor+0x20a/0x730 [ 1284.842073] ? do_splice_direct+0x164/0x210 [ 1284.842083] ? do_sendfile+0x469/0xaf0 [ 1284.842093] ? SyS_sendfile64+0xff/0x110 [ 1284.842104] ? do_syscall_64+0x1d5/0x640 [ 1284.842117] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.842133] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1284.842148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.842159] ? retint_kernel+0x2d/0x2d [ 1284.842172] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1284.842189] ? check_preemption_disabled+0x35/0x240 [ 1284.842200] ? retint_kernel+0x2d/0x2d [ 1284.842222] alloc_pages_current+0xe7/0x1e0 [ 1284.842235] push_pipe+0x3ad/0x720 [ 1284.842253] iov_iter_get_pages_alloc+0x4da/0xe40 [ 1284.842268] ? iov_iter_get_pages+0xc70/0xc70 [ 1284.842280] ? iov_iter_pipe+0x93/0x2b0 [ 1284.842294] default_file_splice_read+0x17c/0x870 [ 1284.842304] ? depot_save_stack+0x10d/0x401 [ 1284.842322] ? do_splice_direct+0x210/0x210 [ 1284.842332] ? alloc_pipe_info+0x156/0x380 [ 1284.842342] ? splice_direct_to_actor+0x581/0x730 [ 1284.842353] ? do_splice_direct+0x164/0x210 [ 1284.842360] ? do_sendfile+0x469/0xaf0 [ 1284.842369] ? SyS_sendfile64+0xff/0x110 [ 1284.842378] ? do_syscall_64+0x1d5/0x640 [ 1284.842388] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.842408] ? fsnotify+0x897/0x1110 [ 1284.842420] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1284.842438] ? __fsnotify_inode_delete+0x20/0x20 [ 1284.842464] ? security_file_permission+0x82/0x1e0 [ 1284.842478] ? rw_verify_area+0xe1/0x290 [ 1284.842489] ? do_splice_direct+0x210/0x210 [ 1284.842502] do_splice_to+0xfb/0x150 [ 1284.842514] ? alloc_pipe_info+0x294/0x380 [ 1284.842529] splice_direct_to_actor+0x20a/0x730 [ 1284.842545] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1284.842561] ? do_splice_to+0x150/0x150 [ 1284.842575] ? rw_verify_area+0xe1/0x290 [ 1284.842590] do_splice_direct+0x164/0x210 [ 1284.842607] ? splice_direct_to_actor+0x730/0x730 [ 1284.842634] ? do_sendfile+0x325/0xaf0 [ 1284.842648] do_sendfile+0x469/0xaf0 [ 1284.842667] ? do_compat_pwritev64+0x140/0x140 [ 1284.842687] SyS_sendfile64+0xff/0x110 [ 1284.842700] ? SyS_sendfile+0x130/0x130 [ 1284.842713] ? do_syscall_64+0x4c/0x640 [ 1284.842723] ? SyS_sendfile+0x130/0x130 [ 1284.842737] do_syscall_64+0x1d5/0x640 [ 1284.842755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.842764] RIP: 0033:0x45cb29 [ 1284.842770] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1284.842783] RAX: ffffffffffffffda RBX: 00000000004fd6e0 RCX: 000000000045cb29 [ 1284.842791] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1284.842799] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1284.842806] R10: 0050000000000443 R11: 0000000000000246 R12: 0000000000000008 [ 1284.842813] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007fe2c892a6d4 [ 1284.924082] FAULT_INJECTION: forcing a failure. [ 1284.924082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1284.924150] CPU: 0 PID: 26019 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1284.924158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.924162] Call Trace: [ 1284.924183] dump_stack+0x1b2/0x283 [ 1284.924203] should_fail.cold+0x10a/0x154 [ 1284.924222] __alloc_pages_nodemask+0x22b/0x2730 [ 1284.924238] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1284.924254] ? kvmalloc_node+0x46/0xd0 [ 1284.924270] ? default_file_splice_read+0x17c/0x870 [ 1284.924281] ? do_splice_to+0xfb/0x150 [ 1284.924293] ? splice_direct_to_actor+0x20a/0x730 [ 1284.924304] ? do_splice_direct+0x164/0x210 [ 1284.924315] ? do_sendfile+0x469/0xaf0 [ 1284.924327] ? SyS_sendfile64+0xff/0x110 [ 1284.924340] ? do_syscall_64+0x1d5/0x640 [ 1284.924352] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.924365] ? __lock_acquire+0x655/0x42a0 [ 1284.924379] ? switch_mm_irqs_off+0x5f6/0xec0 [ 1284.924393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.924404] ? retint_kernel+0x2d/0x2d [ 1284.924419] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1284.924436] ? check_preemption_disabled+0x35/0x240 [ 1284.924447] ? retint_kernel+0x2d/0x2d [ 1284.924468] alloc_pages_current+0xe7/0x1e0 [ 1284.924482] push_pipe+0x3ad/0x720 [ 1284.924499] iov_iter_get_pages_alloc+0x4da/0xe40 [ 1284.924514] ? iov_iter_get_pages+0xc70/0xc70 [ 1284.924543] default_file_splice_read+0x17c/0x870 [ 1284.924553] ? depot_save_stack+0x10d/0x401 [ 1284.924573] ? do_splice_direct+0x210/0x210 [ 1284.924582] ? alloc_pipe_info+0x156/0x380 [ 1284.924592] ? splice_direct_to_actor+0x581/0x730 [ 1284.924601] ? do_splice_direct+0x164/0x210 [ 1284.924608] ? do_sendfile+0x469/0xaf0 [ 1284.924616] ? SyS_sendfile64+0xff/0x110 [ 1284.924626] ? do_syscall_64+0x1d5/0x640 [ 1284.924637] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.924648] ? mark_held_locks+0xa6/0xf0 [ 1284.924663] ? retint_kernel+0x2d/0x2d [ 1284.924681] ? fsnotify+0x897/0x1110 [ 1284.924693] ? retint_kernel+0x2d/0x2d [ 1284.924712] ? __fsnotify_inode_delete+0x20/0x20 [ 1284.924728] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1284.924746] ? __inode_security_revalidate+0xcf/0x120 [ 1284.924757] ? avc_policy_seqno+0x5/0x10 [ 1284.924771] ? selinux_file_permission+0x7a/0x440 [ 1284.924789] ? security_file_permission+0x82/0x1e0 [ 1284.924803] ? rw_verify_area+0xe1/0x290 [ 1284.924815] ? do_splice_direct+0x210/0x210 [ 1284.924834] do_splice_to+0xfb/0x150 [ 1284.924849] ? alloc_pipe_info+0x294/0x380 [ 1284.924866] splice_direct_to_actor+0x20a/0x730 [ 1284.924882] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1284.924896] ? do_splice_to+0x150/0x150 [ 1284.924908] ? rw_verify_area+0xe1/0x290 [ 1284.924924] do_splice_direct+0x164/0x210 [ 1284.924940] ? splice_direct_to_actor+0x730/0x730 [ 1284.924957] ? rw_verify_area+0xe1/0x290 [ 1284.924970] do_sendfile+0x469/0xaf0 [ 1284.924988] ? do_compat_pwritev64+0x140/0x140 [ 1284.925000] ? check_preemption_disabled+0x35/0x240 [ 1284.925011] ? retint_kernel+0x2d/0x2d [ 1284.925028] SyS_sendfile64+0xff/0x110 [ 1284.925039] ? SyS_sendfile+0x130/0x130 [ 1284.925049] ? do_syscall_64+0x4c/0x640 [ 1284.925060] ? SyS_sendfile+0x130/0x130 [ 1284.925073] do_syscall_64+0x1d5/0x640 [ 1284.925091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.925099] RIP: 0033:0x45cb29 [ 1284.925105] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1284.925116] RAX: ffffffffffffffda RBX: 00000000004fd6e0 RCX: 000000000045cb29 [ 1284.925122] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1284.925129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1284.925136] R10: 0050000000000443 R11: 0000000000000246 R12: 0000000000000008 [ 1284.925143] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007fe2c892a6d4 [ 1284.966937] binder: 26020:26021 ioctl 1275 0 returned -22 [ 1284.983036] binder: BINDER_SET_CONTEXT_MGR already set [ 1284.983049] binder: 26020:26023 ioctl 40046207 0 returned -16 [ 1284.984478] binder: unexpected work type, 4, not freed [ 1284.986093] binder_alloc: 26020: binder_alloc_buf, no vma [ 1284.986413] binder: 26020:26023 ioctl 1275 0 returned -22 [ 1285.045944] binder: 26025:26028 unknown command 1074029060 [ 1285.045956] binder: 26025:26028 ioctl c0306201 20000200 returned -22 [ 1285.050423] binder: 26025:26030 unknown command 1074029060 [ 1285.050434] binder: 26025:26030 ioctl c0306201 20000200 returned -22 [ 1285.094570] FAULT_INJECTION: forcing a failure. [ 1285.094570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1285.094615] CPU: 0 PID: 26029 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1285.094622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.094627] Call Trace: [ 1285.094648] dump_stack+0x1b2/0x283 [ 1285.094668] should_fail.cold+0x10a/0x154 [ 1285.094687] __alloc_pages_nodemask+0x22b/0x2730 [ 1285.094702] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1285.094718] ? kvmalloc_node+0x46/0xd0 [ 1285.094732] ? default_file_splice_read+0x17c/0x870 [ 1285.094742] ? do_splice_to+0xfb/0x150 [ 1285.094752] ? splice_direct_to_actor+0x20a/0x730 [ 1285.094761] ? do_splice_direct+0x164/0x210 [ 1285.094769] ? do_sendfile+0x469/0xaf0 [ 1285.094781] ? SyS_sendfile64+0xff/0x110 [ 1285.094793] ? do_syscall_64+0x1d5/0x640 [ 1285.094806] ? retint_kernel+0x2d/0x2d [ 1285.094820] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1285.094835] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1285.094851] ? retint_kernel+0x2d/0x2d [ 1285.094868] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1285.094888] ? check_preemption_disabled+0x35/0x240 [ 1285.094901] ? retint_kernel+0x2d/0x2d [ 1285.094923] alloc_pages_current+0xe7/0x1e0 [ 1285.094937] push_pipe+0x3ad/0x720 [ 1285.094957] iov_iter_get_pages_alloc+0x4da/0xe40 [ 1285.094972] ? iov_iter_pipe+0x2a/0x2b0 [ 1285.094983] ? iov_iter_get_pages+0xc70/0xc70 [ 1285.094994] ? iov_iter_pipe+0x93/0x2b0 [ 1285.095008] default_file_splice_read+0x17c/0x870 [ 1285.095020] ? depot_save_stack+0x10d/0x401 [ 1285.095038] ? do_splice_direct+0x210/0x210 [ 1285.095049] ? alloc_pipe_info+0x156/0x380 [ 1285.095058] ? splice_direct_to_actor+0x581/0x730 [ 1285.095066] ? do_splice_direct+0x164/0x210 [ 1285.095074] ? do_sendfile+0x469/0xaf0 [ 1285.095083] ? SyS_sendfile64+0xff/0x110 [ 1285.095092] ? retint_kernel+0x2d/0x2d [ 1285.095105] ? retint_kernel+0x2d/0x2d [ 1285.095118] ? fsnotify+0x897/0x1110 [ 1285.095138] ? __fsnotify_inode_delete+0x20/0x20 [ 1285.095154] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1285.095170] ? selinux_file_permission+0x159/0x440 [ 1285.095183] ? selinux_file_permission+0x32d/0x440 [ 1285.095194] ? avc_policy_seqno+0x5/0x10 [ 1285.095205] ? selinux_file_permission+0x7a/0x440 [ 1285.095222] ? security_file_permission+0x82/0x1e0 [ 1285.095234] ? rw_verify_area+0xe1/0x290 [ 1285.095246] ? do_splice_direct+0x210/0x210 [ 1285.095259] do_splice_to+0xfb/0x150 [ 1285.095269] ? alloc_pipe_info+0x294/0x380 [ 1285.095284] splice_direct_to_actor+0x20a/0x730 [ 1285.095299] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1285.095315] ? do_splice_to+0x150/0x150 [ 1285.095328] ? rw_verify_area+0xe1/0x290 [ 1285.095345] do_splice_direct+0x164/0x210 [ 1285.095361] ? splice_direct_to_actor+0x730/0x730 [ 1285.095378] ? rw_verify_area+0xe1/0x290 [ 1285.095403] do_sendfile+0x469/0xaf0 [ 1285.095423] ? do_compat_pwritev64+0x140/0x140 [ 1285.095444] ? SyS_write+0xff/0x210 [ 1285.095461] SyS_sendfile64+0xff/0x110 [ 1285.095473] ? SyS_sendfile+0x130/0x130 [ 1285.095485] ? do_syscall_64+0x4c/0x640 [ 1285.095497] ? SyS_sendfile+0x130/0x130 [ 1285.095509] do_syscall_64+0x1d5/0x640 [ 1285.095527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.095537] RIP: 0033:0x45cb29 [ 1285.095544] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1285.095556] RAX: ffffffffffffffda RBX: 00000000004fd6e0 RCX: 000000000045cb29 23:27:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) 23:27:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:04 executing program 0 (fault-call:9 fault-nth:6): socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) delete_module(&(0x7f0000000200)='skcipher\x00', 0xa00) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1000000007f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0xffffffffffffffff, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:04 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xc, 0x1, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008000, &(0x7f0000000300)=@abs, 0xffffffffffffff73) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000ebeff457177deb43700dc05a9400010400", @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="730a63db004d5e853789cb52a0a1a0e33e39a8680de5cae7484e312e331a62d97dd60000146a0bbfdaeb9f5f815740d856157cdd613f3759d6281ea6c65839eafd9b461440d2c3495ff767e432f6380fc724d38a77d1ded87536ff8f5210987d8607a632a93eb2397e2377edbb1a05ebfdd2cfa3b732183be455f6b1a528e93229ac9b8789a0445ff99017849ed52bbc29bfd8c6ed4c385cb8a5dbf33c12b9"], 0x44}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=@can={{0x4}, 0x5, 0x0, 0x0, 0x0, "f2aaad60ed31fc34"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}}, 0x0) [ 1285.095563] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1285.095570] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1285.095577] R10: 0050000000000443 R11: 0000000000000246 R12: 0000000000000008 [ 1285.095584] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007fe2c892a6d4 [ 1285.205589] binder: BINDER_SET_CONTEXT_MGR already set [ 1285.205604] binder: 25985:26032 ioctl 40046207 0 returned -16 [ 1285.206684] binder: BINDER_SET_CONTEXT_MGR already set [ 1285.206694] binder: 25985:26033 ioctl 40046207 0 returned -16 23:27:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x9, &(0x7f0000000700)=""/98, 0x62}, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900), 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ftruncate(r1, 0x10000) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1286.989857] FAULT_INJECTION: forcing a failure. [ 1286.989857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1287.033122] CPU: 0 PID: 26062 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1287.041083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.050452] Call Trace: [ 1287.053067] dump_stack+0x1b2/0x283 [ 1287.056701] should_fail.cold+0x10a/0x154 [ 1287.060855] __alloc_pages_nodemask+0x22b/0x2730 [ 1287.065647] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1287.070152] ? kvmalloc_node+0x46/0xd0 [ 1287.074044] ? default_file_splice_read+0x17c/0x870 [ 1287.079754] ? do_splice_to+0xfb/0x150 [ 1287.083677] ? splice_direct_to_actor+0x20a/0x730 [ 1287.088541] ? do_splice_direct+0x164/0x210 [ 1287.092863] ? do_sendfile+0x469/0xaf0 [ 1287.096751] ? SyS_sendfile64+0xff/0x110 [ 1287.100811] ? do_syscall_64+0x1d5/0x640 [ 1287.104875] ? retint_kernel+0x2d/0x2d [ 1287.108761] ? retint_kernel+0x2d/0x2d [ 1287.112650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.117495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1287.122264] ? retint_kernel+0x2d/0x2d [ 1287.126163] ? alloc_pages_current+0x196/0x1e0 [ 1287.130927] alloc_pages_current+0xe7/0x1e0 [ 1287.135257] push_pipe+0x3ad/0x720 [ 1287.138809] iov_iter_get_pages_alloc+0x4da/0xe40 [ 1287.143698] ? iov_iter_get_pages+0xc70/0xc70 [ 1287.148208] ? lock_downgrade+0x6e0/0x6e0 [ 1287.152359] ? iov_iter_pipe+0x93/0x2b0 [ 1287.156340] default_file_splice_read+0x17c/0x870 [ 1287.161184] ? _raw_spin_unlock_irq+0x5a/0x90 [ 1287.165707] ? finish_task_switch+0x178/0x610 [ 1287.170205] ? finish_task_switch+0x14d/0x610 [ 1287.174736] ? do_splice_direct+0x210/0x210 [ 1287.179062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1287.183823] ? check_preemption_disabled+0x35/0x240 [ 1287.188847] ? retint_kernel+0x2d/0x2d [ 1287.192767] ? fsnotify+0x897/0x1110 [ 1287.196578] ? __fsnotify_inode_delete+0x20/0x20 [ 1287.201339] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1287.208101] ? __inode_security_revalidate+0xac/0x120 [ 1287.213309] ? __inode_security_revalidate+0xcf/0x120 [ 1287.218505] ? avc_policy_seqno+0x5/0x10 [ 1287.222773] ? selinux_file_permission+0x7a/0x440 [ 1287.227623] ? security_file_permission+0x82/0x1e0 [ 1287.232574] ? rw_verify_area+0xe1/0x290 [ 1287.236655] ? do_splice_direct+0x210/0x210 [ 1287.240981] do_splice_to+0xfb/0x150 [ 1287.244695] ? alloc_pipe_info+0x294/0x380 [ 1287.248935] splice_direct_to_actor+0x20a/0x730 [ 1287.253609] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1287.258463] ? do_splice_to+0x150/0x150 [ 1287.262454] ? rw_verify_area+0xe1/0x290 [ 1287.266523] do_splice_direct+0x164/0x210 [ 1287.270691] ? splice_direct_to_actor+0x730/0x730 [ 1287.275546] ? rw_verify_area+0xe1/0x290 [ 1287.279611] do_sendfile+0x469/0xaf0 [ 1287.283336] ? do_compat_pwritev64+0x140/0x140 [ 1287.288041] ? fput+0xb/0x140 [ 1287.291155] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1287.296962] SyS_sendfile64+0xff/0x110 [ 1287.300856] ? SyS_sendfile+0x130/0x130 [ 1287.304832] ? do_syscall_64+0x4c/0x640 [ 1287.308814] ? SyS_sendfile+0x130/0x130 [ 1287.312794] do_syscall_64+0x1d5/0x640 [ 1287.316690] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.321881] RIP: 0033:0x45cb29 [ 1287.325100] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:27:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x7, 0x4, 0x1, 0x100, 0x1, 0x51c3, [], r4, r7, 0x0, 0x1, 0x1}, 0x40) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$peekuser(0x3, r1, 0x8c) [ 1287.332943] RAX: ffffffffffffffda RBX: 00000000004fd6e0 RCX: 000000000045cb29 [ 1287.340913] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1287.348201] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1287.355479] R10: 0050000000000443 R11: 0000000000000246 R12: 0000000000000008 [ 1287.362758] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007fe2c892a6d4 [ 1287.618480] binder: 26077:26080 unknown command 0 [ 1287.629119] binder: 26077:26080 ioctl c0306201 20000280 returned -22 23:27:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) 23:27:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000000c0)) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:05 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x5) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1287.684715] binder: BINDER_SET_CONTEXT_MGR already set [ 1287.684726] binder: 26077:26080 ioctl 40046207 0 returned -16 [ 1287.685255] binder: BINDER_SET_CONTEXT_MGR already set [ 1287.685263] binder: 26077:26082 ioctl 40046207 0 returned -16 [ 1287.685606] binder: 26077:26080 unknown command 56 [ 1287.685615] binder: 26077:26080 ioctl c0306201 20000280 returned -22 [ 1287.886010] binder: BINDER_SET_CONTEXT_MGR already set [ 1287.886034] binder: 26086:26087 ioctl 40046207 0 returned -16 [ 1287.894112] binder: unexpected work type, 4, not freed [ 1287.913674] binder: unexpected work type, 4, not freed 23:27:06 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000500)=""/24, 0x18}], 0x6, &(0x7f00000005c0)=""/81, 0x51}, 0x8}, {{&(0x7f0000000640)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/223, 0xdf}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/18, 0x12}], 0x4, &(0x7f0000001a00)=""/237, 0xed}, 0xfffffe01}, {{&(0x7f0000001b00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001b80)=""/198, 0xc6}, {&(0x7f0000001c80)=""/136, 0x88}, {&(0x7f0000001d40)=""/108, 0x6c}, {&(0x7f0000001900)=""/212, 0xd4}], 0x4, &(0x7f0000001f00)=""/166, 0xa6}, 0x20}], 0x4, 0x40002000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x22, 0xaec, 0xdeb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:06 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000000), 0x0, 0x8) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x224, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @private1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x7d00}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5bd9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "65b2ee59ff25468f6bf25de07cd2630a81f86648f4742020a93b08d8e1"}}, @TIPC_NLA_NODE_ID={0xef, 0x3, "746447c7d31104f52940926028fcc3f5f54906f3e4e207eaf6c54fe39adfa068de742bf7e3b2899643acf1bfc9cf4d3b77e56317031cd2b42f0e1de2e4160e5ea9f0b1a3bfc03820f12f34451e74ab53f6a4493a1f168ef903c1b154cc3ef160678dc30f34932cedb8b7d23ed90c68e28a20a62b5741be0bb64cc0e7b26c0ac48a21ecf9c206cb78d7d66fd23d65c7d4d351ace670d180e9d0fc1b83f3c5bf1e0ea381bffc72c1cfbf7df3d5aebe9be6c35946a7c2d21565a0225ce986072ff085564fdbef6002b53745d3f30f2cdefb6d8a5bfcc0ebbc824495c17e0c4f51239499d3d0f27a176123b6e9"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r4 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) r5 = getpid() setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000640)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) process_vm_writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/216, 0xd8}], 0x4, &(0x7f0000000540)=[{&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x4, 0x0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r3}, 0x4, 0x6, 0x9}) sendfile(r1, r0, 0x0, 0x800000080004103) 23:27:06 executing program 0: socketpair(0x22, 0x3, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x761}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xce}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20048009}, 0x840) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() setitimer(0x3, &(0x7f00000000c0), &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x5, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff0c, 0x2, 0x0, 0x0, 0x803}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000002c0)={0x20000000, 0xd87, 0x1c}) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:27:07 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xcc884}, 0x4c080) 23:27:07 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x4000000001d, 0x5, 0x5) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)={0x0, 0x0, "d245c0709eacb76b71b300e945bc5f6f16ff1e02452908ac2621dcc161144f87906c641386846fd67c578c66dbbba4980fa243791b90ca425f9a4943b77119a0fe2208fe2da8dc6eebb80c686ae28b563f81e941096dc8fc3e0433d317027b41fba80860ec555d0e0106006ba7141cce568fe1d137a458f84b4eea3b3f3551d60666a6e473006e79807842237bb618951a6b8a7d9b1099dabba6f88570eabd9ade99b4813ffe68db60bbaaf54b980342c82c65"}, 0xbb, r3) 23:27:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) dup2(r4, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x62, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="08870206fd8fbdbb630741920300000013b95a839253d7dc08b32afe03ae38e5e25de7e707618fa4ebdf46d00000a10c11fe473ac4156ad508", 0x39}], 0x1, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x14, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x1f}) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:08 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x108, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x1932}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xabfc}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0xe3}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000090) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socket$caif_stream(0x25, 0x1, 0x1) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x101, 0x0, 0x2}, 0x0, 0x8000000000, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1289.925822] can: request_module (can-proto-5) failed. [ 1290.615113] can: request_module (can-proto-5) failed. 23:27:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x75, 0x4) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:09 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x12d) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x81, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1291.718043] binder: BINDER_SET_CONTEXT_MGR already set [ 1291.743446] binder: 26225:26227 ioctl 40046207 0 returned -16 23:27:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x1e, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="62f8540d5ee1e24c7d17590aa8f9609dc1af45959de0ced481ab27d8884cf56e315c12a43ed904a7c1d76bc8e6feb1f58bf29b445b6732df2049cfd65d27ddf1db3015a7787d9bb3245332a3887dde2233152e961d83ef", @ANYRES32], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/mcfilter6\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="a3edd02e93861077b3891da85907aacb4b592867b97131571c51bb4cda041bf5844da51c393199d925d69adb71b07bd9df819627aa983c00297d16c870c91e595be26fe7b2c05b4f086ee8c4760b4d59e79cc0f1542c5e77777cccf75b6394d462c3a0b001d5b142a272b1231805a342ef9c", 0x72}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000580)="4de97e861921c9878d9bd7322e20986062a07fffab515245f5180e7f858cc8f6b5eec4352491581c57b1b90d43002fe5f5dc04f65efe5ed613fb841508ca3ade189f57d7ded7131e8968e4348ce9e25d76d95ea055b54eb29dd164fed482bfcef973e470c4b9e7fd502cc1e684002a9e7939266c2f209a8e960a6707b21b3ccdcaa16fc7344d0ca75434c866c6d1c36afa689201c4c09669503b199b6e464c5dd5ab03b5f97ef24ad214cf9c06f4fd1a6c6f84054c67553c8adf09fe171dbf9a23863e3862b389be5354efdecf22ee411ec0f21d79ca03645702a987eb4eff549df8c75868ed7a3d2de5d279d682c5ed3fe7c01d551ae3c55f", 0xf9}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x58}, 0x2cc478f31b22b227) sendfile(r5, r4, 0x0, 0x800000080004103) 23:27:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1292.551064] binder: BINDER_SET_CONTEXT_MGR already set [ 1292.561794] binder: BINDER_SET_CONTEXT_MGR already set [ 1292.569719] binder: 26225:26247 ioctl 40046207 0 returned -16 23:27:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = socket(0x40000000002, 0x3, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x2, 0x80, 0xffff, 0x50313459, [0x0, 0x10000], [0x9, 0x3f], 0x13a}}) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x25}, @remote]}, 0x24) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1292.599248] binder: 26237:26248 ioctl 40046207 0 returned -16 23:27:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0x44, 0x5, &(0x7f0000001540)=[{&(0x7f00000002c0)="51dd64229b955ff773c73a47a9b2fa67ed4cc5a088c348232a5efb7a9dacb9a4466ab208552fc67b579828e709f36154666bb1d691434eebd39e773c219ffc3d965f16bab7cbefda31", 0x49, 0xd4}, {&(0x7f0000000380)="89795f6a3c924c67f50dd2cff390e682486e034f24", 0x15}, {&(0x7f00000003c0)="98703d4dec45daae24a41418381ba35ba2bac12663bc4fa445709acbe55d1029f0b88d326dc75278ab3edde350bfa79701e6d2abcbe80e1975dfbc191c96d82bc3c3d4efc617be552274abde288b478ef39f36f5de71f111ca89702f989d06f0697b687d7cee8043fb7288dd7ac38f2003d4b8a172a415595440a97ce69b6da4f78292e41a40170ba577cd27a80097df9d83aa9fc891cb30c0d90f98a240a375f1f9207a48ca13a8b1e66bc907be53e06aa6af8a7d5c0165267d7c37f797e9fe4bf1d29227b8c09bc582a5360d9b00a1c906e85dafe7b22b6182922a89b69faa27401b029ec62a8f0bdbe4fe3648fa566360f376ea11570359317e1a9ca3cf8d033842dccd2dbc2a4b75b36a27e31e1ab894fd9530d11f35cedfe5ad4aa7a41dde6e7b7401b986390caddfe163fbd0c0ced98930be2d822f44969de1490568801377f1bf63d540b09edfe02e956ece1218163caca85fa502a20478bf3d5d0db0665a36c3a0231fd4be6168fc5b176420045f560960cf8316d17ecf52d6e766dbc2b0fab24ff7733feb84385021c3a13ccff51fd9d72f283b77ce87347e8848ca468fcd7c813aa7c1144cd3b00e8bff26732c1f8d5e89f57b41999c606125bb240e73c17b144d6840fcc821c463d4c24985901cf5b83302a5e1a4d82fe80a0390c2e481b25610b3b14c4568c6197acaa9f4791d7f25395b8a877fa31f45e0fbf4bd50acb81772d4a026848f7a943a50883149a3f4e5235c83a6a30edc5231d6806f1effae6cc1146d21a17d5dea6b47a05a75ce922fb88476133e9333b1329f8a6f45ef13aa1d97bfc191fd92ee1bd45c10fafa3a2d6625642abdf81679a2936782556428f1830dc9a6b61cb1dae0b9b06a2881997ff0c86444592c4d596c4154d99192c3d1b2472f54ae6120117e7f67c2955cc59b5e10e81ea89e54e6faef6400a4e4e5f096844aaf23acafc0c6163b6a7c85abee734c714a847b6b4e147c69a2dca99c7cdfcdf1edc9771624f046bff8c614331f29a7bd80a5440860d079b9cb17743736cf3ea71cafcb802f80eaa1146d8349432241738a5cdd0a06bdf0bba314f3654a38e20c70f248aadd98c1659b6cdb2a1419d7fb1da3bb86127e389b7904dccbada5bf21054cda1c7853d29f87577baf961eed76f0b3cc06138a166ee075786c585a479051f83cca7cab8802ea62bbd9240221f1f040ab9a35bda9d89453d7c867ea9171dade2820f998bc4cfb80ea94fa11b8dba88c6467587ffd981fe59d8252062ad411243b90482a2c0f2e62c251f053e28cc5f190ab257afe92deb454bf9bdb0fafc7ffd633c2b50c077b3c508d459599274e27e2e90dce767d96a03f25cf0d470ad2b281d783b23581c9f8e6096bfff59e6fbd1c4efd8acc0970f379642a92699241b8f565cb010d49aeeaf14c665e0ab675a3e44a09784a3131e1ea0583ebe455c05d0dec9606e463e7c3a252ef40b424a60d53a9d099bccfd85ce8ef787d59d4c33f671f5bd4c8be2c96fa94feaf4aa0c6dd7bc3267ce39584080ad2c04acf39bb5879e681dd340ae8fef59da6b3e4cf0ff51882ab77a04653971bd34cf9a247757fba40d48646db223848bcebc46d3714e8ba7b51cf182b6afb2f57560e7eda7d26e94fd2a01f570ded78cd3ad67c3e13a557ecc3e8b49b541e756d6e8812a31dc2837ec6fad60f8dd8ef8226c03f396dbf1550d5561c8f5ddf654210525f3fde6bd9bdc9c67ee0a51739bf1697728b64ff00db44c4070e135cbcb7bcb32e4a4dd1dd2dcc7cf18f9eccb814c33b7a883ae00ddc5fbb660ded93d0e1e3eba9b9d92153a4101fb3b4adb68dd878d05d2eda3cc95b0013708740915f1e31bd31a1ee1d24779a1758b596ed9007181f3ada790747c8efd58e93d6a1cd30633d566750915eab43111df80307514ef501bd5a95996280a37198d81fdb643fd688c055c258a0f61b6cdc3cb32ec230ec24f4c0ea3106cdbe0d22c0dffe03f561abe67284ef0433ce246f9f83e6aac67543856e8e492dfcdae80e00cd8659d0278266ce365070d4974ceb9ffe10f7996f8f7a03e3c95cb93c70d26b6264a1576cb7311a1795df0ee992a2170f48745f53c92e08cc42d2313cc75e9dc6439a8bc5406c84af9f90480671d33671d5adad0a9e40f33cdd7c02a8cb0fd043f38b54efd2eb42871013d0916cc3e14a3d2016777c13f8e1bc0a6073869c4a54eddc5ce6bfda30e15c144c0e3594397f269acb1d275ca15e0a6b22016720c8a80f51bb9a82b27c926f6d13c9fc1e3c7ec7ed338e6ef3cb0a34db67238d424ed9ed0cd539d9577eb8a285f98688d5809bc12e53808aad66621502718fd83bb5989b1e3bad46f8b7ff525062a186cb4f56d99202a4ac4cac5000b22bafb2b9f3a78db86a10457c40c6082faed90ef3f7fec224ff830b5176c34fd21b4b38933e3719e3449212d7ef829e093140834bf4a4aa208c1bd9ef4503d21131de01bd0d133f9fca6ed2a3ab2eb592a5d25c1e6c8b3e10d562417e7f2a078b5430ba0d2754e6431b351d425eb6c05c43fd7fda9ca93375b2142f0b58029d61e926adfb20c1af803169d7bcf163ba7ad427f26741628dacf2f4584b3f30e13758111644a8953cdd577f4b72a9733c38389ef3f6bf95612315f6150aec5c9f4bcdce2f0a0bd04fa9d11f3728cded5ed9ec86d742f00567c685a5970832ba81fe850cf60f1511fbdf6011b12c9b83868c9c88e88ed1a229a2365be72072bf471a40372f1aa2f02309f63ffa139c3eaeabf63dcdaabdfbf9dcad6ccea012da2988d32072e712d26202fb88436014ce6445ee882874466df949d06886d2c221896cc83e62432bf2a7a08237014c73350805e0554ea141f3bd05150df34032f55bb16c8de05cecf3e40f3757c90fb5cf9adb23a11c5a0b374c80b3abb0212527127999b3cfea3d014a8ae26a454a23eee2ab4a7bc9c50b69350ed3fa97df883435ecb79b85902e85fc19723260ddfadec02a3dc9e44cb57d42e9e8f6bf3fae87f03fe003aec43ab221b613e7e15791fd706fdd3991115449f065214d322f0a89f8be4c73232196dde1c4ac447fc7e98ecece0cbba1308f3bacc6fd876d538ba5efa88e03a9b137e1f4e43db90d64b3e12c5be43c556c996ade57986433c61dd01916cf84801b84ab08ce1587c34c58b55f220e5cf5f383d401b6828535aac329d0d5d5c6c4de0de18b35f716613ed21571eb0d4e09b19a0485aa442e83ae9c74e734b5930f4249cfac28165a8a33073a250a8b7b81d85baf18e49243a93fd304a2b6275b345a91251b9013c5839fa4c43144b91cffc48ee821d7a5bb598b4df6ff138a4c39d7d84a08007da59e430e3dc6dabe13baf21b6d95d17cb3b0e007026a155bf8d60ca19cc15e1f06381df56ee3343c60de4b6e6d27d3ca43f23a592f5e5a968a35b2d204c921cff8092393c504cde53eda6483248ad3b8058fbff7cac627df23ff49c5cb18044549fa17c6c7de284782fa6846990409da52c3f9c1522dfa2a1447613ce813af76d08d00b47caa069da6c67021ec718d73ac8ff507d9b3e52f056b0b047eb361c734b2d12e4ab66d5ebd5496813684c290df36d3fd1a30b1233d69aca2bd0e7bea3f4220ec4b1fde71823ecd3d42ab5a94e4fa9d0e30c2f92afe6293abbeb1136dd6a4be0e3849903e50d07ac78b6febf99a9846c02d30f9821c602ab73688a40fa708cdc155fce069d8ed7aca96501d0e70e6d03969ef32689f70a7e5007ccd2946c366b0a1dd8db67753e244ed1c740acf275e4508e87de80c4a1b4cb9f70a3d108d16283bdba8d56050401b08139d1c66d89157c8b2bb686bcf09ea803efc0519e28a9db7f404f1c46fb4c708b400fa0588a89eb606be2cf646341b684f18f1bca955f631c20a33bb259caa2d4e35fca900978aac3af679c0c85d4e02b01dd2f3747883d6a8c0a1d135fa46b145b1e835883d771ef34571086e8b77761ac17b9d43e9b52a7514ee78aa02168015a7e01e0660f10661ef62f29ec2784511c1e1573153536d53d1551ff1e567ac743499a38168e8df0d1e57022edd5c53c066025ad86b5b32193e488bcdfa2f3ce1cdd39355a441a989b173791b374976be667899a4ed0b5e747aaee977cc56fee50f11d385976a535805e9ead1e507607e2f3a8e6fcb23774ca299e7d0d9036d909dc5979cda0c284f65f50f37298a24089043bbaae6cf1ea371cf235eea777f51bab0b6fae98d07cd50fcc8d011508867d40633237d1782eb421e0a41b5a1433c1a5be4f60384558c5995696ef8a0744f1d2e06cc935d8e79203554254b81d9d5692262b26b4349fe88e4a01afbc65fb58afae24c4e0455463ac76b70b5247c80f5133e96043ce3249f2936dae7ea2a2f8c776d1fbadc9b0cfe952863bfafe9d3846e704c392c075383d6c02bf6641b0d3c694b74afb29e4c6cdbab99af14e0155145382ed6858ce43c7bb1386fb83db7cb0c15b341f06187fb33b146587af4d0524b7336b21ecd579e78107d228a081152e6b59194cfb3e39655b9649970774b77c9d2d430f85370cebefa1187108c12a045cd655d2f0808b83ee38902bfda4117002a8be350be510b103fca44eaf34d7b00741caa8b6a9583c750aa15fe6dfd72a32d916986ffffd34f69268d6e994d792be8fa1f3f5ffe62bae6a98900b3126c840697245c0f4ae28c045d0fcbbfd5db8305ec5023384eef4c5455e2037a60af90828beb050b1472310e9f8c1d739471b2bd948d36ffee585b4ed28514395f2c357805a967169285be5d85b1c16007a577e2e9d00fd5c7f4540bbb71a7a9ccf672f189eccda5e4bd744a3710262fa291ee8921e400faa1d3b525b34ef0cde597ea1375a4475150e9edd174bf9e8bb5b2a97dc6891f729facbe69f6e4cfff3daaf6671e7973ddd23b998497c0ed31de4dd2a23e30621292b95a8cf440c3f259e5349a72a607b9b97b32591ad3797e41bab0a4179641c438fff5880c2142d0035e4f860b87fde3707e6d9835b2757d9d370012f9b4e0d2a199ba1f432afbff371211c7c307478ec5f371f10f33ad094356272eec674300801906eaefd58e1d7a86927dee7957f0884ab71d65a66b6b4e66e2b400a26df04e337d72c341cf5a8ef055a9c018e2c25883c1c94772fa64568e32020b6338e137c7d9e4a9078b97c92a072a4d2c1a0d5dac956f0681d05c34c6d9be408e4113e0ab28e5005c8ca624b6cf858d5ec7259aca0a8f0c9e78205a5c0509ce51405450e512509023a9720f2322f6b6f39073f5766de9605a00dc3ca6f66b16d018c049aee73234aca1028324860179c3bc474e0d6b92fcad7e7bbe66fae7dc62088eb4ed2d78b295c74ad08d2de65636649963b10f72ab96295323e914e01bda3ae17ac538d232a62ac1f56709d542f20851a15f93cba754b60da07ce07625f2104f4603d6fbf4cf0eef204480b3123c25940b9158d02edac8dc997afaaf287ae4ed744f9b6232641468ddf294741d86a16dc39d9ca30032db1cd3b9d850c80078e02512696a5347260cd0db94ca27687282c4c3cc37f374c761724d2ff47a716568fda900eb510afc310cc44964a94699558612bac8711ed02017d7746312c45db57df519dc1521d7d84c8fd50bb23668d2d90f4398015283b01787060cc7c6c858684982285b0703cdd2ae988057e376fc7dbef81e425adb449371ada8e579be5d1b04331fe0ec7b6313a8796f8c24b45878a1bea13851207dfc7a0af37076a80445211b06577b9666fe1950325a8eb80d1c134acf931fd8", 0x1000, 0x100000}, {&(0x7f00000013c0)="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", 0xfb, 0xfffffffffffffff9}, {&(0x7f00000014c0)="35225b2c96c9830cc1ec53a8768ee7368be70476edbcf3b625bb60b7f8f10f8696b71dddd7b73fceaeed630fa273c6fc1bc4cdb54fc91ce07107d71aa4b41b763e6ad618a9b34780324ffaa39a4a6534840ad28e105ba68e675fd540aa91f948acf171aee2ab1cbd57fe7485f49bdd96d55e2bbce1b4f39852bfd5", 0x7b, 0x9}], 0x200008, &(0x7f00000015c0)='skcipher\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:10 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x8001e, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4004880}, 0x80) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1292.642169] binder: BINDER_SET_CONTEXT_MGR already set 23:27:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) statx(r0, &(0x7f0000000100)='./file0\x00', 0x400, 0x8, &(0x7f0000000140)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x10005, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup(r3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) sendfile(r3, r0, 0x0, 0x800000080004103) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1292.776733] binder: 26237:26248 ioctl 40046207 0 returned -16 [ 1292.836065] 8021q: adding VLAN 0 to HW filter on device ipvlan4 23:27:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x4000000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xf1c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000380)="c3b5831b0ae35c5b350e01b6ad3575f7c6a85d1c0ef5cfd4e9732df7cf566fd81dd85db3967911684804605b8385b0cea5b4519724dc3a034ea3da9b1eb84e8d2aeb5d503457e564efb72cb3b37cb12cc4fa23a7223d9f7a2021a58a5ce982314c3b37c8d7dbb536c58e2058eb6e120b194b2cf3a0a00c2d0ae21091842e90134d0e0faa879940fe1d5d5a172ab4aefcafd80d16d2a1782c693d94bc", 0x9c) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105002, 0x0) r4 = socket(0x1a, 0x80000, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x3, 0x4, 0x2, 0x920f}) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x80000000) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1c3a0440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="40a7125a1d1ef0f2fc5b58d77cc0217a28"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)=r6) 23:27:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket(0x2, 0x3, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1293.702782] binder: 26307:26310 unknown command 1511171904 [ 1293.714984] binder: 26307:26310 ioctl c0306201 20000200 returned -22 [ 1293.741493] binder: 26307:26310 ioctl c0502100 20000000 returned -22 23:27:11 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x200, 0x82, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990903, 0x1, [], @string=&(0x7f0000000000)=0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="053e63defb31f56ba9489e84558c598dfa8c30a377eaa25baae8d330f746946e37a6719c7bcc2d23af2c70ac83bd1a7e1d432418c2759584fb90e9b801198606837850d1f674e2cfc5445573240dbaee72d0d2cb952c14ebf20d575ffc71d9987a4f4646ec8301aca90cd03fde637a85a31f5fb5c945", @ANYRES16=r3, @ANYBLOB="01efff7fffffffffff030c0000001804008007000100696200000c0002800800020001010000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x254, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6bd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2e, 0x3, "b18762731aeb95decfb342b1fcb46786bbc4020fe631091edefcf57453c8868efbaaec239d2c80f57501"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2c3ac4344f4a9f71183a8252ae86038059fdfac3bf47b1e0fbc97eb30c8a91572a741d"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf, 0x3, "eb5d35091707f4a5fe87bf"}, @TIPC_NLA_NODE_ID={0x60, 0x3, "bba93957396643f5927cb068c9e424c06f67de172aeb883c134331cbc0ea99e7a7ed84ca4cad537871b6f65b4e0c3f257bc291f94752475f855bd8130d48be39173d2de6cadeae128054bc881cdbb0e2b982965210588866695fb8a6"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2037}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x67da}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4e8783db}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x254}}, 0x20002800) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r5 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r4, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1293.763480] binder: BINDER_SET_CONTEXT_MGR already set [ 1293.776011] binder: 26307:26312 ioctl 40046207 0 returned -16 [ 1293.786551] binder: 26307:26312 unknown command 1511171904 [ 1293.803844] binder: 26307:26312 ioctl c0306201 20000200 returned -22 23:27:11 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfff, 0x80, 0x1, 0x81}, {0x3ff, 0x6, 0x0, 0x1f}, {0xb8, 0x3, 0x5d, 0x3}, {0x20, 0x1, 0x7, 0x6}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$char_usb(r3, &(0x7f0000000080)="9c4e227357f44bf5133475ce4b976186bb40df7cf9fa9f4b8dccf5963f5f1f3cc520cd85ea0b5d3393b83d4cb78901c3709b25abbeca8464b38d026a7fcbd3e1053070df6f0a7041bee49aab63bfbcb35a1569676df2a747edd27cda98fe9b1c375713fe70", 0x65) [ 1293.815555] binder: 26307:26312 ioctl c0502100 20000000 returned -22 23:27:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1412, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044001}, 0x4004804) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1293.862891] binder: BINDER_SET_CONTEXT_MGR already set [ 1293.872165] binder: 26321:26322 ioctl 40046207 0 returned -16 [ 1293.910064] binder: BINDER_SET_CONTEXT_MGR already set [ 1293.915920] binder: 26321:26323 ioctl 40046207 0 returned -16 [ 1293.922240] binder: unexpected work type, 4, not freed 23:27:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20040010) 23:27:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f00000001c0)=0x2) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x6}, 0x10) 23:27:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x2, 0x2e2d, 0x1, 0x29d3}) [ 1294.249911] binder: 26344:26347 ioctl 4020aea5 20000000 returned -22 [ 1294.392515] binder: BINDER_SET_CONTEXT_MGR already set [ 1294.398439] binder: 26344:26347 ioctl 40046207 0 returned -16 [ 1294.467851] binder: unexpected work type, 4, not freed 23:27:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05630440b87dda0045deb3885d89040722f16dace3c8b00d52f0594e7175efe14bcde7ba32c542ee7ba6b46d18fe816a33c6b869b89dc5b6863a1c4a87bd5bacda47418a94fb9a14af567d05cf652c21c1d7a975a67aefb919351a759d3efaa824907c13d3d0d1e11215059083f5bde3c78bea2d1228c47a34f3a09214ec5a0cecfafdeda1c55c274b41ef"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04630440940a36847d1ec44a9858502e7564776db2118f830ccedcd13bfafed9d95f60a2274d9a3815b011c422c7480d70835d7ed88327518c00872154b1fb2fc6155b81203e0d685d4457f15daaaf024d0eb9d8fe4ab178bedb653c49d5a524100154e6290c78e219010fd63857f918d89a991a8c9f5a359f92add00f54447db7ceb53ca169c5a7c23aec77f22851b45ce271081beaf6659ca6057d00000000"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00010000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x44200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x7ffffffffd}, 0x0, 0xfffffffffffffffc, r0, 0x0) 23:27:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x4000800, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000df}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='rose0\x00', 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r3, 0xfff8}, 0x8) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) sendfile(r2, r0, 0x0, 0x800000080004103) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x301000, 0x0) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) [ 1294.670754] binder: BINDER_SET_CONTEXT_MGR already set 23:27:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x7bde}, 0xf) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1294.691270] binder: 26353:26363 ioctl 40046207 0 returned -16 23:27:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0xfc, 0x0, 0x5, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x18ad8, 0x190, 0x20, 0x0, 0x8000000000000000, 0x0, 0x200}, r0, 0x1, 0xffffffffffffffff, 0x8) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x4008000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) fadvise64(r2, 0x7f, 0x101, 0x3) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) bind$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x5, 0x3, 0x8, "3b0ebdca513fb10731ce5d1be49bbf96aaf8ef24553d66404f4e53dc7d86bad2aa97457276864a92a0a007d3602f9fdfc346ca93bc35d67b2e5f578bc19261"}, 0x60) fsync(r3) 23:27:12 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = socket(0x1a, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xf5dfffb, 0xe1, 0xffff, r2, 0x0, &(0x7f0000000000)={0x9a0917, 0x1, [], @value=0xffffffe0}}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)=0x9) sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:14 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x141000) sendto$unix(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0xffffffffffffff90) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_1\x00', 0xf) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:14 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f3ca31635caa9a18a1ff0700006953e0d97dbb90dd2c52acbc12cdfa64216fed93656efccff365976f36c24c36672af107e6b82dfb6ad2ab11e150317d4b969b46c0a7a06d0d30f60d053c0b3422a77d607dfe669db4f841d464e8cd5e0068d812b77b239bd87c64defc47aaee1a82573e574460cda1deee179bb1ee0e6ed1af96fbc6bcfccf3bd86d2f6d1eb164a0f36fc32ca31209e4557529f7d372b18fdcbed52b7a3d1849a9f2082bf471766805f4f3d81271a6e084438c960384cd8ab3b8318d22398ff14a65113eaa3773fb7356fb0e6574a3"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c685bf5b32f5c50d7b6b8c3378aebfbd2310bb773f44110c0ee16401ffbd12c9eda272340c7dcd3ab64dbc3d27"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x3, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) connect$netrom(r4, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4000000042380300"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000100)) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xffffffffffffff19, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x4}, @fda={0x73682a85, 0x4}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x2}, @request_death, @increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0xd1, 0x2, 0x1, 0x6, 0x8, "efbb829696abf90cfe6b0229fd1c8737b0d959"}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r5, 0x0) 23:27:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000000c0)) 23:27:14 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0xb) 23:27:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r1, r0, 0x0, 0xb88) [ 1297.182125] binder: 26410:26416 unknown command 64 [ 1297.188762] binder: 26410:26416 ioctl c0306201 20000200 returned -22 23:27:14 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_targets\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x800000080004103) [ 1297.253219] binder: 26410:26429 ioctl 5456 20000000 returned -22 23:27:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xaf, 0x4, 0xfb, "5b27d75158be7882443f86e185a42159", "5455b890e3ef360ebb618223d82419c8f77f32c01a6fecc6077284b38f6e5d9045b66c60776ac6f3581a06952b4ba35ecf5297eb804a51df6436877c8edbe57aaf6ecc505b564200362ea715602af0806fd8c79919a2b30bcf8f26f17f7c5887519ddd6f2a1624c6985f6a1d48025d2e850c9af08c16138947c7f143391f86e5fa238b06af0d800854dc8cc93029d0ec616a41756ddab43f6c73"}, 0xaf, 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000480)="0109fb6b3701771e3932bdc8906b68f19c803d2b6e99b076d7d63bf7237164f62e9cb4e7bd66a77492d4c6f406b385738f8ea382136dabd5d1584ec47ad8b663e018a2cd9edd9d66cf07cb15659934320021a65c471e712ac3fb902a02ec7727881a206027ecfa696a0c73", 0x6b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={'sha3-256\x00'}}) keyctl$update(0x2, r4, &(0x7f0000000140)="e9c366e3b376733543829183527b577a0f", 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in=@private=0xa010101, 0x4e22, 0xffff, 0x4e24, 0x4, 0xa, 0x80, 0x80, 0x73, r8, r10}, {0x6, 0x6, 0x9de, 0x401, 0x8, 0xfff, 0xfff, 0x100000001}, {0x5, 0x100, 0x7fffffff, 0x10000}, 0x9, 0x6e6bb8, 0x2, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0xb}, 0x3505, 0x1, 0x0, 0x8, 0x9, 0x7, 0x200}}, 0xe8) sendfile(r1, r0, 0x0, 0x800000080004103) 23:27:15 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000040), 0x10) 23:27:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_vs\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x25ac, 0x6, 0x1, 0x101, 0x2, 0x101, 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x800000080004103) [ 1297.968343] binder: BINDER_SET_CONTEXT_MGR already set 23:27:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x40000, 0x4) fcntl$setstatus(r5, 0x4, 0x6100) [ 1298.030182] binder: 26410:26429 ioctl 40046207 0 returned -16 [ 1298.047823] binder: BINDER_SET_CONTEXT_MGR already set [ 1298.065135] binder: 26410:26457 ioctl 40046207 0 returned -16 [ 1298.099753] binder: 26410:26429 ioctl 5456 20000000 returned -22 23:27:15 executing program 0: socket$inet6(0xa, 0x2, 0xfffffffc) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0xccbf8000) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:15 executing program 2: r0 = socket(0x18, 0x80a, 0x3) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x800, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r5 = syz_open_pts(r4, 0x80) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x3f, 0x18, "149ff0d45441e1c0"}) 23:27:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000380)=""/191) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:16 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1298.540037] binder: 26476:26484 ioctl 80045430 7faa64a8cbcc returned -22 [ 1298.609164] binder: BINDER_SET_CONTEXT_MGR already set [ 1298.624738] binder: 26476:26496 ioctl 40046207 0 returned -16 [ 1298.643656] binder: unexpected work type, 4, not freed [ 1298.651884] binder: 26476:26488 ioctl 80045430 7faa64a6bbcc returned -22 23:27:16 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440128e660d64b050716466c9134de2c7405ac3565314d0c76519a66d"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:16 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) sendfile(r2, r0, 0x0, 0x800000080004100) 23:27:16 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffff, 0x49000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x9}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f00000000c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x27f, 0x6fd42e01bd3c7467, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:16 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:16 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/tcp6\x00') accept4$unix(r2, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x800000080004103) 23:27:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0xb3}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) socketpair(0x3, 0x3, 0x9, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, 0x0, 0x1) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 23:27:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c1c0440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r0, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x3, 0x0}, @fda={0x73682a85, 0x400000000002, 0x0, 0xfffffffffffffffd}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death={0x400c630e, 0xfffffffe}], 0x0, 0x0, 0x0}) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000080)) 23:27:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={[], 0xb}}, 0x44, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 'hsr0\x00'}) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x6000) shmctl$IPC_RMID(r2, 0x0) 23:27:17 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@mcast1, 0x4b, r5}) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @enter_looper, @request_death], 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000440)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x10001, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c9d926, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xb}, 0x205, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1300.405287] 8021q: adding VLAN 0 to HW filter on device ipvlan2 23:27:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syncfs(r1) sysfs$1(0x1, &(0x7f0000000040)='\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x40208, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x40000000002, 0x3, 0x2) fcntl$setpipe(r3, 0x407, 0x6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x4300) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="79fcfffffff4ffff0500000046f8cefb21b7982a3420a3471fe045762ee65b514fc09e32f37081de3a24948106055cac69b95a5c60862c47b6e8065ed01d412862882a866d00"/83], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3f}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x8, 0x54, 0x0, 0x4e, 0x0, 0x7, 0x20, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0x40, 0x2, 0xffffb8d3, 0x7, 0x1000, 0xd26, 0x6}, r4, 0xe, r1, 0x8) [ 1300.870138] binder: 26604:26607 unknown command -903 [ 1300.886125] binder: 26604:26607 ioctl c0306201 20000280 returned -22 [ 1300.902674] binder: BINDER_SET_CONTEXT_MGR already set [ 1300.906365] binder: BINDER_SET_CONTEXT_MGR already set [ 1300.913896] binder: 26597:26610 ioctl 40046207 0 returned -16 [ 1300.913951] binder: 26604:26608 ioctl 40046207 0 returned -16 [ 1300.929203] binder: BINDER_SET_CONTEXT_MGR already set [ 1300.936200] binder: 26604:26608 unknown command -903 [ 1300.946290] binder: 26604:26608 ioctl c0306201 20000280 returned -22 23:27:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xfffd, r0, &(0x7f0000000000)="ee2d0e625f27b88c57fdbf09fc03128eede15fb0bf09feef335f41a9bac9071fe8ac1b33ab94961d27e110cc0c05914810d70bfb45e09e1a45f30e0244c001c4dcd0d446e9f2d299fdfd2853e01cb9f44acfb6a852b7f8cd6268ea69dfae424f27d82ddd442dc76c294909c2e318aef419f5edc6245a2b15bb8ff89d40f493ce864a847184147a093ebe28e75bda6fa87f27cbda5589a5d034f20cd8ceb20048ec3186fd4db6", 0xa6, 0x2, 0x0, 0x2, r3}, &(0x7f0000000100)) [ 1300.973949] binder: 26597:26610 ioctl 40046207 0 returned -16 [ 1300.988643] binder: 26597:26613 unknown command 1074011164 23:27:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x9}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1301.032163] binder: 26597:26619 ioctl 5405 20000040 returned -22 [ 1301.040466] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.045764] binder: 26615:26618 ioctl 40046207 0 returned -16 [ 1301.059203] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.064628] binder: 26615:26620 ioctl 40046207 0 returned -16 [ 1301.065349] binder: unexpected work type, 4, not freed 23:27:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:18 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) ioctl$TIOCCBRK(r1, 0x5428) r2 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0xfffffffe}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r2, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1301.128501] binder: 26597:26613 ioctl c0306201 20000280 returned -22 [ 1301.165886] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1301.594015] binder: 26597:26613 unknown command 1074011164 [ 1301.605097] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.612375] binder: 26597:26610 ioctl 40046207 0 returned -16 [ 1301.622883] binder: 26597:26613 ioctl c0306201 20000280 returned -22 [ 1301.635595] binder: 26597:26613 ioctl 5405 20000040 returned -22 23:27:19 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@ll, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000040)=""/41, 0xb}, {&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000540)=""/100, 0x64}], 0x5, &(0x7f0000000640)=""/248, 0xf8}, 0x7ffffffd}], 0x2, 0x2100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) 23:27:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffd, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000380)={0x1, @vbi={0x7, 0x7ff, 0x6, 0x49433553, [0xbe3, 0x10000], [0x4], 0x1}}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) vmsplice(r0, 0x0, 0x0, 0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000083d32ec54de9b65dbc77c1e8a244712bb5c5a4d0932f4bb177dc1629fcc47fffe1f62879f0d638eada3ad8a3a2e171d773a3e0ab7a6cb4a45c163c96bf14fda45ee434482c090000000f3c84a26baf15ecdda0bbb529458f3d6c665f9aa3c586eea86dbd8100a8202d439a82f8483faa54541a48522c2a", @ANYRES32=r5, @ANYBLOB="000427bd7000fedbdf250600000014000600636169663000"/34], 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x200000d0) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') socket$phonet(0x23, 0x2, 0x1) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter\x00') r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="046304dcd790a04e220ead387ace8ae6f82c7c686f6f0516f7ec79e5fefa502e6127608728d1975e7db780889aead7480e3acf8bb0"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x7, 0x80, 0x6, 0x0, 0x80000001, 0x2020, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xbb2}, 0x4000, 0x200, 0x8001, 0x0, 0x0, 0x1, 0x7f}, r2, 0xb, r5, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$caif_stream(0x25, 0x1, 0x5) sendfile(r6, r1, 0x0, 0x800000080004103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x3}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000380)={&(0x7f00000001c0)=[0x5], 0x1, 0x9b7, 0x1, 0x8, 0x8, 0x6, 0x7, {0x7, 0x200, 0x2, 0x1000, 0xe1, 0xcf, 0x9, 0x20, 0xde7, 0x0, 0x8, 0x800, 0x1, 0xfe8c, "cdf6ea7b5806ed0cd2be46417e23b515837f05367eced04ef443f8cdcc98ddb2"}}) 23:27:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5689, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1301.946985] binder: 26664:26666 ioctl 4010aeac 20000000 returned -22 [ 1301.965332] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.972238] binder: 26664:26668 ioctl 40046207 0 returned -16 [ 1302.049237] binder: unexpected work type, 4, not freed [ 1302.058695] binder: 26664:26668 ioctl 4010aeac 20000000 returned -22 [ 1302.223487] binder: unexpected work type, 4, not freed 23:27:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) [ 1302.325386] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.334807] binder: 26677:26679 ioctl 40046207 0 returned -16 [ 1302.346126] binder: unexpected work type, 4, not freed [ 1302.356052] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.381158] binder: 26667:26678 ioctl 40046207 0 returned -16 [ 1302.391329] binder: 26667:26678 unknown command -603692284 [ 1302.401258] binder: 26667:26678 ioctl c0306201 20000200 returned -22 [ 1302.412676] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.422317] binder: 26667:26678 ioctl 40046207 0 returned -16 [ 1302.484806] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.498926] binder: 26667:26682 ioctl 40046207 0 returned -16 [ 1302.507036] binder: 26667:26682 unknown command -603692284 [ 1302.524177] binder: 26667:26682 ioctl c0306201 20000200 returned -22 23:27:20 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, r3, 0x400, 0x0, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x812) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='netpci0\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) [ 1302.542031] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.556171] binder: 26667:26678 ioctl 40046207 0 returned -16 23:27:20 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08349800", @ANYRES16=r1, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000005}, 0x40848) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000400)="00b9910fa76ccb7e81f808e3df9be5b758d3548f13f6b2730324399ada865a731f4968ae5e276c81dbb471e49d36a30d74f06ad9b06971679f06008d302d5111bea1eef27769de42bfe71f8e55a313884a68768a48f87ede543cc74b14d7d291b94cf26bc4d126bd3da0c31512f4e932a592b39b7016dd01516a", 0x7a, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0xa, [0xfff, 0x0, 0x8001, 0x1f, 0x5, 0x2, 0x1f, 0xe9, 0x2, 0x7f]}, 0x18) 23:27:20 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x4}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x10, 0x0, 0x10000000, 0xfff, 0x0, 0xffffffffffffff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='attr/sockcreate\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PPPIOCDISCONN(r5, 0x7439) sendfile(r6, r5, 0x0, 0x800000080004103) socket$caif_seqpacket(0x25, 0x5, 0x4) 23:27:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000180)={0x6, 0x5, [0x83, 0x1, 0x6, 0x0, 0xffff], 0x8492}) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) r4 = accept4(r3, 0x0, 0x0, 0x13f6fc534b9f10c7) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x240, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040801010000100059a96c78da00000000"], 0x20}, 0x1, 0x0, 0x0, 0x480d1}, 0x1) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x80, 0x3e) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:27:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10002, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1302.913484] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.923619] binder: 26708:26709 ioctl 40046207 0 returned -16 [ 1302.932295] binder: unexpected work type, 4, not freed [ 1302.982814] binder: unexpected work type, 4, not freed 23:27:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) r5 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0xc9, 0x5, 0x1, 0x5, 0x0, 0xbd, 0x2804, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0x9, 0x9, 0x5, 0x9, 0x4, 0x7}, r3, 0x1, r0, 0x5) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1303.239186] binder: 26719:26724 unknown command 0 [ 1303.261978] binder: 26719:26724 ioctl c0306201 20000280 returned -22 [ 1303.292142] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.305870] binder: 26719:26726 ioctl 40046207 0 returned -16 [ 1303.324573] binder: 26719:26726 unknown command 0 [ 1303.331047] binder: 26719:26726 ioctl c0306201 20000280 returned -22 23:27:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000380)={0xfffffff, 0x6, 0x78b, r3, 0x0, &(0x7f0000000340)={0x980921, 0x80000001, [], @p_u32=&(0x7f0000000300)=0x5}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, [], [{0x8000002, 0x7, 0xb223, 0xf069, 0x269, 0x8000000b0}, {0xfffffffd, 0x81, 0x6, 0x101, 0x8001, 0x2}], [[], [], [], [], [], []]}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:21 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @thr={&(0x7f0000000000)="db60a7497ffe7d0b65a4b35add547447dcd56350", &(0x7f0000000380)="47c2c1de77a868444969bee0"}}, &(0x7f0000bbdffc)) eventfd(0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r1 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/394, 0x18a) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x8, @raw_data="71c9d22698245753f5cbd04b9fc1f542b7eeb28210843885ca0b60ab7620b2eb0f027052c20533412ec8ddd93a5cc22addc4f212b56f9c2188f47c3d379bc1b31da56c37503e4369dd072524f97ba6d683f17965ad342345f13c4f5cdd789a95cb655a6539f8c97f8fada2f80441b1521a7fdab10933062199d2bd94a40b56f12b886a57200411283289db280e9ec5fe99307fe750583a2d715467fcdc111db75498aed2edd2c73069fd3ddbb56da780808857812dfcb799ee3187fe36bf9eff205324bc92b580fe"}) 23:27:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = socket(0x40000000002, 0x3, 0x8000006) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x4) sendfile(r2, r0, 0x0, 0x800000080004105) 23:27:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000040)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x84) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xffff, 0x9}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x40}}, 0x8010) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x11010, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0xf580}, 0xffffffffffffffff, 0x3ffffe, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="510e6b22"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x84, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) epoll_wait(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4) [ 1303.829027] binder: 26757:26760 unknown command 577441361 [ 1303.835100] binder: 26757:26760 ioctl c0306201 20000200 returned -22 [ 1303.863293] binder: 26757:26763 unknown command 577441361 [ 1303.863324] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.883123] binder: 26757:26763 ioctl c0306201 20000200 returned -22 [ 1303.893519] binder: 26757:26760 ioctl 40046207 0 returned -16 23:27:21 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x7, 0x808}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) fdatasync(r1) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000000)={0x8, 'veth1_virt_wifi\x00', {'veth0_to_hsr\x00'}, 0x3}) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:21 executing program 2: r0 = getpid() prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth0_vlan\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r3, 0xfff, 0x0, 0x3, 0x7f}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x3, 0x202, 0xfff, 0x8, 0x2, 0x4, 0x0, r4}, &(0x7f0000000140)=0x20) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x11, 0xf1, 0x9, 0xffff, 0x0, 0x5}, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa81c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x6607}, 0x0, 0xfffffffffffffffe}, r0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x46088, 0x0, 0xfffffffc, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, r5, 0x0) 23:27:21 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000001280)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000001240)='schedstat\x00') r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000007050000000000000000000a0000090c00064000000000000340000000000000771408000540000000050000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x9e0000, 0xe60, 0xcdc, r3, 0x0, &(0x7f00000001c0)={0xd50d51, 0x101, [], @p_u8=&(0x7f0000000180)=0x3}}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/ttyprintk\x00', 0x341102, 0x0) fcntl$addseals(r5, 0x409, 0x5) ioctl$FIBMAP(r2, 0x1, &(0x7f0000001300)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000240)=""/4096) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) sendfile(r6, r2, 0x0, 0x800000080004103) 23:27:21 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x4000}], 0x1, 0x2040, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1304.504570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1792 sclass=netlink_audit_socket pid=26800 comm=syz-executor.3 [ 1304.526624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1792 sclass=netlink_audit_socket pid=26800 comm=syz-executor.3 23:27:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:22 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000048, 0x0, 0x9, 0x5, 0xfffffffffffffffc, 0x0, 0x3}, 0x0) r1 = getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x840000080004103) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) fsetxattr$security_capability(r4, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0xfffffc00, 0x2}, {0x1, 0x81}], r6}, 0x18, 0x2) 23:27:22 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x10000) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) [ 1305.217829] binder: 26821:26822 ioctl 80045518 20000000 returned -22 [ 1305.250970] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.271984] binder: 26821:26822 ioctl 40046207 0 returned -16 [ 1305.277975] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.277987] binder: 26821:26832 ioctl 40046207 0 returned -16 [ 1305.285836] binder: 26821:26832 ioctl 80045518 20000000 returned -22 [ 1305.296227] binder: unexpected work type, 4, not freed 23:27:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) getrlimit(0x3, &(0x7f0000000100)) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1305.496948] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.516067] binder: 26835:26838 ioctl 40046207 0 returned -16 23:27:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r5, &(0x7f0000000200)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0xb0}], 0x2, &(0x7f0000001440)=""/4096, 0x1000}, 0x2) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1305.548016] binder: unexpected work type, 4, not freed 23:27:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff8771}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000000)={0x5, 0x1c, [0x5, 0x1f, 0x4, 0x5, 0xeabd, 0x2, 0x509]}) [ 1305.603736] binder: unexpected work type, 4, not freed [ 1305.702821] binder: 26844:26847 ioctl c008551c 20000000 returned -22 [ 1305.775908] binder: BINDER_SET_CONTEXT_MGR already set [ 1305.801781] binder: 26844:26847 ioctl 40046207 0 returned -16 [ 1305.815090] binder: unexpected work type, 4, not freed [ 1305.901836] binder: unexpected work type, 4, not freed 23:27:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa18aeab7066a8f68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 23:27:23 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e22}, 0xffffffffffffff94) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0x8000, 0x8001, r2, 0x0, &(0x7f0000000040)={0x98090b, 0xe7d, [], @p_u32=&(0x7f0000000000)=0x8000}}) write(r3, &(0x7f00000002c0)="4c51a8bd60255d155318c877afdf3db32927661c9e8c364b76a3b6e9b505ade92ad07279065018a7f0a1fc681008ce75d5bd7d95ebe3ab496edb220191df27ce8d4b5c6816a06cead5ece60dcbfbf6017f0f3877e68d4eda0119786068b0a0c256b48cafd7dc4a12e4d1b321839251bb39c1b80ded0c5a67b6782b07c678e9eb077bc52b8c0c47ee823cc1a9dbe4d288fbecb8c606bbac9258547ff8cef73926faf03847795b899e5997d4e3e79839b31a9acadb63961fa2ff81f3d5dcfdc25018e50f7473dc84fea231c9", 0xcb) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x20}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) 23:27:26 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$P9_RLOPEN(r4, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x10, 0x0, 0x6}, 0x4}}, 0x18) 23:27:26 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5ec0af7f731d8f89c0feeb2aac171b6058b6611ae50d7c9be382cbb5c1e3649cfce6f6d5940bf75878e8de85bc00d096c79eea136e00e62936d47b665eaa91913af180a5e913979b581cd846fd7f007309804fe096dc4f0743ff9b42d40f3d0fa21ee0caf726139e474748f5b1eba7299706448b894597b208c5b04a95d52d84b4f732a74a401dd664", 0x89}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x2b, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast]}, @lsrr={0x83, 0x13, 0x67, [@local, @multicast2, @empty, @loopback]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3f, 0x3, [{0x2, 0xd, "c9bd2a49e4ecf5c689b755"}, {0x2, 0xc, "2ecb4a013543be88700e"}, {0x5, 0x11, "9a5d11330289796d06724f2400268f"}, {0x5, 0x7, "6e9491aa4e"}, {0x6, 0x8, "0c333ed41d04"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5e2c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x284}}], 0x128}}, {{&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="ff6d76c4b9ce908d80785b529dd1bedb43ac328a3ff2cc633b3a0d8dd9497f7163edc2dc237f79fdd22b475c4908c7", 0x2f}], 0x1, &(0x7f0000000440)}}, {{&(0x7f0000000480)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000680)=[{&(0x7f00000004c0)="8dfd2585910931fc0784669edff85fb5404aca7f6d2b6f589c3c4a08eaee16c0612813bc05f0743c8aa19ce18849fd6f1b63761318502335661ae8e81563ff6bf4e8bc2b76b1725a412b59efd54887ee26a75e87dd9c5b2de90aaa0b1c8f0f45fd0492cafb34cfabf6efc6f768e9325e44a129b1946b3aa60d125e83c04f99174ad813921e21dc74116b43c65f584498", 0x90}, {&(0x7f0000000580)="946997ef49eff1b38f0b7de1f29b45b9d9b190c578c4fedc9138f7921981d95ff64bf33a99a2411d776861100cddb8d5d55cd75c82fdae33a9049063c8d09bb659fa39a3557f0b01d709220fe3bf0a6485f2b6729e6befbe214543fa366d0d4514e923d9b4bf65e74aa3bcb57f3b75ee672d5fda2fe4818c0a12b3628d02488b2f5b5283c009ceeac9a63f42f00a2bd3869e45936d24c9da2e99738e138349358ff0140e366e3cba9153a7bfb3c59b9ef1a6202f68ded4a0589f2a8fe3c1a5f0fa2c8552a664d129b1b0a20fc467e1f9bb27868a4c5457c3777011c92c036b789c1f56a2", 0xe4}], 0x2, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010102, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x68}}], 0x3, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x7, 0xbf}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 23:27:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000001680)=[@free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x68, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x6}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r5}, @request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, r6, 0x0) 23:27:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x6, 0x1}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000000)='./file0\x00', 0x1000, 0x200, &(0x7f0000000040)) [ 1308.676048] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.682873] binder: 26885:26890 ioctl 40046207 0 returned -16 [ 1308.692131] binder_alloc: 26885: binder_alloc_buf, no vma [ 1308.698357] binder: 26885:26890 ioctl 641f 0 returned -22 [ 1308.709596] binder: BINDER_SET_CONTEXT_MGR already set 23:27:26 executing program 2: syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x6, &(0x7f0000001400)=[{&(0x7f0000000080)="91fb15f6601f8e03a89235165f7b25aee9ddde77094d82b884590f4e6be6aa3c04abf3fef193c135b5f9d837c2933fd2e3a2830b8a568e88c461180a95f4552802c1a47d03c5771557c34b7e3f6df497f1b5cfb13fcc6ac4293ccf07955bbd2502bdbec6fdb74f8a3797b083377a9fa1014146662fca1698f38f1a0b08e7601082e00a6a556b7b211fff1144ccd6b830b2de4e79c71a7cd00ad36c4d4553efdd1e2f3f4a773c6c534b8e6e75c624dce89c", 0xb1, 0x100000001}, {&(0x7f0000000140)="1022daa658c61e42122c9a61ad9cdb0fc6c048", 0x13, 0x5}, {&(0x7f0000000180)="64fb813c168d7acdc7fdc563cb5f21133f430cf20e85513a0e8bbd30d796269a9fe375ea3dd18424d6c1e510647ee9e72eb99b7e4a1f99f26d05b0152be35c12b225ee4578603266e2fe31cc59679c2f1e8ffff16055b6fa74da3f9dbf038669400096da19e2ad246dc96b00b57d6c7638d3d5ef93d240e33f8abcad9869fa935562334145c102657f2cd5", 0x8b, 0x300}, {&(0x7f0000000300)="054257211e90c74c5f69c65fc77f87163c8ad459cd7288b6ef3f8876ac34e215bf358a9c5b8ba4abd7ce38c1763868b1ccfa6a7534dbab1cb0700efe0f80cc2c72a4fee69c1a007248db875ea1391c63ae5ab103caaa527e3760efd6782bc3a2698e2fcf44017eddbcdf5a8e38445ba798", 0x71, 0x9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="d31894f81b329e65bc3602a63457e70a5174292667b960387e3697f2dc58a169207105f450afc2cc07bd85242b42bdb7431c7cc5569bf09d2043f37ef5067d3a03", 0x41, 0x60b9}], 0x84008, &(0x7f0000000240)='\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:26 executing program 0: socket$inet6(0xa, 0x2, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x245b, 0x0, @perf_bp={0x0, 0xb}, 0x80, 0x5, 0x10000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) connect$pptp(r2, &(0x7f0000002500)={0x18, 0x2, {0x1, @local}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') recvmsg$can_raw(r3, &(0x7f00000024c0)={&(0x7f0000000040)=@caif=@dbg, 0x80, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/108, 0x6c}, {&(0x7f0000001340)=""/198, 0xc6}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/1, 0x1}], 0x6, &(0x7f0000000200)=""/35, 0x23}, 0x10102) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x100000001, 0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x598d384f}, &(0x7f0000000040)=0x8) 23:27:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04459600b12fecad6584983a3699a453eeb71b5bd814f1de1099ab36cc303c6d8042b9f05da2eed54f708f7ac41b17fe1d0e414b1d9bf96a0056cdc362b946373eb8256a48dd6ec346f88e5fa9ed39524bf0ac06b5fea624401f41bd1e86633a398c3aa3dbe2026b0892a4f3f5780e4b17b7f6100ace6b08000000929c736f3705555d1f2a26900607ee3609e1d8bf0a265a7622482383943fa066a7208d7bbda3622ed3ab06ce7638889462333234a291a730f36d0ae4155400f3b2882c1822a9"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/dev_snmp6\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth0_macvtap\x00', 0x3}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2, 0x0, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 23:27:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1308.715221] binder: 26885:26896 ioctl 40046207 0 returned -16 [ 1308.715540] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.715549] binder: 26885:26890 ioctl 40046207 0 returned -16 [ 1308.716548] binder: 26885:26896 ioctl 641f 0 returned -22 [ 1308.780606] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1308.967858] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.967870] binder: 26901:26906 ioctl 40046207 0 returned -16 [ 1308.996685] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.997462] binder: 26901:26914 ioctl 40046207 0 returned -16 [ 1309.027799] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1309.443461] binder: 26933:26934 unknown command 9848068 [ 1309.443473] binder: 26933:26934 ioctl c0306201 20000200 returned -22 [ 1309.445530] binder: BC_ACQUIRE_RESULT not supported [ 1309.445540] binder: 26933:26934 ioctl c0306201 20000280 returned -22 [ 1309.445764] binder: 26933:26934 ioctl ae41 2 returned -22 [ 1309.446923] binder: BINDER_SET_CONTEXT_MGR already set [ 1309.446933] binder: 26933:26934 ioctl 40046207 0 returned -16 [ 1309.447517] binder: 26933:26934 unknown command 9848068 [ 1309.447527] binder: 26933:26934 ioctl c0306201 20000200 returned -22 [ 1309.449066] binder: BC_ACQUIRE_RESULT not supported [ 1309.449077] binder: 26933:26934 ioctl c0306201 20000280 returned -22 [ 1309.449176] binder: 26933:26935 ioctl ae41 2 returned -22 23:27:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="203117a17e8c6fd71dd6d042c1e4aa3a8376ddf2b087ab196c15f255b5d4d0de4e20b437c5a24fc08d80d239fed3dc0a548756a9bfb03e543b295de9c9", 0x3d}], 0x1, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x41800) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:29 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x81, @multicast1}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 23:27:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xff) 23:27:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004107) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x4) 23:27:29 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0xd, 0x0, 0xfffffffffffff83f, 0x0, 0xfffffffd}, 0x0) r2 = getpgrp(r1) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000100)={{r4, r5+60000000}, {0x77359400}}, &(0x7f0000000140)) ptrace$peek(0x3, r2, &(0x7f0000000000)) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r7 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r7, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r6, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x40000000002, 0x2, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x65, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:29 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x16000001a}) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) connect$caif(0xffffffffffffffff, &(0x7f0000000180)=@util={0x25, "ab010104fbac81af9a38e719967015b0"}, 0x18) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1002000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) accept$inet(r4, 0x0, &(0x7f0000000000)) 23:27:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="41e8a076ce10330b5605d63eae89c2ee08947632e1d286ed9a60612a00e828daa3a1689c6fbcc648a914b8970ddcefb0b52e9fb7cc41f00be285a5a33b0d6eafabf200aee70de39bde4b8fff02de998a9fddfdc2ecb1", 0x56, 0xfffffffffffffff8) keyctl$update(0x2, r1, 0x0, 0x0) [ 1311.717910] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.723573] binder: 26969:26977 ioctl 40046207 0 returned -16 [ 1311.734478] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.740354] binder: 26969:26977 ioctl 40046207 0 returned -16 [ 1311.751895] binder: 26969:26977 ioctl 40045010 20000000 returned -22 [ 1311.845406] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.845422] binder: 26969:26993 ioctl 40046207 0 returned -16 [ 1311.855615] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.855628] binder: 26969:26977 ioctl 40046207 0 returned -16 23:27:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000200)=0x7, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1311.856460] binder: 26969:26993 ioctl 40045010 20000000 returned -22 23:27:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0xffffffffdffffffc, 0x4}, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000780)={"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"}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x0, 0x100, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xffffffffffffffff) write(r3, &(0x7f0000000180), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) 23:27:30 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05632c0eb6127cf51b40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080)={0x1}, 0x4) 23:27:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x40100, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000380)={0x5, [0x6, 0x8, 0x8], [{0x3280861f, 0x8001, 0x0, 0x1, 0x0, 0x1}, {0x1ee, 0x20, 0x0, 0x1}, {0x3e, 0xffff, 0x1, 0x1}, {0x6c, 0xf60, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x80000001, 0x1, 0x1, 0x1, 0x1}, {0xffffff01, 0x81, 0x1, 0x0, 0x1, 0x1}, {0xae, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x8000}, {0xda0a, 0x81, 0x0, 0x0, 0x1}, {0xb7d5, 0x18c, 0x1, 0x0, 0x0, 0x1}, {0x7fff, 0x9, 0x1, 0x1}], 0x7}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000007010800000000000000000c0000030e000240000000000000010014000200080018400000007f0800024000000002"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1313.522645] binder: BINDER_SET_CONTEXT_MGR already set 23:27:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000100)="8a3c47d7584c20408b3aea42aa5c00e5340ed7c8cc6a3757151a06b9963fe896c39b360e8c19b0", 0x27) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40000301) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket(0x10, 0x80002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000100000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008c00}, 0x0) [ 1313.522657] binder: 27025:27030 ioctl 40046207 0 returned -16 [ 1313.543776] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.543788] binder: 27025:27030 ioctl 40046207 0 returned -16 [ 1314.286095] binder: BINDER_SET_CONTEXT_MGR already set [ 1314.286112] binder: 27025:27055 ioctl 40046207 0 returned -16 [ 1314.297342] binder: BINDER_SET_CONTEXT_MGR already set [ 1314.297354] binder: 27025:27030 ioctl 40046207 0 returned -16 23:27:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x54}}, 0x404) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:33 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r1}) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:33 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/mcfilter6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0x800000080004103) 23:27:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000100)=0x3c, 0x4) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4014) 23:27:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x28, 0x80000005, 0x32b0, 0x8, 0x10000000000400, 0xfffffffffffffffc, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000000700000028bd7000fbdbdf250800010000000000080001000100000008000100000400001a004400", @ANYRES32, @ANYBLOB="05005400000000000900020073797a310000000005005400000000000800010002000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x841) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:33 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) 23:27:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05630440c5e69570a9e92abc5a66ac6ae9aa3b57b7056cf5e634675f64e2f878535c7bd2a57fd840f87e4fd09fc8b628ca8a6fdf3d47f4711c6fce92d05212fd1d47975bf47ce3cd8a838fa8d9bd8fafb41c226f0c279794de1e87d617eb5e0d07785bc062e2358dfee53ec5ef6a82edbd7d785079b59f33ecb14c626b81b0309f6659bbfb5fd6518246f91536cce5ee645d7b74e0344e79430598124db9f557c9ef7080833471c5245f34593462cf7e9fa23c9a3dbbcaf9394873fe491aea0f9e7ffb566d48845872ffd8977e20511ef7fa47a91ff174f29970b23cd4877dc80fb245ffff7fbe0f84db2b9b7fee953760e82073c3c09c51879328c7ea36d4ea7fbab3dfc42a1cf40e6e27678f899993e5a8ff07f27dcc0c209f7e2b2788289465cca5a1"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 23:27:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) [ 1316.360660] binder: 27095:27100 ioctl 541c 20000000 returned -22 [ 1316.397099] binder: BINDER_SET_CONTEXT_MGR already set [ 1316.415711] binder: 27095:27100 ioctl 40046207 0 returned -16 23:27:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:27:34 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/67, 0x43) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x3885) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 23:27:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r3, r4, 0x1ff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r0, 0x0, 0x800000080004103) 23:27:34 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x177, 0x9, 0x1f, 0x0, 0x7, 0x3}, 0xc) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x64, &(0x7f0000000140)={0x0}}, 0x0) 23:27:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:34 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x26, 0x2, 0x791) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc) sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40001) 23:27:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000002e00)="c9783b42e41c3aa802de359c9e30c99300b6801980694e39ebe85ca6449b2cbe769a717f72e3d000a0d493d23a91c794f07fb38c7e9ec57e087eeda96e213b446f15beeef8c0bc05feb58b1e9a48b159d471d14a593ecf026ca895ba2b127c7b0fd8b1d4b660221c42bc4f172339b9adab53d0cc6776a15f93b8391d63b5cb7368bfb7e332a6c66398257a47e5a77004b61691a838ced5cef4930825f166dfddfd13631ba4cce60cdc647feb13bf03ee11a5acc3db771b2fef7991ed41d52edd34", 0xc1}, {&(0x7f0000002d80)="9efe53c370a9470dd9ad3900ed7e28b0de16796bea2fbc185d9827dd71b42f39bb898d1aa179a6150c36ea6931123ddaf97277f1578a06b46d9adfe3680fe87a16b12698f80cd13a857a69802a1ccc0af64c4e31b489ee497e", 0x59}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x2f, 0x2, 0x1, 0x0, 0x3}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x1, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x4000000000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000140)=[@exit_looper, @decrefs, @request_death], 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000000)=""/255, &(0x7f0000000100)=0xff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r3, 0x0) [ 1317.377099] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.435660] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.459396] binder: 27152:27158 ioctl 40046207 0 returned -16 [ 1317.618646] binder: 27126:27151 ioctl 40046207 0 returned -16 [ 1317.706752] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.796122] binder: 27126:27151 ioctl 40046207 0 returned -16 [ 1317.802177] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.816331] binder: 27126:27171 ioctl 8906 0 returned -22 [ 1317.869269] binder: 27126:27170 ioctl 40046207 0 returned -16 23:27:37 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="ffe67c4c7f8f837a97e8038c9e19964fd5e72650edea68d558588de28092", 0x1e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x9, 0x10000, 0xfff, r6}, &(0x7f0000000040)=0x10) sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004106) 23:27:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x210a02, 0x0) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000100)={0x3, 0x7, 0x80, &(0x7f0000000080)="85a2d6a68f21a9b9a339a93e710f4d136112a464a795ddbc7fa7046f2669fb3e72fb52e96cf5fae43e362ab21cd49c9b7c148efe3767ab28d01ebbabc52deb95257ca8f6224f3fe6c9a8bfaa940ec4304db7167fe80725ab955fec98e67cab6fde803b4fbde22c3a0314729b1645342693a24ea2c400e6047b92af617dcccedd"}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1319.788320] binder: 27198:27199 ioctl c02c5341 20000000 returned -22 [ 1319.797089] binder: BINDER_SET_CONTEXT_MGR already set [ 1319.803734] binder: 27198:27200 ioctl 40046207 0 returned -16 [ 1319.811569] binder: unexpected work type, 4, not freed [ 1319.823171] binder: 27198:27200 ioctl c02c5341 20000000 returned -22 23:27:37 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdc01, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x1225, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r1, 0x0) [ 1319.845314] binder: unexpected work type, 4, not freed 23:27:37 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x38, 0x1, 0x1, 0x5, 0x4, 0x2, 0x3, 0x9, 0x0, 0x8}, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x5, 0x0, 0x4}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0xfffffffa, 0x2, 'client0\x00', 0x0, "09f078154b89bcde", "416ebfce58fb5def7dc5bbce4574aacf723ded21de089a97e5191a0a425206e8", 0x8, 0xfffffff9}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x5) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="056304404762578e631771814c95a65d817c5099ddc9745c3e8829b24a64ad4301cc8b6bf829932634625f3badcf610c5942ac8a71d080440be3b49a9e904f732f5bf19a7a25d0e9d5f80825d437fe4865e799355d3946c5a32f3dc0f01b25436ed8955d39cc93685db7c68125e44df8ca740612e0f6245dca21082dfe6cb89ce32054a2d195da6fe4bc85915235db42e2d59f7ae9a4e3f33c7e5e27700e3c35c2f8b2f67b49e646747f2a42e14f6bb1f825"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, r5, 0xf}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r4, 0x0) 23:27:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0x0, r1, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, "fff3c89ece995184e1675260dee35b618ca49b80c26e3af6fc1166c1"}, 0x24, 0xfffffffffffffffd) 23:27:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x2c09, 0xffffffffffffffff, 0x81, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1320.283585] binder: 27219:27221 ioctl c0bc5351 20000040 returned -22 [ 1320.286432] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.286442] binder: 27219:27221 ioctl 40046207 0 returned -16 [ 1320.295198] binder: 27219:27221 ioctl c0bc5351 20000040 returned -22 23:27:40 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'syz_tun\x00'}], 0xa, "f9b38da4cf48485ff41a391f6d7df919e93392fffed4154c34293e1388f403e3c7f1c368064eccee3cc4785d6e5c876577e280afd7458c796f525b6f711e10f55f6267176b5e93457281c9b03617a6631e89dd"}, 0x67) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000100), 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r4 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x30, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x1}, @decrefs, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6131, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0xffffffffffffffff, 0x0, r2, 0x2) 23:27:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x6}], 0x1, 0x40010080, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1ff, 0xa8402) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000000c0)) sendfile(r1, r0, 0x0, 0x800000080004103) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40000, 0x0) 23:27:40 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x2, 0x4, 0x3f, 0x1, 0x5, 0x8, 0x81, 0x3, 0x2, 0xf6, 0x5, 0x1f, 0x1000}, {0x3, 0x371, 0xd1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1f, 0x0, 0x49, 0x3, 0x1}, {0x80000001, 0x8, 0x5, 0xff, 0x4, 0x81, 0x0, 0x5, 0x81, 0x1, 0xfc, 0x3, 0x5}], 0x199}) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0531c79a2386fb1eed34e667010440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/26, 0x1a}) 23:27:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) [ 1322.691939] binder: 27251:27263 unknown command 0 23:27:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="4a7a847e4a96c2202169a21ca1815a01", 0x10) [ 1322.692053] binder: 27251:27263 ioctl c0306201 20000280 returned -22 [ 1322.694795] binder: 27251:27263 unknown command 48 [ 1322.694805] binder: 27251:27263 ioctl c0306201 20000280 returned -22 [ 1322.730956] binder: 27268:27269 unknown command -1698221819 [ 1322.730967] binder: 27268:27269 ioctl c0306201 20000280 returned -22 23:27:40 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1322.731366] binder: 27268:27269 ioctl 40189206 20000080 returned -22 [ 1322.732581] binder: BINDER_SET_CONTEXT_MGR already set [ 1322.732591] binder: 27268:27269 ioctl 40046207 0 returned -16 [ 1322.733766] binder: 27268:27269 unknown command -1698221819 23:27:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) [ 1322.733776] binder: 27268:27269 ioctl c0306201 20000280 returned -22 23:27:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xfc000000, 0xffff034b, 0x5b74, 0x0, 0x6}) [ 1323.273909] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 23:27:43 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4010) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB="09040a5f", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x2, 0x4e24, 0x8000, 0x2, 0xa0, 0x80, 0x16, r4, r6}, {0x8, 0x1f4, 0x0, 0x4308856a, 0xd8ce, 0x100000000, 0x80, 0x200}, {0xcaa5, 0x100000000, 0xffffffff, 0x11d86c3f}, 0x0, 0x6e6bb4, 0x1, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d6, 0x32}, 0x2, @in=@loopback, 0x34ff, 0x2, 0x2, 0x7, 0x6, 0x401, 0x4dec}}, 0xe8) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11010, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x210080, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000080)="c800e007a22e235d47daad702f85e8026926815373b2facc15d3ae75647c75996923cdc6f34d50a5ab0c8a1a894b3c5552eb6996a27677572fca55f658c5730944b76ac41f2404e5c6d628de1e0318faf0fe22f41efdd0a8f34e3e80a38a3bc5514610487c864d8a9d4d6dec726dbc41ba0a8a0b08f92b54caa17893f6099b2fb11a8a95a627a4cde686580c2e634fbc85824a193f6f451a345ed1", 0x9b) 23:27:43 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304ba"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0903002768c872e6fc87ec4ccfc700937f76236a3aaf8a0c37dc2f94fd4ad6e928cf43ca84b93bbff520a719b67b8c0050916baba0eddc26170d18491980fd750ee574ee0cb2d163acbfb06f7ceefbec25dfe9b80cf8cfdfacdd5c34ecea45a8512fc424efb4fcee351cc51e53232bd2d44aad30e9841f3ec92dc904ee783bf7da2f8cb3181d5e9b70cf9643e0cb4ee05b4803f220a847e1a4e536ebb0c3a31be810b24b28f67af976b7d2a44d651d65cd738420163fc0d12c5c5aaa6bf8a031b3ee7983dbd47bc36df88a554d688fef178f3af44e91a1a1662f5f2c92511194503fcbf75b1e953ce37d601bba727b5b8a669e6a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/197, 0xc5, 0x0, 0xb}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x73682a85, 0x4}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x400}, @release={0x40046306, 0x1}, @request_death], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000002c0)={0x80000001, 0x2, "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"}) r4 = syz_open_procfs(r2, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002840), &(0x7f0000002880)=0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/126, 0x7e}, {&(0x7f0000002400)=""/197, 0xc5}, {&(0x7f0000002500)=""/133, 0x85}, {&(0x7f00000025c0)=""/146, 0x92}], 0x6, &(0x7f0000002700)=""/224, 0xe0}, 0x60) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000002800)=0x8) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x60001, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x9, 0x7, 0x2}, 0x9) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:43 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00f7ff00"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000000)) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:43 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40480, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d80)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x7f}, 0xef, 0x20, 0x939, 0x401, 0xa, 'syz1\x00', "2fef2eeaf1811449d774a002188afcce5d8fd6cbf52a2abcee57d36ebd687fce", "194fbd89225e6a4a92fb61898d2f457e8c1fad4a1dd857087658d41683621c94", [{0x1, 0x2, {0x0, 0x7}}, {0xf4ad, 0x1f, {0x1, 0x401}}, {0x6, 0x81, {0x2}}, {0x35d5, 0x5, {0x3, 0x6}}, {0x17, 0x7, {0x1, 0x7}}, {0xf188, 0xfc01, {0x0, 0x80}}, {0x5, 0x1000, {0x2, 0x3}}, {0x100, 0x9, {0x1, 0x153}}, {0x1, 0x3, {0x1, 0x8}}, {0x65, 0xff, {0x1, 0x8}}, {0x2, 0x3, {0x1, 0xffffffff}}, {0xffff, 0x8, {0x3, 0xfffff801}}, {0x4, 0xc2, {0x3, 0xd6c1}}, {0x7f, 0x1e2b, {0x1, 0xc4}}, {0x8, 0x7, {0x1, 0xbf9a}}, {0x70, 0x20, {0x1, 0x7}}, {0x43, 0x6, {0x0, 0xb4bb}}, {0x100, 0xffe0, {0x0, 0x81}}, {0x3d38, 0x3, {0x3, 0x3}}, {0x7ff, 0xffe0, {0x2, 0x1d}}, {0x0, 0xfff, {0x2, 0x5d3}}, {0x101, 0x7, {0x2}}, {0x8000, 0xf00, {0x3, 0x3}}, {0x9b0, 0x1, {0x0, 0x200}}, {0x4, 0x1, {0x2, 0x5e4a}}, {0xffff, 0x9, {0x0, 0x4}}, {0x1, 0x1, {0x0, 0x5}}, {0x4, 0x7, {0x1, 0x400}}, {0x7fff, 0x101, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0xfc3}}, {0x8000, 0x0, {0x3, 0x7}}, {0xfff8, 0x8, {0x1, 0xfffff801}}, {0x101, 0x3f, {0x0, 0x2}}, {0xd268, 0xa00, {0x3, 0x101}}, {0x7f, 0x4, {0x0, 0xa5d}}, {0x3, 0x6, {0x0, 0x7}}, {0x5, 0x8000, {0x2, 0xa764}}, {0x4000, 0x9, {0x3, 0x6}}, {0x5, 0x100, {0x2, 0xf871}}, {0x3, 0x2, {0x0, 0x7f}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x6, 0x4f, 0x2, 0x73d, 0x1b, 'syz0\x00', "5d4df7874f12d13940d4a232cc565d92d4cb0b1659c3ebbc54671ce964244a72", "5ca50e3f0c1dd8975316e622370b0baaff08e131beb5d6790ee7bdf3fdb2b4ff", [{0x40, 0x0, {0x3, 0x8}}, {0x8, 0x4, {0x3, 0x7}}, {0x20, 0xfc, {0x3, 0x5}}, {0x7, 0xffc1, {0x3, 0x4}}, {0x7ff, 0xffff, {0x3, 0x80}}, {0x81, 0xdce, {0x0, 0xffffff81}}, {0x6, 0x3, {0x1, 0x800}}, {0xfffc, 0xffff, {0x1, 0x9}}, {0x400, 0x2, {0x0, 0x3}}, {0xdc4, 0x1ff, {0x0, 0xffff}}, {0xf1ed, 0x4, {0x3, 0x2}}, {0x5, 0x5, {0x1, 0x2}}, {0x9, 0x1ff, {0x0, 0x20}}, {0xbf, 0x9, {0x0, 0x3}}, {0x4, 0x4, {0x0, 0x6}}, {0x0, 0x2, {0x0, 0x400}}, {0xeb9c, 0x1f, {0x0, 0x6}}, {0x8, 0x9, {0x0, 0x4}}, {0x4, 0x1, {0x1, 0x1b}}, {0x7f, 0x8001, {0x0, 0x200}}, {0x800, 0x460, {0x1, 0xffff}}, {0x5, 0x8, {0x2, 0x80}}, {0x1, 0x97, {0x0, 0x7fff}}, {0x9, 0x2030, {0x1, 0x2}}, {0x4d3f, 0x2, {0x0, 0x9}}, {0x1, 0x9, {0x0, 0x7a1c}}, {0xfff, 0x5}, {0x6, 0xef06, {0x0, 0x7}}, {0xffe1, 0x7f, {0x3, 0xfffffffe}}, {0x7, 0xd3, {0x3, 0x7f}}, {0x3, 0x2, {0x2, 0x7ff}}, {0x20, 0x400, {0x0, 0xffffff01}}, {0x101, 0x8000, {0x0, 0x7}}, {0x1, 0x3, {0x2, 0x9}}, {0x4c, 0x3, {0x0, 0x6}}, {0x1e, 0xfff9, {0x1, 0xc0}}, {0x7, 0x5, {0x0, 0x8}}, {0x9, 0x1000, {0x0, 0x1f}}, {0x0, 0x0, {0x1, 0x401}}, {0x4, 0x6, {0x1, 0x20}}]}}}, {{0x254, 0x1, {{0x1, 0x1ff}, 0x3, 0x7, 0x9, 0x4, 0x17, 'syz0\x00', "eb8c263b810c8f06648cd7341659c88d98972651a543ad06c0d85dca4cc10422", "1725c01d7a33b5864a7ad7845cd8a9154708bb5aa9c0fe8455199207aea621fa", [{0x3, 0x8, {0x3}}, {0x9c, 0x0, {0x0, 0x400}}, {0x8, 0xae, {0x2, 0xff}}, {0x800, 0x101, {0x735303b7a4b70b62, 0x9}}, {0xba4, 0x7, {0x1, 0x8}}, {0x7, 0x4, {0x2, 0x8000}}, {0x40, 0x9, {0x1, 0x5}}, {0xffff, 0x400, {0x1, 0x200}}, {0x3, 0x1, {0x0, 0x3c}}, {0x3, 0x7fff, {0x2, 0x7}}, {0x3, 0x8, {0x3, 0x6}}, {0x8f2d, 0x2, {0x3, 0x21}}, {0x1fe0, 0x8, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x6}}, {0xfe, 0xffff, {0x3, 0x8}}, {0x86, 0x0, {0x1, 0x6}}, {0x0, 0x401, {0x0, 0x6}}, {0x6, 0x200, {0x2, 0x20}}, {0x20, 0x6, {0x0, 0x6}}, {0x1ff, 0x200, {0x3}}, {0x9, 0x7, {0x2, 0x3}}, {0x282, 0x5, {0x1, 0x7}}, {0x1, 0x1, {0x2, 0x5}}, {0x81, 0x2, {0x2, 0x3eb}}, {0xf800, 0x9, {0x2, 0x3}}, {0x0, 0x40, {0x2, 0xffffffff}}, {0x1f, 0x5, {0x0, 0x8}}, {0x9, 0x1, {0x3}}, {0x632, 0x1, {0x3, 0x5}}, {0x8000, 0x4, {0x1}}, {0x8001, 0x101, {0x2}}, {0x3ff5, 0x0, {0x3, 0x7f}}, {0x3, 0x32, {0x1, 0x3}}, {0x1, 0x200, {0x1, 0x3738}}, {0x73f, 0x4}, {0x1f, 0xffff, {0x0, 0x6}}, {0x7, 0x8001, {0x1}}, {0x1ff, 0x3e0, {0x2, 0x3}}, {0x9, 0x4, {0x2, 0x5}}, {0x4, 0x5, {0x1, 0x7}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c010) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) bind(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x3, 0x4, 0x4, 0x3}}, 0x80) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x7, &(0x7f0000000000)=""/115) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:45 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x0) 23:27:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000f5100000dd00000056b16ce00000000000", @ANYRES32=0x0, @ANYBLOB="83840300000000000400140008000500", @ANYRES32=r4, @ANYBLOB="0500270006000000"], 0x34}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x12, 0x608, 0x70bd2b, 0x25dfdbfb, {0x28, 0x80, 0xa2, 0x1, {0x4e23, 0x4e20, [0x6, 0x80000000, 0x8000, 0x7f], [0x4, 0x9f, 0x6, 0x200], r7, [0x8, 0x6]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "427fa3"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "949f6c110413f9f865ecca87ad42e42337b1793733d499935115305d0df8494a4010364b5312ac3b98593f279e3a83263c7fdc3e9e00e5cf210bf3e13abea4daa4c66376492b6585a202d8804c3d5350a1c45c5bd54573c0049a841a040face61e2f2a63681dc8a88291a60e18476ad30754885b2beac6215a89456886c9f971afce0851363b9de64e61082c46f297ea20affa2b9d1f52bc463766ba724cf1b018ed853381847e2e1b8c3ce96e3d34bbce895b8e879760997581e53c15c1e71e1acf9c294f5316f0"}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x24008851) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x282000) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, &(0x7f0000000340)="79e3415c3402cf5ee837857d4dcd2b74bb14b60fcc6dcffbbf2e138de622e77b4d4e5bf8b574273008c8d287dc8deb2cfd0eca4370058dfbc666c8f721f65ec7357bba4d89c641eabc8c21e830aa478ae1a568232eeccf6a7c03b1a9cedfb1cf8b8497ee4c71cf617b0192c02727acf93f9e0cc5f2321d5962155f5ee3f0cd007b79547c792147a6b48b149249274f2c3f9b76cd8997d864ed936b9412bd827a4ac243e52292c343f1fc3dd98ee865a8c9d313a1f69b32d1b32f13e2f30ba6ca034c913562af9871dbe53d1d67d4a86b3ad78ac96a64292ab025c8613a7e9054f8d8e76f0aa5f809e5") 23:27:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40515, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:27:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfa9, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000002c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x79b01936ff292bd0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x12022) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r7 = syz_open_procfs(r6, &(0x7f00000001c0)='fdinfo\x00') sendfile(r5, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:45 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="27000604"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x8) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}, 0x9}, 0xa) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xc0, 0x0) bind$phonet(r2, &(0x7f0000000100)={0x23, 0x5b, 0x8, 0x21}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x0) 23:27:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 1328.388422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4341 sclass=netlink_route_socket pid=27391 comm=syz-executor.3 23:27:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xff, 0x7fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x3, 0x2, 0x47, 0x3, 0x3e, 0xffffffff, 0x122, 0x40, 0x1f5, 0x39b, 0x3, 0x38, 0x1, 0xfff, 0x0, 0x2}, [{0x6474e551, 0x10001, 0x2b, 0x9, 0xef9, 0x2e, 0x1, 0x865}], "29e4f63a03a0f2d7c2e04253c148a195545d1995c7c8b42f86d700ed9c6100aaab21bfd26a8c45e54b0d5de5b52ed7843cd378f426760c0faf61f9897b5c17afab5a5a47e2d97ee9d48a6ea393b77fdc5fedfa62b592429df6aea0bb2fdbdb24e769674f9f20d7cf6a272ea359f42b155b038b64f21b8b02c046065613f0a982ff7c30f514d6c9656755e857157b4400a1e6f4b4eece11f78489f44dabf0b4fa329d8e7e1a", [[], [], [], [], []]}, 0x61d) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) fgetxattr(r2, &(0x7f0000000100)=@random={'system.', '$^/[!\x00'}, &(0x7f0000001780)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1328.694209] binder: 27409:27410 ioctl 400454de 20000000 returned -22 [ 1328.740378] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.751713] binder: 27409:27411 ioctl 40046207 0 returned -16 [ 1328.781425] binder: unexpected work type, 4, not freed [ 1328.791221] binder: 27409:27411 ioctl 400454de 20000000 returned -22 23:27:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1328.854808] binder: unexpected work type, 4, not freed 23:27:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 1328.960491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4341 sclass=netlink_route_socket pid=27416 comm=syz-executor.3 23:27:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) 23:27:48 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) read$dsp(r3, &(0x7f0000000d80)=""/4096, 0x1000) 23:27:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 23:27:48 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@getsadinfo={0x4f0, 0x23, 0x800, 0x70bd25, 0x25dfdbfb, 0x0, [@algo_comp={0x124, 0x3, {{'deflate\x00'}, 0x6e0, "fbf05ad05964fc4b5d735989a354fbed1d5502b5734cfed1ee6ace6c6d7eebf54408de5d95efe6f91e4426f86d3fae1faecb228ca9faae04be3b8be39d435d8ab99f3d0fb74026f7ff26fc605a4e689141ebdd7a74d5994b78a39a85b9697e6079f3480b57464513415f7a22980ed95b5913cd201b1e0db6077969bcec8b6453677098929a6d2545736c27dc4423773b5232bc76f1e0314c4588ea2f1561a418cf4e789b577342c4879700b48429024d20adb34a84df2148a36be665714616f945c6f88292c4481311e15041d7f8e76e6ac090b6ff533accc505e177"}}, @algo_crypt={0x57, 0x2, {{'lrw-cast6-avx\x00'}, 0x78, "ff54dd3ca71517bcd84d0a041a1a4c"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@loopback}}, @coaddr={0x14, 0xe, @in=@multicast2}, @lifetime_val={0x24, 0x9, {0x1800000000, 0xfff, 0x8, 0x3f}}, @algo_auth={0xa9, 0x1, {{'blake2s-128-x86\x00'}, 0x308, "adc9ce1cfa4878e97a7d7b866fb75d6000128e7f1ca46c75be7d48a8ed675eee27a506e635681dd5713ea775683bd3ca9ddd8eb6b1629bd09fe6117dd016f9515b1f01dde2fb93fe78bd963c40ff16cb7b27291bc729d253c023351b1eb345f882"}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x2, 0x81}}, @algo_crypt={0x137, 0x2, {{'lrw-camellia-aesni-avx2\x00'}, 0x778, "33b8735789528b33174a3fd132147bf398356e8ff9e66e2d6f8e8da43c31e944767a408438c083fbacba7fec9e6faa534c99baecbc66c12ec73de445603097530de8e39b57ba15a7ae6e8777f5537cb366a51912eab76e6811441a26f368d3225a0b95351d5c1bc79e8d2e3a6e0867acd85f3f90b7067b8903212994bdb4a9dba7c09c7230dc8b1360132bd6ffd997f2f775e1710604300e1745dab70a38c5d80ec8f746e267dde59eed2c86de8b6754cd021abb19fd31405a353a0683715995a42301dad91324bb2574f4e2ff9a2519afc4a81ed3cc4cc9006cf7a98b8149dd73616a0e22390c50cbc100d154cae9"}}, @policy_type={0xa}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x4e24, 0x1, 0x4e24, 0x7ff, 0xa, 0xa0, 0x80, 0x4, r5, r7}, {@in=@private=0xa010102, 0x4d4, 0xff}, @in6=@local, {0x4, 0x6, 0x80000000, 0x9, 0x1000, 0x1000, 0x100000001, 0x95a}, {0x200, 0x7, 0x4, 0x4}, {0x1, 0x81, 0x2}, 0x70bd2d, 0x3502, 0xa, 0x0, 0x4, 0x79}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0xc800}, 0x4084) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r8, 0x0) 23:27:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:48 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200c3, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200c3, 0x0) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010007000000000002000000f67804aabf5d23829ff14ab83bb2e8f513fd8e1137e11e51ff07fb1021a377f5f8da45f5f3b88792672971f4bb0e4bc4ed197519d075f6dc0058283181eb99efa6df77fea1760d874bae086ae10e", @ANYRES64=r1, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000600", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRESOCT=0x0, @ANYBLOB="08000600", @ANYRESOCT, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="10000200000000002000040000000000"], 0x7c, 0x1) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x50000000100440) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/icmp\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x4, 0x2, 0x2}, 0x83a}}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r1, 0x0, 0x800000080004103) 23:27:48 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) vmsplice(r0, 0x0, 0x0, 0xbcd00ecdac40ba5d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'hsr0\x00', {0x3}, 0x55cd}) [ 1331.128145] 8021q: adding VLAN 0 to HW filter on device ipvlan6 23:27:48 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200c3, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200c3, 0x0) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010007000000000002000000f67804aabf5d23829ff14ab83bb2e8f513fd8e1137e11e51ff07fb1021a377f5f8da45f5f3b88792672971f4bb0e4bc4ed197519d075f6dc0058283181eb99efa6df77fea1760d874bae086ae10e", @ANYRES64=r1, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000600", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRESOCT=0x0, @ANYBLOB="08000600", @ANYRESOCT, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="10000200000000002000040000000000"], 0x7c, 0x1) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x50000000100440) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:48 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4010) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB="09040a5f", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x2, 0x4e24, 0x8000, 0x2, 0xa0, 0x80, 0x16, r4, r6}, {0x8, 0x1f4, 0x0, 0x4308856a, 0xd8ce, 0x100000000, 0x80, 0x200}, {0xcaa5, 0x100000000, 0xffffffff, 0x11d86c3f}, 0x0, 0x6e6bb4, 0x1, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d6, 0x32}, 0x2, @in=@loopback, 0x34ff, 0x2, 0x2, 0x7, 0x6, 0x401, 0x4dec}}, 0xe8) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:49 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_bridge\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0x2, 0x3, 0x0, 0x20100000000000, 0x6}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x3}}, 0x18) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:49 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="056304feeb97efe78023af90f2bc40d221c9948bca594076bc84b73296a2135dadde6ae3f8a43e4b3c61de5e63661ffd3e414e482f317378ece80c93be9069be751f000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000000)={0x40, 0x2657, 0x6}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) socket(0x40000000002, 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0xc810) 23:27:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004104) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x4) 23:27:50 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xf, 0x4, @thr={&(0x7f0000000100)="ac44cc37736fe639e03a981c8de86d522dd468fc25154424f2ba8b45bad3fd27835458f7da06603625f64cc9acc19fbe59ed92f060c2471f320ba2f74a65196dce5169a2c6a075f6d404ff8a2a3e18b10f7e4f552c3528a62dc5c4a180e430122d5c97f1dc788b344680093983145b41be4299ae62a4f92d5db95288663eddf606c959eedda09ea7626057c4ff9c000534d16fa80a64f8a78e527bbef807c4291269ebcfb95cb8eea972d68a6ed8d5edcb97c92d8d54f3952c5a45b0eee46754330c63388a03f867e92e4711bded268eb9", &(0x7f0000000940)="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"}}, &(0x7f0000bbdffc)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r1 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs={0x1}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:50 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) vmsplice(r0, 0x0, 0x0, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) 23:27:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000000400)=""/138}, {&(0x7f00000004c0)=""/231}, {&(0x7f0000000200)=""/21}, {&(0x7f0000005080)=""/4096}, {&(0x7f0000006080)=""/4096}], 0x0, 0xfffffffffffffffd}, 0xe169}, {{&(0x7f0000000600)=@vsock, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/86}], 0x0, &(0x7f0000000740)=""/4096}, 0x1}, {{&(0x7f0000001740)=@ax25={{0x3, @default}, [@bcast, @null, @default, @default, @null, @netrom, @default, @netrom]}, 0x0, &(0x7f0000001a80)=[{&(0x7f00000017c0)=""/213}, {&(0x7f00000018c0)=""/177}, {&(0x7f0000001980)=""/62}, {&(0x7f00000019c0)=""/151}], 0x0, &(0x7f0000001ac0)=""/191}, 0x6}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001c00)=""/177}, {&(0x7f0000001cc0)=""/113}, {&(0x7f0000001d40)=""/4096}, {&(0x7f0000002d40)=""/31}, {&(0x7f0000002d80)=""/103}, {&(0x7f0000002e00)=""/119}], 0x0, &(0x7f0000002f00)=""/192}, 0x200}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002fc0)=""/204}, {&(0x7f00000030c0)=""/1}, {&(0x7f0000003100)=""/229}, {&(0x7f0000003200)=""/104}, {&(0x7f0000003280)=""/179}, {&(0x7f0000003340)=""/10}], 0x0, &(0x7f0000003400)=""/198}, 0x8}, {{&(0x7f0000003500)=@hci, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/213}, {&(0x7f0000003680)=""/50}, {&(0x7f00000036c0)=""/145}, {&(0x7f0000003780)=""/4096}, {&(0x7f0000004780)=""/74}, {&(0x7f0000004800)=""/135}], 0x0, &(0x7f0000004940)=""/137}, 0xffffff01}, {{&(0x7f0000004a00)=@nfc, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004a80)=""/25}, {&(0x7f0000004f80)=""/234}, {&(0x7f0000004bc0)=""/12}, {&(0x7f0000004c00)=""/105}], 0x0, &(0x7f0000004cc0)=""/138}, 0x754}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="cc9f2fb0fa4bc630fdc13f139745962296d79b4f4e3d7cae68e1abbaf035e767323c4b63d3cfc297021d7f65ffc4b38e2f69b3769dadf76a2be9b5f474ad0c26b8a308427b5c709b05756d375405b379802209", 0x53}], 0x1, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:50 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) dup(r1) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:27:51 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2214}, {}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x8001}, {0xffffffffffffffff, 0x3407}, {r0, 0x3032}], 0x6, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000000)={[0x102cf79]}, 0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:53 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffb7}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f14a4bccc2fc144f7dfecc24ab81a78ba05b79f422fcb834f52d3c15c24f17b3c73f02e54f0304c853dfb8ca7b2487e889c679c8ed1d75df2bf6d33c1670593a7c2544e5a81bae0bbd7eef53d1e1e1b33409e14f225dd279b21151cd23769604e99c87c521ee97f2453a57b3d3312ad6b0f7505696c2f88c5a6e17c922ad4f9b27eda7bac23e09b323816fac6b75619469d4ca5eaf3168ff0501ad6c0008fb15058ec914af4b731887f30891bb4595d31518630844464805d05a8ced3f2c65271ab9336023cb17d4"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x182, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(r1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:53 executing program 3: getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x10000076, 0x0, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getpgrp(r2) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 23:27:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup(r0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='rose0\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) dup(r2) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:53 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r4 = openat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000340)="7a75e3b6fc18a2beda79517344154545d6f6281f076cb43a7b1c6af8f7f0be275847025eb53603d4b8dadf687ba769a6a6a8dd00b31ea209743f99d3551aedce9dd41e433541486d226da677c452c38822a34efe46fb91ce0dd3537d15a70349482c57d1d3e0b427c603a236", 0x6c, 0x8001}, &(0x7f0000000400)) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/7, 0x7) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:27:54 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x70, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x73622a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/124, 0x7c, 0x1, 0x2b}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}, @request_death], 0x0, 0x0, 0x0}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup(r0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='rose0\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) dup(r2) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x10, 0x0, 0x5, 0xf4df, 0x100000000000003, 0x0, 0x80, 0xfffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xca, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) dup(r3) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x44}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="4a7a847e4a96c2202169a21ca1815a01", 0x10) 23:27:55 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4810) 23:27:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="4a7a847e4a96c2202169a21ca1815a01", 0x10) 23:27:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x6, 0x8, 0x231d, 0x1ff, 0x7, 0x8000, 0x40}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r1, r0, 0x0, 0x800000080004103) 23:27:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="4a7a847e4a96c2202169a21ca1815a01", 0x10) 23:27:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x2, 0x191c, 0x40, 0x5, 0x3f, 0x100000000, 0x5, 0x5}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:57 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x7, &(0x7f00000005c0)=""/144, 0x90}, 0xd3}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000940)=""/208, 0xd0}], 0x1, &(0x7f00000008c0)}, 0xff}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000001d80)=""/207, 0xcf}], 0x4, &(0x7f0000001e80)=""/99, 0x63}, 0x3}, {{&(0x7f0000001f00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000002f80)=""/212, 0xd4}, 0x800}, {{&(0x7f0000003080)=@pppol2tpv3, 0x80, &(0x7f0000004480)=[{&(0x7f0000003100)=""/191, 0xbf}, {&(0x7f00000031c0)=""/13, 0xd}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/133, 0x85}, {&(0x7f00000042c0)=""/116, 0x74}, {&(0x7f0000004340)=""/120, 0x78}, {&(0x7f00000043c0)=""/180, 0xb4}], 0x7}, 0x5}, {{&(0x7f0000004500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004580)=""/50, 0x32}, {&(0x7f00000045c0)=""/169, 0xa9}, {&(0x7f0000004680)=""/168, 0xa8}], 0x3, &(0x7f0000004780)=""/189, 0xbd}, 0x8}], 0x7, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) truncate(&(0x7f00000008c0)='./file0\x00', 0xfffffffffffffffa) 23:27:57 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0xffffffffffffffff}, 0xc) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:57 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x20100) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 23:27:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="4a7a847e4a96c2202169a21ca1815a01", 0x10) 23:27:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000200)) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:27:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) 23:27:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r0, 0x0, 0x881) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x9, 0xe0, 0xd0, 0x77, "edede70e1158cc5e54755d42766954f40a081b2bef04136e5b143a355ddf4799cbff229b68dd4bacfbb5fd3a3c23e7e71b56f369c4a92040b897f8e887a2aced12d4b1948e534f1e097c9437ed9722c043630420b6dbae2ef0434a7c09861919b1964a889425d52b7b878b02c0d72ca9b0b2a01911a2fb"}}, 0x83) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000100)={{0x0, 0x0, 0x80}}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) tkill(r4, 0x12) 23:27:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:27:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 23:27:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) 23:27:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) [ 1340.932043] binder: BINDER_SET_CONTEXT_MGR already set [ 1341.023305] binder: 27758:27763 ioctl 40046207 0 returned -16 [ 1341.236751] binder: BINDER_SET_CONTEXT_MGR already set [ 1341.248711] binder: 27758:27763 ioctl 40046207 0 returned -16 23:28:00 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) socket(0x40000000002, 0x3, 0x2) 23:28:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = dup(r2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) sendfile(0xffffffffffffffff, r4, 0x0, 0x101) 23:28:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x1, 0x0, "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"}) r5 = accept4(r4, 0x0, 0x0, 0x0) clone(0x800, &(0x7f00000000c0)="28d1cbbade75fb10033c342f41c6d57d132ca8fcfc0169329b409ae6ff", &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="d7e7aeb11468117905fe560e86e28d18959eb650ed236db5bb289191fe2b1b5c") r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:00 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x6}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000044, 0x81, 0x5, 0xfffffffffffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x800000080004103) 23:28:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mq_timedreceive(r2, &(0x7f00000000c0)=""/6, 0x6, 0x6, &(0x7f00000002c0)) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:28:01 executing program 0: socket$inet6(0xa, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:01 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, r2, 0x0, 0xd) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1344.008591] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.008605] binder: 27827:27829 ioctl 40046207 0 returned -16 [ 1344.041470] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.041559] binder: 27827:27829 ioctl 40046207 0 returned -16 [ 1344.056887] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.056900] binder: 27827:27830 ioctl 40046207 0 returned -16 [ 1344.064466] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.064726] binder: 27827:27829 ioctl 40046207 0 returned -16 23:28:03 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="c000f40000008fff0afdca208098b1b2ab275e9c6898a48f558654dc068025c845cc88042fdb0d0bb67d62b05c28a0473ecc5dc619843ef113373416a130de96d03eff412257e28214ebde0ab5fea0071eb9e12a6a62c57ebb98b1383cfe105928e82b1e27f0fac29c431572b32cccba2861dc14fccbb7a0c78f3cdb3b5b8289288b6a24d47c882c5439cbe6ea2036f7bb8cfb2065b873c439576e9de44c908e027ca1e77a95194142e1cc63127c912e9c33b0d81f63db64ecf655dcfd6bb5f1b124239db8d6e59169b8620190425d7fea6a1eadabcf44543e6041ba7ea532a2a999eec0539a205bce0c1bf21d621694dae510a796d757898d00d114ae3409824ea9d202be203d3cc8a6b6a1bbd6d3637ac8", 0x112) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\n\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000600)=[@acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/210, 0xd2, 0x0, 0x40}, @fd, @fda={0x66646185, 0x4, 0x1, 0xb}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x400}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000200)=0x9) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000180)={0x4, 0x10, &(0x7f0000000080)="53b23f7160ed455a866c639a719086cbf9c3a8103cabfc70976dd44197faa8f140788b3af6050efcb20519511ae3a5615ee8a2154912c2e0af26d8a66df1d988f28123238d79691831f10638015b0594e69e4eb75956d3ce9051a373efca59e75b7d281801fa263fe34f4c1790ae545a7e28e916", {0x401, 0x1f, 0x41495043, 0x7, 0x50, 0x4, 0x3, 0x7}}) sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:03 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:03 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = signalfd(r0, &(0x7f0000000040)={[0x8b24]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 23:28:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x8e29, @mcast1, 0xffffff7f}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e23, @empty}], 0x7c) 23:28:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000200)) rt_sigpending(&(0x7f00000000c0), 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:03 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x1411, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x1) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:03 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) 23:28:04 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 0: socket$inet6(0xa, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc42, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000040)={0x3, @default, r5}) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x1}, 0x0, 0x6, 0x0, 0x0, "d6742c36a63fc4a3"}, 0x10}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000000c0)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1346.807966] binder: BINDER_SET_CONTEXT_MGR already set [ 1346.807979] binder: 27871:27891 ioctl 40046207 0 returned -16 [ 1346.829981] binder: BINDER_SET_CONTEXT_MGR already set [ 1346.829997] binder: 27871:27891 ioctl 40046207 0 returned -16 [ 1346.833023] binder: 27871:27891 ioctl 80285442 20000040 returned -22 [ 1347.336940] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.458247] binder: 27871:27928 ioctl 80285442 20000040 returned -22 [ 1347.794104] binder: 27871:27886 ioctl 40046207 0 returned -16 23:28:07 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000040)=""/48, 0x30}], 0x2}, 0x12040) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:07 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) finit_module(0xffffffffffffffff, &(0x7f0000000040)='[#\x00', 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x50000000000443) r2 = socket(0x11, 0xa, 0x401) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r2}) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x183, 0x5, 0x0, 0x101}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000840)="6c1bc83fc9aa8304099055320553cbb41d7afee4fc5c656125f822638d7a19119a63", 0x22}], 0x1, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/73, 0x49}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x6, &(0x7f00000007c0)=""/82, 0x52}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x50080000000446) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB="4c3bf7b9", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44200000100001040000000000000000000000c762528b357382d52e9069daff67f0df9a944ec234e25ad1e985e84a70607bbca0f76da1ba4efb34f756a13939905fee549dc4c857860c7a42d214f44ca620fb13bac7a62b20f973c716286d00d12cc3ebb0e163470d3c21130ded8920d46a2ab982839ed135253181c1489d28c6376cf61ff5256e26514c8d6a0d544f8fa1eff2a84416efa7bc5774bfcc4774bec41caf66ef9cbfaa189594189c2a616b3d319ef8037ddf7300233756fedc459f2d3ae109f77a3e653a7d6a149a1e9d863a8b44bd44c74d169e6263f0caed853584675d7205e5342b2580eb180c8d96294eaaa9baa90b395d20c6b80deed56000c835a1af687c055e8e561a2c1f3fedc53057dd2f8e0fe3dbdd6f0445aaeb8d05a5f28439fe0fee803f08173eaa4554e27f914382cf653eb712ebe91404438bb4a2f749aa64c88b588fb6f59db0be829f7fca00b167fa8417ce1442e31227976fc5cca15382c83c5c8d39fa7cd24400"/382, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a0069f580f08333b327f469dd19a76ced0405fa5c4e71dac9a4c42494698dbbb60e342de92f55e50705ae413c2b4e34ea9b18b16234a6c477f45b85ed9e4cf881d213b46da6008c1057b977117ce738697d75472bae19b75f251ab56a522a4a6e49ae320775f5183153a82b3639a8f70cc5f742726f240079be2f0108de245692df4625743dd0ee5c0c9d7fdff8dbfd066378bba3d6c65acb34ba0d0819a8d5ee4733ca6602fb1314fc4b81c63ce9940bce24a69ffee2144626c4ac5874f14d83fb0874fed2", @ANYRES32=0x0, @ANYBLOB="d131d3b777f86f6b1ce23a7312ac2501f006124106594a4e3bee74417849f3a29030b26043865a9f37a6491a9f194e78b87944c0ef0ab491196609d77db0d6a4700b501f976d3f16bf50ee6983dfd1ed1c2c06b979b95eb7c75076d1232fefc10758da4e63765d4ab22ff13089e7e7cba1c1c3b7c4a065a514eae150c00290c1ed0cd2bc132aac12cdbd1a4d87c963eba258f777f41909c455caaaa5750bc0cb8ecdb58352bfb9ee38d50b9b8b15c6e27fedc4b6c75d2e"], 0x44}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000fed000/0x10000)=nil, 0x10000}, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="9b8e914392bee65c08000a00", @ANYRES32=r9, @ANYBLOB="2af8a947a1f72a23a992e37f5f7a76c13a9662e2355feb08907bdc03da7059074173dbcfeb2615c6ae2c16f02c5eb8979f6d9bee8dae72c39e10aa9df0f759ae883aa24896d4dfc9bd4d244badbc7e3a5f2434b518226b5c7c2df7859e882bb8b3d7446628575300"], 0x44}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000000880)={0xa14, 0x0, 0x400, 0x65a, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xf5a6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x87, 0x58, 0x80, 0x87}, {0x7f, 0x82, 0x14, 0x2}, {0x4, 0x4, 0x81}, {0x6, 0x81, 0x8, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4cef}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3ff, 0x1f, 0xd, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x30e}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9b}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x3f, 0x4, 0x9, 0x10001}, {0x1, 0x0, 0x1f, 0x60000}, {0x8000, 0x7f, 0x40, 0x3f}, {0x0, 0x8, 0x40, 0x1}, {0xfffa, 0x4, 0x87}, {0x1, 0x3, 0x7, 0xa6}, {0x0, 0x5, 0x2, 0x2}, {0x1609, 0x0, 0x2, 0x8}, {0x101, 0x6, 0x7, 0x1}]}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0xffffffffffffff14, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xffffffffffffff56, 0x4, [{0x0, 0x3, 0x1f, 0x98b}]}}}]}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x20000014}, 0x40) ioctl$RTC_WIE_ON(r0, 0x700f) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 23:28:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000000c0)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1350.019671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1350.034532] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1350.049764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:28:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x9) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xf771566b89e2f99, 0x0) [ 1350.067011] 8021q: adding VLAN 0 to HW filter on device ipvlan4 23:28:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/mcfilter\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = semget$private(0x0, 0x4, 0x50) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000040)=""/12) sendfile(r5, r4, 0x0, 0x8000) 23:28:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:08 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x4}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7fffffff}, 0x50}, 0x0, 0x1, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1350.934373] binder: BINDER_SET_CONTEXT_MGR already set [ 1350.956724] binder: 28001:28003 ioctl 40046207 0 returned -16 23:28:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x10000000) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010003, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x57, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x200c80, 0x0) dup(r5) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1351.301583] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.342028] binder: 27989:28011 ioctl 40046207 0 returned -16 [ 1351.350351] binder: 27989:28013 ioctl c004743e 20000000 returned -22 [ 1351.533404] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.614590] binder: 27989:28023 ioctl c004743e 20000000 returned -22 [ 1351.627142] binder: 27989:28011 ioctl 40046207 0 returned -16 [ 1351.634271] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.725151] binder: 28001:28010 ioctl ae45 6 returned -22 [ 1351.731052] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.738656] binder: 28001:28003 ioctl 40046207 0 returned -16 [ 1351.768259] binder: 27989:28020 ioctl 40046207 0 returned -16 23:28:11 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x81, 0x5, 0x9, 0x7f, 0x40, 0xb2, 0x3, 0x8, 0x0, 0x80, 0x6, 0xff, 0x85, 0x7f}, 0xe) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x1}, 0x0, 0x6, 0x0, 0x0, "d6742c36a63fc4a3"}, 0x10}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setuid(0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0xd8b, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)="37d3291bb67adcbc07672a707e6b4b593b32995699e820888eaf8f2b574fa9ec47853abd92eb2996c52d3c03f223793caa95db8d5d1f40e0ea8b849f21d5248f02298281af75e770e2ce8b5bb94145d8fe3d116288f86bbc87d8c57fcf69997c56f22a2583c9e665fc6c65175c4eb1c1775cbe3470960ff5eab8944e26525cf29762", 0x82, 0x9}, {&(0x7f00000002c0)="59499ad27e168965dbbb1026f9dbfb6207e668a59c238f7ea271d67a00ffebe379f13da445a0297bb9bcf8c7431b9d3b98079214d4603c1e1cb7456948c2f83682", 0x41, 0x54d}, {&(0x7f0000000440)="75329d104663761bc979311e97f165a504ccd623b0ac639ad8c4f74920048b5c41194b7598bfaa26d6d8f5f014f1b34698af5fb2e5791d39e8724c550e0dd112fcbadf6ecca77af3b29ee810f56d4f268db964ed1be2800fa649c62620da0d199a84b70ab5b54256491e4a7ae81a257b0b6f14bec3eddecdcc1a4c452b6fa49fb9c53738286c7de5242a40380029cfc5d47831a2dd826af1297025823c1aed7d0f418cda5b7ebadc4dbf460027db9f265dae45db026cf6d07f3c7af36d3b3a44d69347a646c12dd221d3de5067da7272471a763b5c97c46d7dd2d5747e8ca0d086b0935c1601db1dc4be99f82bd7f218", 0xf0, 0xfff}], 0x102000, &(0x7f00000006c0)=ANY=[@ANYBLOB="726f6469722c726f64690900726f6469722c726f6469722c736881e5746e616d653d6d697865642c726f6469722c747a3d555a432c6673636f6e746578743d73797361646d5f2d0000006a5f747970653d2b2a2c657569643e909a9daf7cdf74162c9ab458289e1c42d8164a23a240ae1f8278cdd219000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,subj_user=pagemap\x00,smackfsfloor=skcipher\x00,obj_role=pagemap\x00,\x00']) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCSIG(r2, 0x40045436, 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 23:28:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) 23:28:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) getsockname$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="048401ce630440f822dec012f89b5ec42127c72a200e72a0bb95a77255ed03730b3b3f38fedcbe25190a9d790c246445e36d054ae2bd28636db911f012b2d920ca2a87120b9bd1b5cbad7ea20cd7870e605fb8d14e44666dd438486b095a3b9eb9b9645a07b13a5444643af428d631b509973d710a7cabf2034749b0d5411c9ec7cd574a355a97982d7f7f15e8c98415794740cbd7d0e56a948c01b48c2ecf6d6cb9c2a7ac2a3d26608a903dcaf2983083a5b3d6228baf2ee2e440f972fdace75ba2b7ae08a41439399bec23982c0cbb5bf12e036d5f31a5f3a1b46e144bd19925a79b8dd9e3afc46eae0000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}, @register_looper], 0x0, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r4, 0x2}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0x800000080004103) 23:28:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/mcfilter\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = semget$private(0x0, 0x4, 0x50) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000040)=""/12) sendfile(r5, r4, 0x0, 0x8000) 23:28:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x7478}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:12 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x2800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0x4, 0xfffffffb, 0x7}, &(0x7f0000000080)=0x10) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:12 executing program 1: prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000064, 0x0, 0x1, 0x3, 0x101}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sched_setparam(0x0, &(0x7f00000000c0)=0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = socket(0x40000000002, 0x3, 0x2) sendfile(r4, r5, 0x0, 0x8) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) [ 1354.590820] binder: 28090:28093 ioctl c004743e 20000000 returned -22 [ 1354.614733] binder: BINDER_SET_CONTEXT_MGR already set 23:28:12 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCSIG(r2, 0x40045436, 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"582e6a4382246cc0fdb726bd5458e76bd07ea84245b21a09179ac9557ff9717ea5ed63a8f2849feaf9c2c7809967893f1fc31470c00e2491fde31d4b4f6cfb4b65b1fb6daf25aa3c026c0196e691b1fae358eee8dea8bc62e6ac3ec4c12b1038db99531ce1befcf92ef345e8acd251ddec1003378a12ee94b6b1bbda0797831d26928aa5546bbfcfe0fc0de221a24c53c3c9ad7daae022c50467c442a185df5e789b655f1f5b264ab20d3544ee79bd2c8c9f311b99e4744439f058150e5a2243d85aa00cb266eab81247b575ecf4a6e3821db5a6c8135610ba5c954151e08dcedd0a261d12ec3222820f86336a4fe6f4deac0454d700faa6c2dc166d35bc0b029afa52fee200665afdb78a8310dbcb0a1e9947fce686321a398e058b865933b71dcc6b3e04f49384d59fe87632b15a1bbef43bb43b134536a6c80c4fc534eccf8df9f935e8610d83517c897e4ebd25950187403c519b303bdfd8a8b99253ae85955fc9c6e21e988e28988dcde785ee35b30c3cdbe2baaea7170cfbaa6d039a8c25e6f23adc46591e0ff4cb3bba86c3735f384055405f38760dbfdaced4fa6b53deb3dff3db04b1dc0b2c7543a48a7e2d996f4f62e7717aaf5237e8d6ef8a3887bba000bb4d4f5554bc66fee6721ed2480538b3f73ff0df8770eea8e782aacf57fffa32f4a87d0603289b0bc6f7a2abe7e78f55f2d8e4e57614f7b54c784fefde8fa0b7b8e216b286ee10c9bb732b32c603f4656918e42bfc3a6cb5782f02083a9523fe5a3de4d6ba36ff61ddc91799d2d7e8759c3b45c1b830ecba80c7122fc8a098279d8c2170f26284a6c0349756e1d23a18f58f3ef4afe0847f83f54a3f7ec46ccbc260be5b2df20595fd1179be7f033da10e78fd27af29f1ed0dc75804932317b52f5f82a4a76ade8d9511f643b9503a56b24901d857012c401aa7b6d228245ba5f07beb9b3be20e56c15f86f44fabcd9cbe9b9867978949f1366eb4c35ac7ec8c3120e46ba8a3971f95a940672598bfd78bcd3be30c057740067ef63cf8da8fdd0762febfbf837ed0ca89cefe9320ad77dcd5ca420a6becdeac4cd70024824cee744dff2e97844a3ca3c6357c7c7ec0bc509c575aeb774626d816966e0a20a40118cf029c3d44f0e2a16dd6e68b574ac9c66e93f59016cb41b2bd56e577ddfe0587896d6844c7b71f25d0ad070d75a5edff9d86c733cf78f2dc7c409af0dc2538fbf5f699f1676a088f5ec0555e170b68b14992d894bcf7911c564530db4c6e7ba6020b81fc4f126720be2174c3885ecbf042a5b94a6f762e52c9fec6d0b349703e14568429d48aab8ed8cd4bd3af6597f78bac267b138ac7e8150e0b8aae74937edc34278f301617d8bc5cea766603c86eebcf8b82b59e428c9843cc8d0b8af9b4d1265af200d1b3fa8c41699c301be51e679a74cc7f5e4ca4c4f521dd"}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 1354.649275] binder: unexpected work type, 4, not freed [ 1355.038534] binder: 28075:28081 ioctl 40046207 0 returned -16 [ 1355.211233] binder: BINDER_SET_CONTEXT_MGR already set [ 1355.311872] binder: 28075:28081 ioctl 40046207 0 returned -16 23:28:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="6752cf9cc0402deb5c379aab5bbbbf28be9ed8180c67bad5b8083871703924d60f959b7dcdd08c6229c443f20403ca420e4f4b5b5ad18fd45934ac7f401f833d5ba79ca424d939f64c3e894a58f0eff0d7d3048f954b9ec1075d6323987513e94bfc149efaaac2027aa4c6338900c19fadccb6a4a1b153b430c72a537eed88bdd4bad5392af6075e761a9ed574dd52e2bf41fb8809cd6e56080974b8007f14708f4c9f54d93c6137bfd8e9eff5a343f955", 0xb1}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000000c0)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x58000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7ff}, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) 23:28:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x7478}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000040)) 23:28:15 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ptrace$peek(0x2, r0, &(0x7f0000000000)) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x48}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8681}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x3d}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x5, 0x4}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000002c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x5, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc000, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1358.157690] QAT: Invalid ioctl [ 1358.398223] binder: BINDER_SET_CONTEXT_MGR already set [ 1358.398237] binder: 28138:28161 ioctl 40046207 0 returned -16 [ 1358.443963] binder: BINDER_SET_CONTEXT_MGR already set [ 1358.587310] binder: 28138:28166 ioctl 80045438 20000040 returned -22 [ 1358.618300] binder: 28138:28161 ioctl 40046207 0 returned -16 23:28:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 1358.632760] binder: BINDER_SET_CONTEXT_MGR already set [ 1358.638864] binder: 28138:28166 ioctl 80045438 20000040 returned -22 [ 1358.646026] binder: 28138:28153 ioctl 40046207 0 returned -16 23:28:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7f) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x56, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffff801}, 0x40000, 0x0, 0x1, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x5) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r7, 0x0, 0x7) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1358.958553] QAT: Invalid ioctl 23:28:16 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x2800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0x4, 0xfffffffb, 0x7}, &(0x7f0000000080)=0x10) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:16 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfe92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x40}, 0x8) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect(r1, &(0x7f00000002c0)=@llc={0x1a, 0x1, 0x3, 0x6, 0x8, 0xff, @broadcast}, 0x80) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:16 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x2800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0x4, 0xfffffffb, 0x7}, &(0x7f0000000080)=0x10) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000001780)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES64=r0, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="7ba74f6e14fe18429f8a41cc90e683c8ed134d5fb79e6607254fef6185b047993f41753008005739d66cf9ef0a114a37667085013c0a965b36e25b12756525e1a0bf5236095ed5f56edfb981bfbebee167848d72fb4b3b10542e4370f04494ccfecff278f3780af25e28ceae8e4d5a1631e25822be0419d5d555a6a9152dc270"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x98, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1}, @fd, @flat=@handle={0x73682a85, 0x20a, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @decrefs, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x3, 0x2, 0x4000000000010}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/67, 0x43, 0x2, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0x9]}) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000002, 0x3, 0x2) dup(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000000c0)) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:20 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = signalfd(r1, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0xffffffffffffff3f) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @reserved="b622601503bcbd18a0cb7e02f45ee6de3470e24fb5c831edd8400bc32d805306"}}) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x7fff, "e80a6b"}, 0x6) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x100}) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:20 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x2800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r3, 0x4, 0xfffffffb, 0x7}, &(0x7f0000000080)=0x10) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x79ed, 0x2}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000002c0)={{0x0, 0x0, @identifier="257f9935fd6e56130fe086962de7510e"}}) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 23:28:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x80000, 0x7fff) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x3, 0x104, 0xffffffffffffff9c}, 0x40) getegid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) socket$inet6(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') r4 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {0x0, 0x0, 0xef, 0x6}, 0x0, 0x6e6bb7}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) close(r4) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001ac0)=""/160, 0xa0}, {&(0x7f0000001b80)=""/124, 0x7c}], 0x2, 0x0) 23:28:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000001c0)={r4}) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) sendfile(r5, r0, 0x0, 0x800000080004103) 23:28:20 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000)={0xd000, 0x1, 0x0, 0x3f, 0x20}) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:20 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ptrace$peek(0x2, r0, &(0x7f0000000000)) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x48}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8681}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x3d}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x5, 0x4}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="049f000000c962249ace5b630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000001780)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000001580)=""/201, 0xc9}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f00000000c0)=""/118, 0x76}], 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendfile(r1, r0, 0x0, 0x800000080004103) [ 1363.199891] QAT: Invalid ioctl [ 1363.211207] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.216901] binder: 28288:28289 ioctl 40046207 0 returned -16 [ 1363.226649] binder: 28288:28289 unknown command 40708 [ 1363.233224] binder: 28288:28289 ioctl c0306201 20000200 returned -22 [ 1363.243100] binder: BINDER_SET_CONTEXT_MGR already set 23:28:20 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'gretap0\x00', {}, 0x9}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1363.249347] binder: 28288:28289 ioctl 40046207 0 returned -16 [ 1363.305853] binder: 28288:28297 ioctl 4020ae46 20000040 returned -22 23:28:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}}, r4, 0x100, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authenc(sha3-384,ctr(serpent)))\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:21 executing program 1: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:21 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa3c, 0x100000001}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1364.089289] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.321685] binder: 28288:28337 ioctl 4020ae46 20000040 returned -22 [ 1364.392706] binder: 28288:28297 ioctl 40046207 0 returned -16 [ 1364.392808] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.580192] binder: 28288:28328 ioctl 40046207 0 returned -16 23:28:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xb}}, r0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8880) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x2) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00r\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x220c}, 0x1, 0x0, 0x0, 0x18080}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="0d166fad81013edee80b9734d022fc6970d757b743592f0c5e32859683c79aa3dc76285ac5921b9b447d31ed2d9ad3d8150f0a63808f5b2394cb1f86a99687e2162dd520eaab664bb7c93de8424ce2f42f4937d118226059951774c92226ddc4f3f88cae5cb5c13b25e87c338d4ed674b9e699c83efd1d07223f060290a2d08bcdbae697844e7ab18827747708565897a9078d7747a412e81af3de07f571e99e71fd5dc1a5dc5e6e8c7b46a131f41ad25813ff063e65cf4c573ef8f2bcff3743c59852c5f127d080577505917713e124be36b71670436176281c0ed274e5033b", 0xe0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) sendfile(r2, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x90000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r5, r0, 0x0, 0x800000080004103) 23:28:22 executing program 0: socket$inet6(0xa, 0x80000, 0xa) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) vmsplice(r0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, [], 0x1}, 0x1}, 0x1c) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1365.878233] binder: BINDER_SET_CONTEXT_MGR already set [ 1365.984534] binder: 28387:28396 ioctl 40046207 0 returned -16 23:28:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xb}}, r0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8880) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x805) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x80000000, @mcast2, 0x5}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x5a59, 0x1}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4048085) 23:28:26 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x7f}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900), 0x0, 0x2120, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup(r3) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000002c0)={0x9, "ae4f8984dad46beed957e7e92180afd74fedf50ac39bd7155927b831ac053347b7db6991c7edc54da92b8b63ad05751745949df842744840f2cb16fbe0fc936f59ead47a837c59768bde000000d47c0727ef32acd8256c7534901a4f5f9a9c5b3f1f7ca4e07f9fd35467c896b51f1a672b265e6fd4dbd83ced13c6747a979eca92433a7c26d7eacb9008012645376017fdcb26868f1d39a797621bce3fb51e9454791cc56503ff010000000000007e5b7905cf0749899da4e727dfbfa68739ae289cf4e7299a1f524fd1cecf59b1eb29815d948845ecd7f797cda02f2edf9dee3916ac6df98f2c473a8ac48bb96e0ea7a900"}) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x9, 0x800, 0x7, 0x3, 0x81, "947a65869ac4a3c87f1845a0ebafafce4fde27", 0x5, 0x1f}) 23:28:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000816, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c72691dc7a1ce6b0334613e15e36664906f3d234a5e3c053d9f0efb8b8ef8b7db61d885191932aa2a9245a73b9eebbbd988a5bf34f2394890b7fedb2706e47c296d8d668f54c01c08c5f40e21", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="24006c745d69643dcd", @ANYRESHEX=0x0, @ANYBLOB=',cache=loose,version=9p2000.L,access=client,loose,msize=0xfffffffffffffffb,defcontext=staff_u,dont_hash,\x00']) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:26 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x1, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:26 executing program 0: socket$inet6(0xa, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) fcntl$dupfd(r3, 0x0, r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0xffff, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x5, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4040, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = dup(0xffffffffffffffff) r4 = dup2(r0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x19, 0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @multicast}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv_slave_1\x00'}) bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:26 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0xa04f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0563051dc5b2cad58a0a405dbecc0300ff01000000005d00827172a17bba03cfb2fc01390077c4690000000000000000000000000000000000000000000000008f13e17142c8fe751bea232cf4047f0c4e03a0358c0e3396f9204bf8c6d649cd2992c285857a4f157d7472276b3e6878e909cdea17c66ae6340d1571c86a6541da63dfc21f89fcecb9bbd2568a610437f5b57ef602d5ce957f34"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:27 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f4620440978cc868b628125c2d824ad2c3628efc2347f040d34063821190649024d03fd83c613a07d8540e9a41ceb1cef237c58e9b6698239974bee9b6e4324b836c522d2863bbff84bbee8774eb442a9491"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0xa}, @fda={0x66646185, 0x6, 0x1, 0xf}, @fda={0x73682a85, 0x2, 0x0, 0x2f}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000000)={0x7, 0x8, 0x7}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="bbc1340bbc011bdeb20d35b8f17c1c89c3dae78a7e580916b0a3ea4f2d57af0edbc2aca6c38ce78d3450ace80ed001df640725e635a245f3c6c58e8110ef9bd39ad09d5a9f526ee78f5c63d5dc457e4c971cb1f4d31f", 0x28) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffe}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000200)={0xffff, 0x7, 0x100, 0x9, 0x3, 0x3ff}) dup(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @identifier="5c536c223b33091a5eb4ec651a4dec2c"}}) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xb}}, r0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8880) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:27 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x8000, 0x1, 0x1, "4244cf54a326e39757fa3ba00bf8de6af22b64e5d2dbcf221a14cca773183b02", 0x32314d59}) 23:28:28 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 23:28:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xb}}, r0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8880) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x4a, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_dccp_buf(r6, 0x21, 0x80, &(0x7f00000002c0)=""/115, &(0x7f0000000200)=0x73) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:28 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xb2b7}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffff3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2c, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, @fda={0x73682a85, 0x6}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @exit_looper, @request_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x0, [{0x9e, 0x0, 0x2}, {0xb36, 0x0, 0x7}, {0xaa3}, {0x90f, 0x0, 0x9}, {0xbf5, 0x0, 0x40b}, {0xe5daca2b8627ad29, 0x0, 0xffffffff7fffffff}]}) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:29 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000000000)={0x0, 0xe, 0x1, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7f, 0x42210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendto$inet6(r2, &(0x7f0000000380)="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", 0x1000, 0x4004090, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:29 executing program 2: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x7f}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900), 0x0, 0x2120, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup(r3) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000002c0)={0x9, "ae4f8984dad46beed957e7e92180afd74fedf50ac39bd7155927b831ac053347b7db6991c7edc54da92b8b63ad05751745949df842744840f2cb16fbe0fc936f59ead47a837c59768bde000000d47c0727ef32acd8256c7534901a4f5f9a9c5b3f1f7ca4e07f9fd35467c896b51f1a672b265e6fd4dbd83ced13c6747a979eca92433a7c26d7eacb9008012645376017fdcb26868f1d39a797621bce3fb51e9454791cc56503ff010000000000007e5b7905cf0749899da4e727dfbfa68739ae289cf4e7299a1f524fd1cecf59b1eb29815d948845ecd7f797cda02f2edf9dee3916ac6df98f2c473a8ac48bb96e0ea7a900"}) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000002c0)={0x7fff, r4, 0x10001, 0xebb}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x2) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00r\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x220c}, 0x1, 0x0, 0x0, 0x18080}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="0d166fad81013edee80b9734d022fc6970d757b743592f0c5e32859683c79aa3dc76285ac5921b9b447d31ed2d9ad3d8150f0a63808f5b2394cb1f86a99687e2162dd520eaab664bb7c93de8424ce2f42f4937d118226059951774c92226ddc4f3f88cae5cb5c13b25e87c338d4ed674b9e699c83efd1d07223f060290a2d08bcdbae697844e7ab18827747708565897a9078d7747a412e81af3de07f571e99e71fd5dc1a5dc5e6e8c7b46a131f41ad25813ff063e65cf4c573ef8f2bcff3743c59852c5f127d080577505917713e124be36b71670436176281c0ed274e5033b", 0xe0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) sendfile(r2, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x2) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00r\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x220c}, 0x1, 0x0, 0x0, 0x18080}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="0d166fad81013edee80b9734d022fc6970d757b743592f0c5e32859683c79aa3dc76285ac5921b9b447d31ed2d9ad3d8150f0a63808f5b2394cb1f86a99687e2162dd520eaab664bb7c93de8424ce2f42f4937d118226059951774c92226ddc4f3f88cae5cb5c13b25e87c338d4ed674b9e699c83efd1d07223f060290a2d08bcdbae697844e7ab18827747708565897a9078d7747a412e81af3de07f571e99e71fd5dc1a5dc5e6e8c7b46a131f41ad25813ff063e65cf4c573ef8f2bcff3743c59852c5f127d080577505917713e124be36b71670436176281c0ed274e5033b", 0xe0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) sendfile(r2, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:30 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) write$P9_RFSYNC(r4, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x10012, r0, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000100)=@id, 0x10) 23:28:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="c39282d6e98c04eb3a6922df27dd8f1e490ee162825d29b62fe819730c37dbae8bca1c410d13b6a44f46586bf050b870822c8bb1fb68bf06c896867509074f37fe97b1d1d2f263df7c94017e8836757bfe8389113bc6fd533094ffc32f100589dcee00e2d0a1a07e6ae7ed5349c79f2694eb829b1f642c1b8c1e269a1697f56cf33b613980b7bbf5c503a8698c22c3f30fefb71bbadeb587f2e87a630a6f6bc6c15d9a7f4f9056adea5f8296fbfb546996cf90f6cc90818987da96549f6d045710c1d2e8d9d6772427b125229b05a756a56ed018b021675beea720805bdebe1533365b9cf1cb9a2e58a52d9a5690210ddc6baa6001ce4752346ecb", @ANYRES64=r0], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05076204"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e8"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) munmap(&(0x7f0000008000/0x4000)=nil, 0x4000) 23:28:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)={[{@session={'session', 0x3d, 0xffffffff}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 23:28:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setuid(0x0) syz_mount_image$afs(&(0x7f00000000c0)='afs\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff1a, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000380)="bcaa25dcc81299df2705772d617f559b7a4169c7c2aca72c327db9e81a514d7ac56f3497e7097e02c1224d9d2a4b277098597d1a351e6850e52f3ece2f233707411f3871dfa69a4aec18cdcff80c3df5a7c741259908d0b353b2da22b8472ab54a71bb94f39019568f292cc75fadd50b66f6f07c2e35ea0da944ec0e1c0a297e41f4b73ea1b892aecf08c6ab13756472da63e0e15fb595deafa21f282f4d25c0c2fc620a16ade67a", 0xa8}, {&(0x7f0000000440)="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", 0x1000, 0x2}, {&(0x7f0000001440)="6b9b5bad36172addb6c60f7264cdbee4a185fbf78f240d39d94b775c6016c27af98729dd8030aeb3e4ccc7d4b7847585db9559718f08f7189a9c30810daf016717646c0c33dd0a12b2c4be6ec4bbb1efb7e4c119348500828d07a1b1c22396948cab3941afec6721d677d835b1ca01a68e0bf333dfc6e6c2874a8d26b147edd74e8c4a3433", 0x85, 0x6}, {&(0x7f0000001500)="d4e69a77c464d2d3e94e29081866ee5f7a9dcfd6e2f5daed3c0231f59cd2341412cbcae8444bd289bde42f3b681e905b1713e933f1669aee36b05faa1cb969e400c4bf18e19e6fa85ef2aed2a4d506eb98e89857481c35edac8b04c14682ee3330d411ba833fb55812f096cdbfa34c7342abcda8ff8f5ad14c22dfc864b2d55f1b24c24b29229425646c7ea21350a04de6973b4ca79d1d8ab0d12e56c146084f66944ed5c0504dcec77bf392463443f8f77813f01108aae14da08a0f9a681be3343a8698a40fb843c8ee1f1a222468cc89f68688774bad0eb32fe9a376c12819fdf583d64312c1c623fe4ba43a23e9cf7a77b2d09067ef", 0xf7, 0x1}, {&(0x7f00000002c0)="7a61e02a4ae9e109e3c24a64127157926748e74ed3b7292a7a806caecf7a3e4753225ec00e7c9165b67eb73be38feeef19053b1a14623308", 0x38, 0x20}, {&(0x7f0000000300)="cff48ed1cc82e0b8a77426c9cfb8a238f3d1d6b7c12ae206cca654513f1404163795445cb34e74953be79ef882e7752b59b8f0f27cd75ba792f080", 0x3b, 0x8}, {&(0x7f0000001600)="50028c226218d46d60ed4cdd80c600dd6399b809184d2546cccd83b685a3f42b904a66399f12d1cc74a31ca718a5ab12707cf77a734bbb42f013aaa5fe2e9f79e54fc3cdddd9c1c5d8d82f2d20e75c9aa4bff233ffbcee5af2cbd6e03196cd9a48db270d72423d32c168c3efed1e8830bf707c5e6cf041f6d2b12f7001f7a154f0fd", 0x82, 0x2}], 0x2008, &(0x7f0000001780)={[{@flock_write='flock=write'}, {@autocell='autocell'}, {@flock_openafs='flock=openafs'}, {@flock_local='flock=local'}, {@flock_local='flock=local'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@autocell='autocell'}, {@flock_openafs='flock=openafs'}], [{@measure='measure'}, {@hash='hash'}, {@seclabel='seclabel'}, {@subj_user={'subj_user', 0x3d, ':@(@.-$'}}, {@fowner_eq={'fowner'}}, {@smackfsdef={'smackfsdef', 0x3d, 'pagemap\x00'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@measure='measure'}]}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0xa, 0x9, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:30 executing program 2: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:28:30 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xffffffefffffffbe]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x5, 0x3, 0xc, &(0x7f0000ffe000/0x2000)=nil, 0x9}) r4 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:31 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x8, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:31 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:28:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x74, 0x6, 0x81, 0x1, 0x3, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r0, &(0x7f00000001c0)='net/sockstat6\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:31 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000000c0)={0xba, "28729a082ac038f24b134af98e66da7e801cc1202509f79cddb5504c2cc765031567995e1a4568f7bb139963d09334ec270a4077a109c3828278d87c3624eba74b31fa27fa8c0f41ef7ba571d29d007bd0fd6b67a07357a966e1c7679b482a8c05d709c07fd8e2eabeaf36502e40885d56f7f44cd76128c7bb1fde1b5be236571e4e392349525e0b6c60395b2e4e0f772ed3e424956725c1ed555d084b2528469a02ae2b9df1567ed34ff52872ee291f04908f8c9a1d5eca78f1"}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) 23:28:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x1000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$FITHAW(r0, 0xc0045878) r2 = dup(0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)=0x16) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800c2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:35 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:35 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, [], 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="4b1370512896c54525756e816984f0d5edd9bde4d60879f1410f7108f72ee9da22c28cdec46e89c6c4d0a01f6d2acfd2863fdfbe429813f58680a664fd48a823520c8f3d87d1679803fac430103ac8e214958b9f610933b6bd36ade8e457fa786fffc879a944c353fe4e8f2d8be49d8fe1c9f22f1405610d748aa7773265d4306ba9bb7a9320ddb353a2f71ebec5137929dfa36ed8c4ef2e244caaf3b9919035d9a37d285b263d8ed3c8685f6a3e9d556a3c590757299877e569a0e79732eccf63d3871d906e3b07331153251f18f89a95204c3882ea2b491220f155dcc758fa2b566b9277bf8740dce9f7c105424d451064068ffb57ca518823ce4b7f4af56e015515aed3615dc79c87909da0c23b2754ae8f34ec893ecc9d40f1ea464fdcd146d9845fa54f930e846e7474160ba3999dd6651f28ce53e7b223c78031970f3bf5e63b0480956a9a11b28a6209eb157697c9bc555045fb8e1dddf7a09b7d6e40c2096a8204aacabaa45af94d9e914803086a69ee7b9f4793f4be648146401dc5360f434d120b67c22a4b5bdcc270b9a3bacb3ffe2ea4723c65da37ebf36b75565ab304c73826dd2d5c68716f0b16595545741285770210a3335575b9e7d562d3af5df62e404003597924f1939ae1f49215d524ac6ab615cdebbf44e95ce9569adb80bf7935cc44fe8d53dba996817202d667588b569d528ba099ea4cb5d4da62464b63a4aa977bdf52340fce2eceeac8ac0bd0cc3508e32d7fdbbd9ca6233d37c214b80d85ae55ccebd7f4f8bb12f3d4fa8ee115bab19cc6e5da9c63916d714d7042798bd137fd20461a727a604555dff90ef2126287ea5968c1537e59f5b66189081ae5eb168b21038b5e60258b535c1980ed418a7e9c0bc91563f17b876c6bc594492e5d04660c6394ddd1ab1613a30416cd86e62600ed42d0af59246a930caf4a08c7cf963d7537290b4826bb4e89ece55365d06bdc9b640a5055c7068ec8550dedbbc93b560ef1c382019d8564439da28d0b33a14e77e4209c24f96f125f3cd150b7cc4869686fe3dd02af70627f7a7eee983e24fa694b3846943b26b74ba55490b4b1932c265308f8548a5329459ea053bace420e6148f31ca6011a9d4e9b3329603a7010173ed301dcb49fbed3570f4c3bf8b0f768ecdc2cd0c0130c1f2a662158d442f179afdd9ba2a5deb282b176d274e29b8986441566f2c455b457340fbdc673c04f87e1f85ff440951c0a0f193c076e2ae22862f575a4b0015d9a369de093901e8c217a3d8a79fc1f2109412ab471fcb0eb182f2b150e69ba51088a401a4d1b50c012a0cd32b9443ae02bd56c9f590ccb245a522ecaa6c594fb1093566857109b2581f55e57eee70f099733befc695b11cf4acc5644c941ba4a9b53e1ef9f169b6478c23ffc5e95b213cc2a7bcf7e5c3f84cf43a6ced16e25c6bd327e4626be1c5257d2bca752ab947bfcbfb8d908b6c1375f7cc9c1e02aed27d9a295ce93fbd19b87863987b788f5acb323c0e09416503dfbd683bc5dc50a399953178881073caf84bbc786c2523216e38682f177f627cd91139a2a50768040f9cd151b7c0b5e7adcba53e394c0ae1e606305dbf3ce57edcf629e9505177eccdf1fc826c1b5c4f6cdff56ed30b6a4d6572817b39a442de572fb17a01be76e6c914bbab586a9f9d13233a2a57554bf9a4b177d527dd506aa28d3f44b8caefa9b6933f0518b6f97ed28e5b18fef3118f115908198f3d5ada6ef96584fd376537ace2c7cec5a6ec11d32deaa28f0df555e4fb12068d5c51789a748729821c829bec31732429f159ab4bbf94eeef48cbcaeb2a286e417929bb7b66123126e583a5dd00aad73a3430dd02823feca5e658e31c47b2fa00234494980a8225e80269a54e8847478addc80b9addeb4856ccd288ab31842afc6a602a6fabd015cc1e80a7ebc371737a20a224e219a0ceeb4a4a0c5df9a20d0e9be19bfc3cfd7fae5ae5dfcba948d651664de6e2ca2647a4aa4d65124ee6b031e72ac2ce3a92c27ae44c3c300be497087dd36a7954f96b946f99af01d081e2f9821327f1547999469cb0917ce5ad543c53d248d8b2132e88c21cb05aa826ff7c0b552bf4f1d5b5640f18eb228b27014281162ce212c20d24cf2975cbcf9e1eee90b5ada4c5ef3b991ab315ee88fcc6d8326862929747b2cdd5ba854942fb68b4f6b39f507eac3f5b48988cd42090bddf5b2b81cad15b912f97e61d1918f0717cfb412579d7e67c80c19b02a84a66acfb79d99c10cc0a581f3333a677e6454f3d5ec614ffc53ac85f49194e5bd325f696ee2f85978b76454075664073e74111fed644282caea5bec19a2cb79687469b4cbba5aa146fd578e82da5a10207a74217c66a2da45af5ec24055de6fa53b77ed0a5b2131e7aa2fef7ae05aa74a83afc166afaac8ba2f79e730c63993be33239a3af69c0e3a682b2d5418e9697ad336c9121d2bf3f02ab638000aeeaa2472a931ac84ac1fbfa60b8b0de4c7e6db3f650b5956f7d4c938cd3cb9ba5e29a877ae6797e2dc8c0eee03690e51457c7565e14a428ad0affd1dbf07dad8f61288848141fbe65862dbb87ab226cd7b9d5dc3a1feb3a259a7b306648c884df930fe0e7c618591d1453548a658a86178ffdba40e4094ce27400a7e59c64a1cf2fd7eb1a7f4086fa11d484b42a112b0404788431776fb099aafbb9bc9d3ac42b33512ebe8b463fa356aa5c9b5ba51a8d38ff598146be91504db49695bd7b51d2f439595f222fefc204fb8f935cb9069df9288e7ea3e930c021beee907f1d8855f16de61ba52cc88fdcc62c61e2e8bd08c182edf030c5954b560de116310dcb215a3fe07394c2df08b589554a501ddd65c12999075c8a359b08fc9ebceb9d0d1a8c7a425b0ede890fd8c2460f2133553aa7c31c6a64789ca62f1d3a7826d34176814d74ba9a78867175cd02f064b29a5dda195f87c41f74da5a780360fbba3b580a350ced8ca1015707ad3d4d8b07f1faab529dffc656de06c1da429013803d9c0608fa81292671bf850b485aa3622f271862d353cf65f4264a8080c40f72b9b7d825194210d29b32647c474adc3510e1445c51903b7697652d2e90c91c2d301d258366067cb0982d7109beeea4f0bef85ada7e988c70e5f4b1ca3657f295d244f9cc5e75159208b667bd2533e0f473c8c9d8af081a8b60e0bc8b7bdb237d1564af48d9793cfc7b4f5fc5d359fe6ea36c3361e7328b5b3cfcbd007f416e556bb46024d107d8024c48b983af9db489a2a78f24b54e6169d9358b8bb9d4722d96fe768b05561e13d26d99c5affd5d7861d81e2e70d14bbc4b35a088687680656175002133f2929c5a36d654e8cc21c9f6b9c5be3b6d9312107ea3ab2a010926bdd49532cd8479448496c7a0ca8921089485535c671f2551c38caf56e738d850f1805fa0bae7737dcb8a43f6182be67c4a639db45f292d4af825ad94d290136104b3e1254427b89483abc881a906539244c01aefd44a0fc9a30c2e18ff4b5346cfded045f4fdd9037b07d9468e60791da9d6cd7e0dc5e4c63bb3a21169c26ea51fb729f8972a4e5a3eb78b0916c7804dfa4e63f8ca1037ce5cc8f3f65b80d54041a7a58cb109527b1d31f83ca3dbfa64e364dcfe9384e108c26e0798241ebb3cef941575405a6b29f9a5fbb7fdaccd2f365871547b362bb35f386b8aebe0fb1899cc17fea215a42ac500bef5c2b8845ddb329e9928907cd82763236511c4592ed4733418093a3c2c21f930e9aa4b345e6155a7a1ad31fd05faa3b40228e16c727f15c2c816f187abc34949a2574bfb72aecb99bf387ef6e8482602576703d621d444a89a91ebda2ea20fc2ead25d98056ba0067f251a7e869b45860b11cc96813e4ac90560fd6081793817667392bd727dd831a399b453dd29b5885a0a8dd322c5820be6b01e987008902fe95c45f78f9654137b98c2a0e5bf5be62bd232f4c06b2fd1c9ff46d0cfebcdc2a2d5007184489c7224153d8a486fdf0c2e949661ccb9ed212b73b916f9bf2a1b3cdc05132f05b97cb47d5ad5dc0aa62177932119d293d5a14addb83296f2befe3ed4da4fae84cd3dff213d60d11772113e37311df0124b577f90f092c910d0e6d302c65e0bc663a7e9667aa40551bd74fabe1c78db4ce7e0acf7bb45cf63847963ff7669ce5a9d4443a952bdd2e173c1b228d7b16ce7aefcdda1db1b412f1e8aeb1388dddceb9a02d3f834fdeaad45bafcfbeb8455d9f0e2d3f39e5f032d62f6509442c52b1691a73014965f240e188efeaf4bf3af02dd88fc8b1d322f577dbba075f10a2d9663366b1fed699095b634f2897fb6fc33778957934157248187dd9f3225d53980760fa6040f0083dc19e6b1fe3847415318e27711fe40f54049259a8f0db40ba3875b3ef1588f52ad614b84ff3aba22e63fa203eebba5149395af483f136f142107de7b6b05769f5fe6b549cfba2a91463a59ef0883a88e131fbeb50a31a60154ef39fb0481f9552728791ae1be033dafdbd8e833d194adbb5d6562978b4bbf33ce3c6be3136ea4f7cf0f5544fa9ef39a628be6694d7d72e3a069946abd358c9f8648156e2ea332a442839caf7ca7b2501fb21c1e34512fd3ee2f55483039e5bb81928015e09449b6d1751f41f0b54440d969be31ac42226d57cad64aaabe927aac8cb17b82058a5559c512b45c22de623efdd846ea1c0ba068911750217512ac49f6ae6211d7f27a1782ff5bc8a70374498b70a3748079bbf3805a54abaac51994cc8c2b75cb7abad89320286230799daf6e1b5d99c887e2dd5aa7dae6ca408709ab3ad68f91646079b1817b33d3da33f2c1cdb24bc5625d22999a4a414e733dc85e7f2c92cc185d2f3e435b7c0e5fee861aada42b7bb88f4255451004ed08e72c90464319adaf43ecc4f883b15def94e5190a1425ba6163f60de43f949923c0c851bd13ca2e94f504eea0c588ad47d7e705d91600e7c4139b2586630d787e15f7f91886c249b2dd58d8ed71b10b86cd9c2e9a3b5bb007de20457495abbf0fd1952d0310ef8f33963f09f3bdfc17a641777a3e8c86c324a8d034d89b82290e686512f60d44d4b9516b559cf2e4775f138f2dfa3cc124f5556068273220e3cd952b89a01702a89e924af23fa6485aad92a29157996da512f876791921228fc6ecc41a7e08b73a6e4e27cfd41791e30dc800514e8c3db422ec3e18f3a7406d54404398d5dcc2cfa17c33d487c29182a19c103f706d7d881c5172b9cd510f87b1e749b51c06237e2929cad7448fda37d33899208f01f82e4134f325041bf2d57ee76350841f9ab51a48193fcdae5a25ef5e1ab76a30cc4831a4a3b9f8e26b8a023711e20a6b1f661eec8cb61744663b2859eee03cea2b6ff51032bb7068cd704f550a0801bdaa00b7d6ed759a6f249f59726d7b86409e6272e40fc374a0e388a73c998ce85d2fb977773c7ce4454334891e2a71313a6e64a89780b09dcd2cca22d0b61f33ead11adbd6ca7faa17f77534a6fed9bb4c692505e65d213cda64ead55a2f540cd99ef80a7cbd993d6543f0e205daac515814c2eac6ef3f2ff58ca49f47ceaec36064202e4a7f3d64bc5e43e1addbb43c5a6d3c8b94fc9e29336d66ac46589c6af638e842e4e4a2d22f81891551455502a5cebb60f67462b22b5a2abedce3c4071ea35c9ecaf6749047efcd0971b93112cfd4fd123cd1a38a0eecdd53a7ac89e3fd0cd4a560e2f71564e0cb688841bf8625d6d7e55131d1c61c217f1244ea25235697cab3d1e53b4f31c6ad05247e142c2", 0x1000}], 0x1, &(0x7f00000012c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, [], [@calipso={0x7, 0x30, {0x3, 0xa, 0xff, 0x0, [0x81, 0x200, 0x1f, 0x100, 0x7f]}}, @jumbo={0xc2, 0x4, 0x7fffffff}, @pad1, @ra, @calipso={0x7, 0x28, {0x3, 0x8, 0x1a, 0x400, [0x8, 0x3, 0x8, 0xfffffffffffff800]}}, @padn, @pad1, @jumbo={0xc2, 0x4, 0x80}, @jumbo={0xc2, 0x4, 0x8000}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x1d, 0x6, [], [@generic={0x5, 0x2f, "bcec6972c34618e1b094ed7a035c89b5bd0c96e0dd404bf5865e97bc36dc9d02cf988b6488a441e57e2cf2e325034c"}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffd}}, @dstopts={{0xe8, 0x29, 0x37, {0x0, 0x19, [], [@generic={0x20, 0x96, "62b818e6973d71ce751851926281ab04814fc92a2a24d5dc5a9a3fff1b0388661a043f4b7bb7579271b84d90fa706e947320735847874f223b6ec82538deda2700f54e7966ad93e5b6ba8a0e7fb31cb92e487506262704cddc25f53d069c8a407462cf60b3961441d2363692174bcf0d6ffcf1808a1c7010df49052bfd671a6ae39e52079b4455a4288fd4e70db0864f1c2c19947c5d"}, @ra={0x5, 0x2, 0x9b}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x3f, [0x0, 0x4, 0x5]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xff7d}, @ra={0x5, 0x2, 0x1000}, @generic={0x1f}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x40, 0x0, [@private0={0xfc, 0x0, [], 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0x8d, 0x0, [@private2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x2b8}, 0x240c0040) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000000c0)={0x1, {0x9, 0x7, 0xffff809c, 0x1}, {0x4, 0x3e7, 0x9825, 0x80000001}, {0x0, 0x7}}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="dff15878475000ec0d348a2f8858c565dc7d91c9a05061c81d6f4f7cf2af727957712255e66b474673077ff76f6fa409e0d8b7f08fa99edaaf011b9d9b6cd82e348d1ede2081a62fc2536e8bc84e2369210a9d46ad5c4fccb5a9210f2733f7021b32850ade58ab233d40a7fb86b4189ffd69b1efae7aa321c81cd6f13ac63fb9dda3ad3fdd1bff44230a", 0x8a}], 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x4, 0x1, 0x10001, 0x20000000, 0xdd, 0x800, 0x5, 0x7ff}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x400100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x4, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @broadcast}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0080000000010000c5684d8b0440f038e751811e17a34690b90608c220e9d2b646ecfe424da5ff5f3aa496163b757761b544e06da103ab5db009b10b4ffcfd9c056cfb804781e0053ab20659e1ab2fbdeeb54f5a77a8e2a345de8e35a7dc6c2d643ef7e046056655f431a59d1da0276c09957b38e81408e82ef9d1d796b6b373e3b4a7e69c9a126b1f0345235f7ed207b2c6c8661e1f914896c6d913006bc9e398795be100893b07d37741bd8c695e6a6ed3770462c13a9669b9a0923ead1ac18026a9d984658b6743efec923db28421a3e0cdd986138a128c4fa232ead49174ea2dda57a0e02b3695"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="a0a96874d9b22970fb8c0185bc89e5f8c9e986a263a05321c62e2ed2652f2c3272ce6c2ecb40bfc662e48c42dbd281452c980f814d40f260e400474567fd4102b6767dec85240fd563e8822d767e4e8459a9e7531c76e3fd7979b4d9bf1204bf53a3f92d0f37a64ef80550f278fdc33e07c3e8f9e020e138139116599073530b8ef60a0ac2bd105633499e2a8bcb6ae22c9e8db9fce0d52843cc1b9806f6e9f76b8b79c9e82312f2dffb5b875947d6415fa2cb5afa74aaea4b068de7dcd7f7185077c245ee3c2c87710fee37b20a61", 0xcf, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000200)={r5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r0, 0x0, 0x800000080004103) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:28:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1378.285451] binder: BINDER_SET_CONTEXT_MGR already set 23:28:35 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) fchmod(r1, 0x80) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1378.353942] binder: 28792:28803 ioctl 40046207 0 returned -16 23:28:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1378.960472] binder: BINDER_SET_CONTEXT_MGR already set [ 1378.968341] binder: 28792:28811 unknown command 32768 [ 1378.973803] binder: 28792:28803 ioctl 40046207 0 returned -16 [ 1378.979856] binder: BINDER_SET_CONTEXT_MGR already set [ 1378.987486] binder: 28792:28811 ioctl c0306201 20000200 returned -22 [ 1378.994239] binder: 28792:28828 ioctl 40046207 0 returned -16 [ 1379.002225] binder: 28792:28803 unknown command -923341064 [ 1379.011896] binder: 28792:28811 ioctl c01064bd 200001c0 returned -22 [ 1379.020159] binder: 28792:28803 ioctl c0306201 20000280 returned -22 23:28:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x8000081}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) dup(r4) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05634d04"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x2ab2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0xa) 23:28:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'nr0\x00'}}, 0x1e) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:38 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0x5, 0x3, 0xffc1, 0x3, 0xf, "a031c035303e5939"}) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1c, 0x5}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0xc) 23:28:38 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x70) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000308010300000000000000000200000214000480080006400000085b08000740000001012400048008000140000004010800024000000008080002400000000208000140000000200600024000f954d706000240000500000900010073797a310000000009000140000000d00800014000000000080002400000ffff080002400000001f08000240000000000c000480080001400000000200"/172], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x30000884) r1 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r1}, &(0x7f0000bbdffc)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1381.013800] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.024028] binder: 28851:28858 ioctl 40046207 0 returned -16 [ 1381.033847] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.045039] binder: 28851:28858 ioctl 40046207 0 returned -16 [ 1381.053866] binder: 28851:28858 unknown command 72180485 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1381.060992] binder: 28851:28858 ioctl c0306201 20000280 returned -22 [ 1381.071574] binder: 28851:28858 ioctl 40045010 20000000 returned -22 [ 1381.082341] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.088760] binder: 28851:28870 ioctl 40046207 0 returned -16 [ 1381.101025] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.107108] binder: 28851:28870 unknown command 72180485 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1381.123102] binder: 28851:28870 ioctl c0306201 20000280 returned -22 [ 1381.156941] binder: 28851:28880 ioctl 40045010 20000000 returned -22 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1381.193974] binder: 28851:28858 ioctl 40046207 0 returned -16 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000200)={0x70000000, 0x74}) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VT_RELDISP(r4, 0x5605) sendfile(r1, r0, 0x0, 0x800000080004103) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 23:28:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:39 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x4}, 0xb) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x800000}], 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) accept$alg(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:28:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xabb0d343ade613fe}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1382.099282] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.357311] binder: 28912:28931 ioctl 40046207 0 returned -16 [ 1382.823603] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.830566] binder: 28912:28931 ioctl 40046207 0 returned -16 [ 1382.836735] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.843792] binder: 28912:28950 ioctl 40046207 0 returned -16 [ 1382.875592] binder: 28912:28940 ioctl 5605 0 returned -22 23:28:42 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0x0, 0x234, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:42 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e6e790fa60fe9538ec323819331ba558904fbfddc63bb4e105f339123bbf3104630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x2d, 0x18, 0x40}}}, @decrefs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$PPPIOCDISCONN(r4, 0x7439) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_bp={0x0, 0xb}, 0x8a, 0x0, 0x0, 0x0, 0x0, 0xcd58, 0xfffa}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000000c0)=0x2051022) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) 23:28:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:42 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x60d5) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:42 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:42 executing program 0: socket$inet6(0xa, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:45 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x4000000000000a2, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000380)="cd5a197bf89c207bbd3f5772e13a498dd775f7dc98fe98f1f58ef85340f42594d497347f2f9acb198f8135b11bd0ef2d8d4a17ff10a826fe94d17aaff097e4e6ebec2ebc9ddeed5d668a986f90360720643f33e2dadf170407350fb346615553dd278bf00567680c7214fe89b4b5c692dde04f2e60bdd5fb7ed18012f45ec1509cd68dd9a2f14dd470076245c6", 0x8d) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x5) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x20000000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x7, 0x24, 0x8000, 0x5, 0x6, 0x7, 0xff, 0xfffffff9, 0x2}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0xa30000, 0x5ddd, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a2f, 0x1f}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000447) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket(0x40000000002, 0x3, 0x2) vmsplice(r3, &(0x7f0000000000), 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x4b, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}}, 0x4008840) 23:28:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup3(r2, r3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40054}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1}) sendfile(r1, r0, 0x0, 0x800000080004103) 23:28:45 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) accept4$packet(r3, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001800)=0x14, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@getqdisc={0x3c, 0x26, 0x1, 0xfffffff7, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x6}, {0xb, 0x5}, {0xe, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:45 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x100, 0x4) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0xda, 0x0, 0x0, 0x4]}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x0, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180), 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "eaf690dd6c2354de", "2e4072bdd9077ad1271e5f59168386f034e6caf1659f2c6f3459019acaac0c94", "5070aa54", "4fe83925d7dd40a3"}, 0x38) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa813f05c2eb7be59f95585b83f3000000a6271a5d4aabef388acf519359dd0000072c00fe0000000048000345ba828786d1ec9ad4fb87d70e22dd1621488a15738cdca04e103b3aa5f60de7bc535e92d4128b000000fe0000000000004f88c88f7f9faeeadf59e5e4a3e4fa27dead6e045ce0e526865ee3832fa1026f4165eecd7fec4010"], 0x0) 23:28:47 executing program 1: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:47 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:47 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x48}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="d4d86c1db2aeb49b19024329ca010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x4, &(0x7f0000000440)=""/142, 0x8e}, 0x3fffc0}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000600)=""/194, 0xc2}], 0x2, &(0x7f0000000540)=""/25, 0x19}, 0x3ff}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000000700)=""/57, 0x39}], 0x2, &(0x7f0000001d80)=""/121, 0x79}, 0x800}], 0x4, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000000007000080400000000101000007000000090000000000000001000066fd65edcf10906474aea1959042400800000000040000040000000600000000000000010000c0b84100000010000009000000fffe00321733dd3c60716ce8af7b2cadf9e7491e7dde8feec32d19b5634e8fc43c589c7c6f34670f410ef6195738f78fdbe22a1bf1ffb2a6dc00000000000002d3ffc8edfbb64256e2b295f44e6df8d3f0918f"]) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630441"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000001780)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r7, r6, 0x0, 0x800000080004103) 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1390.263833] binder: BINDER_SET_CONTEXT_MGR already set 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:47 executing program 5: rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffffffb]}, 0x0, 0x8) r0 = gettid() r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000dd}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x2, 0x5, 0x1, 0x7ff, r2}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r4 = socket(0x40000000002, 0xa, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x501001, 0x0) write$P9_ROPEN(r5, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x8, 0x4, 0x6}}}, 0x18) timer_settime(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x1}, {0x0, 0x3938700}}, 0x0) 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1390.379305] binder: 29124:29125 ioctl 40046207 0 returned -16 [ 1390.385736] binder: BINDER_SET_CONTEXT_MGR already set 23:28:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1390.514148] binder: 29124:29133 ioctl 40046207 0 returned -16 [ 1390.575581] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.581766] binder: 29124:29133 unknown command 1090806532 [ 1390.589764] binder: 29124:29125 ioctl 40046207 0 returned -16 [ 1390.595747] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.602094] binder: 29124:29155 ioctl 40046207 0 returned -16 [ 1390.605394] binder: 29124:29133 ioctl c0306201 20000200 returned -22 [ 1390.616134] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.623287] binder: 29124:29145 ioctl 40046207 0 returned -16 [ 1390.630155] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.635499] binder: 29124:29125 ioctl 40046207 0 returned -16 [ 1390.640548] binder: 29124:29133 ioctl 9000aea4 20001780 returned -22 23:28:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x800}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setuid(0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x200000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0xd2e}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0xb1dc}}, {@mode={'mode', 0x3d, 0x22bd}}, {@mode={'mode', 0x3d, 0x9}}], [{@obj_user={'obj_user'}}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, 'skcipher\x00'}}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x20, 0x4, 0x2}}, 0x14) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:48 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffff81}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a23e7aac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00", 0x1000}}, 0x1006) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4202, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) 23:28:48 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5fdd}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004040}, 0x10001) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffe5e, @loopback}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:48 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000004d00)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, &(0x7f0000000300)=""/131, 0x83}, 0x8}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/217, 0xd9}], 0x5, &(0x7f0000000940)=""/111, 0x6f}, 0x40}, {{&(0x7f00000009c0)=@tipc=@id, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000a40)=""/72, 0x48}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f0000000b40)=""/170, 0xaa}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f0000001d80)=""/102, 0x66}], 0x5, &(0x7f0000001e80)=""/115, 0x73}, 0x1}, {{&(0x7f0000001f00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000700)=""/50, 0x32}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000001f80)=""/158, 0x9e}, {&(0x7f0000002040)=""/158, 0x9e}, {&(0x7f0000002100)=""/131, 0x83}, {&(0x7f0000000cc0)=""/56, 0x38}, {&(0x7f00000021c0)=""/209, 0xd1}], 0x7, &(0x7f0000002340)=""/127, 0x7f}, 0x5}, {{&(0x7f00000023c0)=@nl=@unspec, 0x80, &(0x7f0000003640)=[{&(0x7f0000002440)=""/208, 0xd0}, {&(0x7f0000002540)=""/217, 0xd9}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=""/115, 0x73}, 0x5}, {{&(0x7f0000003700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003780)=""/22, 0x16}, {&(0x7f00000037c0)=""/48, 0x30}, {&(0x7f0000003800)=""/106, 0x6a}, {&(0x7f0000003880)=""/2, 0x2}, {&(0x7f00000038c0)=""/143, 0x8f}, {&(0x7f0000003980)=""/234, 0xea}, {&(0x7f0000003a80)=""/119, 0x77}, {&(0x7f0000003b00)=""/212, 0xd4}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/21, 0x15}], 0xa}, 0x9}], 0x6, 0x100, &(0x7f0000004e80)) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f0200000d000000000001000000000000000b00f0000013001462726f2071694dde52c4fb98e2c18b"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) 23:28:49 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x3, '\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:49 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000040)={0x1, 0x2}) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) 23:28:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:49 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='coredump_filter\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x800000080004103) 23:28:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="3fecfec0c02c2b691699d6a1c6306fd106167a80fd58fdadeda915ec", 0x1c, r2}, 0x68) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x6, 0x10000009, 0xfffffffc, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:52 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x200) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05670440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) sendmsg$netlink(r1, &(0x7f0000000700)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000280)={0x134, 0x34, 0x400, 0x70bd26, 0x25dfdbfc, "", [@typed={0x4, 0x49}, @generic="e336a1670b92ad30826e0a0de43500d1bb817570ea3feb6f506e8aab018ea190b04fbc74c7b219e4ab5842dfa794af22c204de7c2726d848426bbd7a504128b32dd3d332dad56c5ce5431d84bbca7bbb4527b597a1d7b53326d5d4c2639f435074f3d3d7ddb65dcde829d962dddb80d5cff41e59a7b52d7204317e045651286b7638a61c83c8554f36fb0b41fb8453f687786d5fc4e1cb061fc454bfe6fe33348e154a86e2ac77149117f5ea57e42ef8a0e5b927156444c0b5f40474cf8909dabb1d920ba716e32d6158cc488f517eb5b4c49462137ab3", @generic="78d26af904ded7e4a8c39ce968ddd8269b921750b4425fb2f1eede723c3d258d6f4da7559883fbf23b6ec23a84d26fd010aaf8248b83c3", @typed={0x4, 0x8f}, @generic="c2191e3890d8a16ead667f56aeb7"]}, 0x134}, {&(0x7f00000003c0)={0x1d8, 0x28, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1b6, 0x3a, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @pid}, @generic="ccb64e49c4b669f55cfb58704d5f791187b1ee2e92b1c89037b6df177e3cbe8f134f093a740f52b925c2a956e0ef2c3a7fa990a346c7d14f9f5827bfdf2d503b84a2978c8b2ec547fccba141b8b54d7950deda30cd9618e1b2788a04141f7dbb419850b97db413c78f48d285cd80a9f6db4f4c16487dbdb319059b656700ed1c5eb3278d2135c6d9e1e0ad951b02e99e8057f69c5306bd05947442b690fb842c46366041697225788d3f8527784261566f7b", @generic="93636dcbc039d1753078730a4a65abd272098077431d447ccf0da89ae180247cdb11ab02896e5c69085bf4b17eca5650e828504e09a48ab8786068158e5955332d3a0aa04a399d1c998beebb9c7541569b38e20784f829aedb32625893810494aab812b1b66760a25fd439b2d0647fdeae59980d69245a401a143e779a4450f259c9c1efbdea50131187047ed1a13fa5900bd48cdc227b669bdca78bb3c810e80d7b3b18a6c0b71379e77d537ca0cfd1354ebd9eb3122bff328c5ce775a92b1a280515c71a3acf731314263f58312973e2b0ac203d0d79c3ecf852a72e7cf3320e40a8a8fa150c7921e0cd7dbdc0f793", @typed={0x8, 0x77, 0x0, 0x0, @u32=0x8000}]}, @typed={0x4, 0x92}, @nested={0x4, 0xa}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@empty}]}, 0x1d8}], 0x2, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x48080}, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r3 = socket(0x23, 0x8080f, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1}) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) timer_settime(r5, 0x3, &(0x7f000004a000)={{}, {0x7, 0xe4c}}, 0x0) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='@}\x00') setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x49e, 0x6b, 0x7, 0xc800000000000000, 0x1000, 0x8}) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000002) 23:28:53 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0xf, 0x1}, 0x2, 0x0, &(0x7f0000000380)="c4bf130d2d439cf595bcd964752524eb66b23b6e1fb43e737c53b3a686ee67d5043e38ee44d28ea018dd54fc33cda58bfbdea5715945e5706d0f0d2f6aca1e85e3ed3ecf034a41c04ac6bd377d444da7ba7da650dfee3a587153b0449fcfdc7933e40e5b00499022b269cf5a99dc6da96961aeac1c14d615f3bc27a0abae41e092dd9380772a61a6d3c0787d9feeb1f634c6be473098fa4beeea8de258ead5", 0x9f, 0x3ff, 0x1ff, 0x57, 0x68ea150, 0x80000000, &(0x7f0000000440)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2000000001) socket(0x40000000002, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="b218d5883195e60d4bbf3006764593f73b0815a3c12e04d3dbcb79f8c15a", 0x1e) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:53 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0x4, 0x47, &(0x7f0000000000)=""/71}, {0xf000, 0xb2, &(0x7f00000002c0)=""/178}, {0x2, 0xf4, &(0x7f0000000380)=""/244}, {0x1000, 0x88, &(0x7f0000000480)=""/136}]}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1395.851585] binder: BINDER_SET_CONTEXT_MGR already set 23:28:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1396.286869] binder: 29338:29342 ioctl 40046207 0 returned -16 23:28:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) 23:28:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)) [ 1396.504905] binder: BINDER_SET_CONTEXT_MGR already set [ 1396.636164] binder: 29338:29342 ioctl 40046207 0 returned -16 23:28:56 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000140)={'ip6erspan0\x00', @ifru_settings={0xbad, 0xfffffffc, @fr_pvc_info=&(0x7f0000000100)={0xff, 'veth0_to_team\x00'}}}}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x4b2, 0x2) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x84, &(0x7f0000000440)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0xffffffff, @mcast2, 0x42}, @in6={0xa, 0x4e23, 0x6, @remote, 0x7607}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r4, 0x5, 0x800}, &(0x7f0000000080)=0xc) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, 0xffffffffffffffff, 0x0, 0x41f) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) 23:28:56 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(0xffffffffffffffff) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x9}]) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000000c0)) sendfile(r1, r0, 0x0, 0x800000080004103) 23:28:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380)="7d3084fbb1837b197ab24581691355d613c4fd6e589b86e6cbc2de8a035e5cc97d98e7f8eb33ddefef84b326adc7661c6e7be93916f46da789c2d0e355dc924a304302958e0a2bc659f67a2964067e19cca2f96ba08a2feae359efece2655f2d3b7776bc5a9dd1dfb67325c50c82b1c6ca4d3d2f98c6cfa56e931b5eaa093df07b97cf31ef894f27e23081270c79952d73d220eb4e9c5e352ad55e913afcc0d44206", 0xa2}, 0x68) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:56 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4012}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:56 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:56 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)) 23:28:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, 0x0) 23:28:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, 0x0) 23:28:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, 0x0) 23:28:58 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x40000000002, 0x5489578cfc1f524c, 0x5) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x6, 0x0, 0xe0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:58 executing program 2: 23:28:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08000100000000000000fad350486405e027eaaadf3fc85db59c847b3bfad710d6c0d456e2c7d4db44a9", @ANYRES32=r2, @ANYBLOB="0900028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000fafe040000000000"], 0x58}}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x4) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x18430, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) 23:28:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') getpgid(r0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:58 executing program 3: 23:28:59 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r4, 0x3a, "342b105e4aa6ef7ba648eeaf0a86f177e3d46605229f73b87692fd855159c2d9f120a60290807ae9eac6a303389b768002cbc15052db1c55ffba"}, &(0x7f00000000c0)=0x42) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x7, 0x0, 0x9, 0xffff, 0x9, r5}, &(0x7f0000000140)=0x20) r6 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:28:59 executing program 2: 23:28:59 executing program 2: 23:28:59 executing program 3: 23:28:59 executing program 3: 23:28:59 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x88, &(0x7f0000000080)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x200000a5}]) 23:28:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4008104) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) socket(0x0, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="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", 0xfc}, {0x0}], 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800da89e395af75db1243c6af02540ce6bb4b32301b94e6b6c02ac364309b4c25eded9e78b0810de19914a71d4e821d44ad23152a7e42f4e91d1451e865e574093661b3dc31924dc2168b74ac0e44b1602318c93581d5c74d5779e75e9153eeaca6672e685fd349a65f142b9201b23444d5086d05d456fa8714c5501feec8d719e919b2abb14d34fec1c28b09ded2ec623facc271f5b76d34d9de770dd96fbd9aff193e234acab270b200fbbcc755715afd6af1ffd0293d486431288db8", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x68}, {0x0, 0x0, &(0x7f0000004140), 0x0, 0x0, 0x0, 0x8080}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) [ 1402.190349] md: invalid raid superblock magic on ram96 [ 1402.206575] md: ram96 does not have a valid v0.0 superblock, not importing! [ 1402.234442] md: md_import_device returned -22 [ 1402.265742] md: invalid raid superblock magic on ram96 [ 1402.292717] md: ram96 does not have a valid v0.0 superblock, not importing! [ 1402.325041] md: md_import_device returned -22 23:28:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xfffffffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1f}, 0x1c, &(0x7f0000001840)=[{&(0x7f00000002c0)="456d7a0a8253186576ee8095d3f97cb29ff3e35a1c05f9d92580570984c2c764d29e02eae88df4e1ea34c4943b8d72ed02a68a21e69c9dee3c0d43f90e6314b695a7fd2acf83f13b39e9307354dc73e92b5ba4c2a66c26d07baa804315f6502f66237d7b65143f5fa6cf5df471593d5334d11b348aa43aba92c39bfd29f0495c8e9d5f814ac88ea42b7c38a0ffe062eabf467f54a1a8022a2e4aede4652cd35261eee234c8193b400ba321b25ade195bcecac83d7bc9024235e3273f7c90579c96dc563a590b7e4033f764d07920ad819d17683f7a3efc", 0xd7}, {&(0x7f00000003c0)="cd4ba8ecf6d4df5cc6b098f7166ffab013ffd8379761f58f90bb5507f6590cf65a707c58346091ec7da5ffbb61f25f585d02d181860e92d5a9ef8c5e7960fff64da7a928ba2299acbe5771431ffb2ef109dca0e736a246cc3bfc23b37bf91f29ce35edc27ee85b51fb7c50097786bd37bd0d65015bc897f3afb8ef1686f3ac3cf14180ff101a930027eaffbc1b52c903315479b14d9f6057b898db9be5e323d7a561469333c6de5b7684de11e8ad2d1037f9dcbb7e8fa3375155f3e53e2fd8c391", 0xc1}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="daac61bb9f5d255363baf0129fe3ce6027b9ceb257d031cdc65b68e62bcfd9c8d0e0855c82b8dc8c9aaf1bd041282180cd940ed405b56524cfe4290f751fbb5561840d3e6feee595ad13b0cdf756a7f474c62cb2c7b19b4f34e3bd69198c17dead00b708f9758f4d2621da532f18f4f6a17dbfdd499d320c5942b3491cd2b18009dc4c", 0x83}, {&(0x7f0000001580)="a41f83b7b71fa759a644494e503123a687ab03a69bd0bc09b0fd0cffbfcf9a5b0bcfb8e96c1c836ae0742b2fcd3c84a7a7687269d966630a36d2f2249b2d2c1b197cffc8bd51d066d4de1f744d0a989c01fdcf51fd7d91a9e1e562508ca361e2e78cb029f6c5fa4118ebdc21946550ce800cbb7a1d9d994c2580719e36dcab93da2386b0ba09834ff5108ab6713ad98bc30e9b1b35bccce23486608f904561bbf2bffc687c3592bb63b9669a1e3ed61a1d33aadd8cda16a9e83de9fa44a098190d5c42c9a62dd24885cdfaebe1e0d52342cd580456e4816a21cf1a886930b58b6065577b4e91596d9f1d3a", 0xeb}, {&(0x7f0000000080)}, {&(0x7f0000001680)="f660524bff175785cd20fc2e878cd91d467fef481d300f4ca46a9d19db58ae481377c13ad57bdefd8fef12af3ab3d2a110792b5a054597c569886a006923973273ed11fb9fac35288f9f5104c80d95f920f393a6b706223f46c8df72d68e36d97e2bffac1253368e94da2d75ad64fcd493d105e796dd8c383622a16a67c37213ee32539fc025c12a9b849318e0f6a934057eeaff05e32779523622d0a89cc29b43d593dd144b81f5b6a3d2d2deb53ab86327926a712e92d3076dbd031c7e5e6e11865f6955c9", 0xc6}, {&(0x7f0000001780)="c77e17b767c0623641a86f0e01de645b5babd15f3eecb10f015c94e9c851cb5f7a5ca7803efb76a6884916f5c74fcb4889e93ac100e65927c1bf617a6132366ffdbf4d97759c3661a67c228c2838d853622fd1333cf1feed2aa9ffbd3cec65ae2877db88ca3d43f527288e312c22d372561cc577ec4e21d6f4379574915d76736a4072f9dfb3e45894c7652ab8a12bca0c5e2f4e663fa25263a6dcc289b8", 0x9e}], 0x8, &(0x7f00000018c0)=[@tclass={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit={{0x14}}], 0x70}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x200, @ipv4={[], [], @loopback}, 0x6}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000180)="1c", 0x1}, {&(0x7f0000000200)="9f918bf40e8410638e423d1823026464e24d119c3ca3cc7ab4a1f2628f053a5f7fd25b379db8e7a2", 0x28}], 0x3}}, {{&(0x7f0000002980)={0xa, 0x4e23, 0x9473, @dev={0xfe, 0x80, [], 0x2f}, 0x8001}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f00000029c0)="338e39177e8812bf9e2205c5b8bde8caed59289f222bd04b1ba3d726b36eddccbbcc9e075439dcd5d32ffacbd37a5bd2ec86d98df2b80975e36e48587563d01f5019612461d47dec91361af8ca3f3e0b8054a316f7d1757b64eb06229155e458bcbb5e151e75f8b1a2b4151f4d7ee09641ac5e0d37a11dd956fb5ef66efda69bfb357bbd60c785d2f3df9448153d21f93780929f1b6edffa2eba06dba6ce08a73d646e58336f0aad82794fe027c6328b467009c50ec8437483e0367f78c3e09e768229c38dd65ca798c59b8a509d4fdfe70e42", 0xd3}], 0x1, &(0x7f0000002b00)=[@rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x7f, 0x0, [@remote, @ipv4={[], [], @multicast2}, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0x8, 0x0, [@empty, @mcast1]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, [], [@pad1, @hao={0xc9, 0x10, @local}]}}}], 0xd8}}, {{&(0x7f0000002c00)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="f7632622cc64bd20c479b5f4e3c5b418f7b5749271a58f2c357c4bf888655cf8e3effed9adb16690b1499510e8871347ceeaba1b7ff1a8d9ffe0ab7c1402a07fc034f7d9c4e84cfef8d4cfdde6b1dbc2fc25d98cb0bf3a241734cd7dc3121d142e4c0be9bdff771f6a3ac8a9f5284dab3932", 0x72}, {&(0x7f0000002cc0)="965d9ed9757a1ce9bdbded7cd9bcd049ce7adf2b640b23a3b425f58a2bd0481a242296284bc533864e12ce4f0a651d3bb02c057b8e8f28da04b81a9ae055e3cb731a8a28ae149456e3b40e0e7e71360ac09ec8a97ed885666e6a0a21b2c36fce079d9fd11335c09aac6c0a9b124a50c569b8b7b4bc29b07f7c3efc1cb3a920fb5672c102b8f280bf", 0x88}, {&(0x7f0000002d80)="408b300a6f4fab5875e05f46e1beeea72e839235ee3e49615c8bb31a9dc5b93603e01f1f65a434c944b305", 0x2b}], 0x3, &(0x7f0000002e00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @hopopts={{0x40, 0x29, 0x36, {0x16, 0x4, [], [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x33, 0x4, [], [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7f, 0x8, "4a6a5549380df88c"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x87, 0xa, [], [@calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0xbc67, [0x0, 0x5, 0x8f0, 0x100000001, 0x800]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x5e}, @enc_lim]}}}], 0x138}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f40)="5b1e1f41d95d03ef3645a4c15031a88db8461cf9ea4ea0899976a40d4489c6625ee9926833710894ebaf992fad77fbd62cf91b797d79a351a2acffbf481681cd6ea57c0599a2c21d7f45a3ec843cc44e5b40b9c0dfe3c0b714507e9642e7bd059131510297fd3d3d168d66d4b8f40ea5e49745f8e8c8866aec3573542b3d43af555bd9c19fa11072aacf99d109330ce828917aab135a29fe71b67bb769d1339f41df709e07e217d98f04fa503b2e0d19957291afc64d2c280cd239fb5ccd0464cb72f4c539a1e33d87e6072b201e529c5e74ff766e0b310704a31c85b38872adbc40", 0xe2}], 0x1, &(0x7f0000003080)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @pad1, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x80000001}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x28e}, @enc_lim={0x4, 0x1, 0x61}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xc, 0x6, 0x0, 0x2, 0x0, [@empty, @remote, @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}, @rthdrdstopts={{0x1020, 0x29, 0x37, {0xff, 0x200, [], [@generic={0x1, 0x1000, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0xff, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty]}}}, @hopopts={{0x48, 0x29, 0x36, {0x0, 0x5, [], [@pad1, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xb201}, @jumbo={0xc2, 0x4, 0xc8a}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xffffffff}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x84, 0x0, [], [@pad1, @pad1]}}}], 0x11d0}}, {{&(0x7f0000004280)={0xa, 0x4e23, 0x5, @mcast1}, 0x1c, &(0x7f00000043c0)=[{&(0x7f00000042c0)="65c75a78c82d46ab6672d7e8ebb0e4b03529839d89a474ce425e4da2a8cf839bfd2e1a886510a9a04f78458095a82e77ea142757ba966b1a9a20698b986c08dae577197a39c5959f4f627e57c7bcd271d9741e8dca1220e6afa1225d4edf174719c012115645be632c32e1bfcbe50fe374299133b6a8f4650a8ae680b5669fa8c28492d0ba77a113a5d6a53ac12e544c6be741600180fca2a95420236aa220414ca2abd4390b88d8e3e8d7c16f0988edffcb740112a9702a701d427c23af3a39edd23e6180e63848ff0164bc10ebe56318f6d8f2b6128f71f012d17da9fabbf7aed3e768cf2aa8662a81", 0xea}], 0x1, &(0x7f0000004400)=[@rthdr={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x0, 0x10, 0x0, [@dev={0xfe, 0x80, [], 0x3c}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @private2, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0xb0}}, {{&(0x7f00000044c0)={0xa, 0x4e24, 0x7, @mcast2, 0x8001}, 0x1c, &(0x7f0000004700)=[{&(0x7f0000004500)="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", 0xfe}, {&(0x7f0000004600)="90130382ffea74dbdc4bae7fa53e9470b7ba1a8badadd9bb7498fd8495c99faf822f5bae7267383ea643bf488774adc88e0e98171f74921b6ca179d4ed9c72c552cbaff74e7376ff633dcb95606206cf1925090b2297bf982636be6e91509bd4a9426c5972d0923bd27a080dc4ae9c7609cabe8fc19487ef12f5edde3e1a1b59a97a8efef2103c0b2befdb17769cbc103b02958103c5d251d7a5b2b8d161e2636976b87f2bb3601f6d4e43b40699913790209bb868b4f342e55dab325c4525f8aba5c0c68d2088317323da1804407c316e5709521c26747a21b8eb3e4550617f16a5e9448b4bc817451803dc1c03bb9b", 0xf0}], 0x2, &(0x7f0000004740)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x88, 0x8, 0x2, 0x4, 0x0, [@remote, @remote, @local, @local]}}}, @rthdr={{0x68, 0x29, 0x39, {0x87, 0xa, 0x0, 0x6, 0x0, [@mcast1, @private0={0xfc, 0x0, [], 0x1}, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x2, 0x7, 0x0, [@mcast1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x110, 0x29, 0x37, {0x0, 0x1e, [], [@generic={0x8a, 0xe5, "b59c5ec45e42d8fef4ee06b0b488ba0c0657b9cae286298788313794825d4d950a58dc6b14f62a7877bbbb38c8d9d1ad51776fb7e4025b7034c0278f7a59ff9dfcba9ecee2378a538a52bb6627cd7b4532161ca303e8c781e4d142f8a673c9d135538e2449c19d2b3bd24ccb2e36b5791ba660432a091fd143f8283f14b9a75213f7632f3fd64405c10682b986bcb92b588ca977559ab4cdf4af5c58080d4221ee96c48b6bbc1ac707f868526fb7de5995c122967fe45f871e6f23758d920aad3da9f491a567f6f7ae0560794a65c001fd02ef25915661bf8421de8f803876cfb3a75c8e65"}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xb1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x258}}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f00000049c0)="70c01776ce38e15cb3053f9a7a3ed1949435429c59cefa92187f9cb38970fc53098bed836a920958e236a39fccc004915552df5119dc8439118fda30cae445722725650c", 0x44}, {&(0x7f0000004a40)="26202b0e9b0679bd3c69921a01d4b250af5c96745225bff3b103a1a76c3ed79109ed3e43128ae14543d943183cc1c0ca67e9ca93e0521e49aa66f9e57a5f84b2996042eb387c20e4972e2a6d00eb5012469b420947", 0x55}, {&(0x7f0000004ac0)="5fdd105d0b5ab8042a8574db0fb8287a9065a39c5d1ca24d3a62c0611d46b19c3b05c81d68bc77900447e4fd43fdbf052d8755ad350dd6d64d00012186edc48678ec3c484086106d06a8c8ac2a57987e8fd28fc45f4a01b3c268776f5fd7d45713caec2a5a7de97d8671432f8ee3956b8640843574d2cc7faffad0cc5c9546101ea5485954d6d8084c1c8dbb777a25712f1206", 0x93}, {&(0x7f0000004b80)="805b505a8dc3f652f2e2f39bc499cbedef6e5aacc82bd593e8e133e3c0c8ad5d7359d866d03071904f5e72d9c8567843acb1459e634629dae0ccfa09bd6b8af3675e193b25d2c570d8764f9bb6af2c32ec384222", 0x54}, {&(0x7f0000004c00)="b924cc9a22d6b1c97dbbf5e65988d265927bbee051ccf9503775a39c9956a83014061dc675f9b461f3223ae9fcc86d818282f9b0e4f3c8e61ebacd880dae8b9054fb2ab7e2650c4871db49d4fd6f2412fda5111925eb84ed0c52dc97", 0x5c}, {&(0x7f0000004c80)="a842a7efde0596b49ddb3bdd61b60421b5379aba6c25961a301c64c8bbbad1c9df16b62dedd4ed82a93fdc709bf594b8bd20ed42a92f3415dadcc8c32eb45a4916c156480e21946eeaaa37988c6dfb1c3baff1f424d76e953d79fe4772c772e2d7418fb5ed78790b99415724d65bdd636d353d2d52f3fb3797e63ed00cdea66aaaaf61e4f3a71b64af463d3ec9c43a16cf99d734d585f641d61cfcc0414fdfc49e867469cca17b08c809b7264ad1fcd6cd41ff96f3c088e2db73", 0xba}], 0x6}}, {{&(0x7f0000004dc0)={0xa, 0x4e22, 0x20, @loopback, 0x6}, 0x1c, &(0x7f0000004ec0)=[{&(0x7f0000004e00)="671d66f338842c28273fdbf862c8c5d3f3fc2f8aa6e921b753a18edeae9da691b1", 0x21}, {&(0x7f0000004e40)="cc2475a916e9a8a032e13c3f4493eb703e1e9977da5cca4680d507cdef63a10e56df6663d69114daddb22a1f10c2f437d26a9f2b7c1cef1090b3f233b6f1563f20d0e1b880f3d8b67c261bcafedd6a23b1b316c430d5e037da47ce344a69d5f4fa183e41551a2574d32d80c7", 0x6c}], 0x2}}], 0x9, 0x4000000) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) 23:28:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 23:28:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0x3ff, 0xad7d, 0x8, 0x2528}, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:28:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4008104) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) socket(0x0, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="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", 0xfc}, {0x0}], 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800da89e395af75db1243c6af02540ce6bb4b32301b94e6b6c02ac364309b4c25eded9e78b0810de19914a71d4e821d44ad23152a7e42f4e91d1451e865e574093661b3dc31924dc2168b74ac0e44b1602318c93581d5c74d5779e75e9153eeaca6672e685fd349a65f142b9201b23444d5086d05d456fa8714c5501feec8d719e919b2abb14d34fec1c28b09ded2ec623facc271f5b76d34d9de770dd96fbd9aff193e234acab270b200fbbcc755715afd6af1ffd0293d486431288db8", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x68}, {0x0, 0x0, &(0x7f0000004140), 0x0, 0x0, 0x0, 0x8080}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) [ 1402.563756] md: invalid raid superblock magic on ram96 [ 1402.597853] md: ram96 does not have a valid v0.0 superblock, not importing! [ 1402.650244] md: md_import_device returned -22 23:29:02 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, 0x0, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={'sha3-256\x00'}}) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, 0x0, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1, 0x7, 0x3, "159d39a39b55f8af7bd248db4fcd79404b8729ee56ef618486b8117fe3abb2ed", 0x4745504d}) sendfile(r4, r5, 0x0, 0x50000000000443) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0), 0x10, 0x80000) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4008104) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) socket(0x0, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="6961f9cefad3d3663d525a1434a4499c0ffd493e508b885e378d7cd9b97741b2faebd21c20673eaa74d784fcef2d6d02830d769328e02e3cb579d6f6d9641453f2ed8d01993c0d43c43acc17cefb0cdc2115ac739b65d32f8504563147e25f58faad26bcd02088ad6a1b280052f0dadfeb5c69d8a5d9b96dce714d3171485b3070ae025abb529df1944194a7900449ee78eb8f38264e11148a683a367a4939e059f80ab9a00a727b34b3c28599f3499645a12bfa256cce4487c5a0dfe869f264b8fb77acd6f8f74cd9c655da807f40f6d8d94a1aebf045123b22d9ef60a612361aeec85978c68042b9bc8978d12bea650cd2ff48280f2de038f2a84c", 0xfc}, {0x0}], 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800da89e395af75db1243c6af02540ce6bb4b32301b94e6b6c02ac364309b4c25eded9e78b0810de19914a71d4e821d44ad23152a7e42f4e91d1451e865e574093661b3dc31924dc2168b74ac0e44b1602318c93581d5c74d5779e75e9153eeaca6672e685fd349a65f142b9201b23444d5086d05d456fa8714c5501feec8d719e919b2abb14d34fec1c28b09ded2ec623facc271f5b76d34d9de770dd96fbd9aff193e234acab270b200fbbcc755715afd6af1ffd0293d486431288db8", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x68}, {0x0, 0x0, &(0x7f0000004140), 0x0, 0x0, 0x0, 0x8080}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 23:29:02 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 23:29:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:02 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r5, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000100)=0x8) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1405.171211] md: invalid raid superblock magic on ram96 [ 1405.183246] md: ram96 does not have a valid v0.0 superblock, not importing! [ 1405.191403] md: md_import_device returned -22 23:29:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0}) 23:29:03 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) setuid(0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x3ff, 0x5, &(0x7f0000000680)=[{&(0x7f00000002c0)="d22ba8d1aac63fa17c47916f466af6d808586dfd1f4ff370e933c6f002a7b306e3c7bc9c248c40f31ca20a76f9a68b6e199d25c34115ce0672bc3f13371d06fe81ea88096701ed0485bf13870b28e27ffb3818d3ac5ddd20862c8e0c9fb3ce59e72ca52a6aa525c6d681e802872f468bc21259388ad83a5ea355aebdbb578777479ace3104d6a229583674fe17be3d384256e15e72998d26fea42720cd1a1b677d33c2b6c9d2085c1f3a19ac7905666bdcc879a1fc5d3866e37c8eda8a7fa1c9ba9851c7c425809e81cd7322702104ca38a4366fb3a01067d2d2971773686d5673", 0xe1, 0x3f}, {&(0x7f00000003c0)="6bd8adf1fe3234cddcad5efae5994de9491a0f1225df2ae82f973db4f057df868abd949a7d24f8c92f2ee67d8707d395361272a71458a91821302f4b9c2017485235abff84cd0f7924abe9192fdda1a2b1162eb91e596bed3db5fae258a09e2fde89d4222861ec4b3b7290b1cf21bf6212d1220fa85cd33cccb069dce34a3320b7c0ef8cf5b8e13f617e6204104ec732614e5e1d7dc3dd7999cf29d4be3361c7ea47aeac5725018e7c9e01e4e51cbe68ec8943", 0xb3, 0x1}, {&(0x7f0000000480)="8069fae1a9c7d38a332eed0b56099fc1d9138bef700291f74df0a9e5c456aac9e3bcffbcbe11c6823323563a009c4792e9f0859edb45b6103575dc9d88e309ed5201037ae218b8d9fdbdebf5750e56c5e6768bfdc368d6bcec866582ea0218766d15938abd49aca27ffa61042630b2f28a3133e40d", 0x75, 0x80}, {&(0x7f0000000500)="f515489bc8f102bb13f5f43a19b5f546d92b83a35f437849d24769f2ebd2cfeaf105abd6bc63181447c36ae06ea33cb4f5cb0d0e45447b09f144457c04fb8d951ce538cf534c6851d2593b19e8b0b54039ecff5d4ccd7efa10ba67a293d9809edc860aa2f72cf1d1a85bf4e98b9760023cdae5f8da31efa0da", 0x79, 0x7f3ff9eb}, {&(0x7f0000000580)="e86adcd2eff7b1250923a2bceb95d25d89810d37d3733d0187d538fc340967ffd9627158051926937c6bf71d8f35a11d1aa3126ccf82d9ba9a9ed4cfce4b688c1addd45043cdcf72ad1ff36a417c86e028011e093885f31825692838c41f98efd3aa37dc154fc252f1414b64a314d4a57b76074c23362120c31b9c77f777170acfb5b2816817d6a892ec3e73e8a8b659029ac39ad2875e62908d153e8d393cf55858f6e4227f3867241f9fac984fff906f0a4d612f57d58fbf988c6c4c3380fd6624ca05c786dec2a0fcc4bcc30362c0d727e29f644500507191c8d77069389b7d6315d02fbcbaec6fa252a44ac59f", 0xef, 0x80}], 0x280000, &(0x7f0000000700)={[{@utf8='utf8'}, {@cruft='cruft'}, {@nojoliet='nojoliet'}, {@nojoliet='nojoliet'}, {@map_off='map=off'}, {@nojoliet='nojoliet'}, {@overriderock='overriderockperm'}, {@block={'block', 0x3d, 0x400}}, {@check_strict='check=strict'}, {@check_relaxed='check=relaxed'}], [{@pcr={'pcr', 0x3d, 0x3}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid'}}, {@uid_eq={'uid'}}, {@subj_type={'subj_type', 0x3d, ',-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'skcipher\x00'}}]}) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x1d91, 0x403, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="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"/394, 0x3528a9c0}], 0x10, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x15d1bfe3d627c699) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1406.130924] md: could not open unknown-block(0,96). [ 1406.136366] md: md_import_device returned -6 23:29:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0}) 23:29:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0}) [ 1406.638107] md: could not open unknown-block(0,96). [ 1406.643586] md: md_import_device returned -6 23:29:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [0x6000000], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x2, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1406.806980] xt_cgroup: invalid path, errno=-2 23:29:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0}) [ 1406.849939] xt_cgroup: invalid path, errno=-2 23:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=40000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 23:29:04 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)={0x80, 0x1, 0x2, 0x7, 0x8, 0x80000000, 0x1}) 23:29:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x8, 0x4, 0x1000000000000, 0x10000000, 0x0, 0xec}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}}, 0x8) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:06 executing program 5: rt_sigprocmask(0x1, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r1, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r3 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:29:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) 23:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000002c0)={0x5, 0x0, 0x3, 0xffff0003, &(0x7f0000000380)}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:06 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630446"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) dup(0xffffffffffffffff) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x0, 0x60, 0x0}) 23:29:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)="7ace7d0cba9d6f2dec8e693658f8f87e74e582f6ed108340fcb6cfd8e0ffa6134e4b8809e4cea314ec123acfd5db24188358d39819189e45e7e77f8ad1728adc815ee9405769f3c3f2039b945409e31798cf3d49286aa42a1320ab1078c3b0fafedd7b653cd08708d411c3ef7aba33497aa3eb54b8af55c19bc8a10f2a13f480aec680c62975041637cd649a596813f186e3e9a2ba0056f20edbb6a0903ce9d0a83eeced034d69ae16bc0ced5c54101302c022de72b55b14f18848b8cd6c01cf7863", 0xc2) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fbac141414e002d301be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 23:29:07 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x8, 0x0, 0x100000001, 0x2}) 23:29:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000340)={@local}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@local, @ipv4={[0x0, 0x0, 0x8], [], @dev}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a3}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr=' \x01\x00', @loopback, 0x3}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000009c3372f1f352b6aa205b28055e553892f611d4ade49b868d82c5da40d095ae0efe8cd423798f87690a389ff9a6b26b9c691884f09740b6de1a3dd81d9f2a9c535b7d99d27333afe1180c018c3a82d662b35aca783c", @ANYRES16=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c00990080000000", @ANYRES32, @ANYBLOB="c2567cc83a621bf6666f0ae8e247b4371fa5de99425da1a9066df501d81abc70cbd5c1398d8e10b5545557dbac89cf34bc0e5a3b2a9535bd8d35080044d77962c4277b5dec678f0298ad64746476e11262514dacc458f3c6c9a83ef75fa80a2d0c21efbc0161795244c6040adf4bfd12faca2aaa49c05eb553223913768304f7bd0adff381c874c2223e7e8a47f6d3077f537039d14c56d674cb6b73b7bfa79cf6d83ae9799b51c280c548081d62d67d46080e143473db0efadb891c426ff53c4c94954c71b0a7d1c2a7edb4a1d44fef4184d9b7c0df8c809e222447bf11e9787e744bd10c8f6576"], 0x30}, 0x1, 0x0, 0x0, 0xb8e6ed9539689a14}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) lstat(&(0x7f0000000100)='\x00', &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 23:29:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) 23:29:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') write(r1, &(0x7f0000000440)="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", 0x1000) sendfile(r5, r6, 0x0, 0x50000000000443) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, [], {0x0, @bt={0x1f, 0x6fa, 0x1, 0x2, 0x9, 0x3, 0x80000000, 0x8, 0x24, 0x1, 0xe9, 0x4, 0x200, 0x3, 0x0, 0x8, {0x100, 0x3}, 0x81, 0x1f}}}) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000800)="390f2506edfe4bf3ccb93431d54d4e0cfa0633c581d36c515e15fe9983a691cf114736725165fef896ffffffffffff789104f30597292d041cc915de1b41af0e869c471ee61a1a120000e3", 0x4b}], 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) sendmsg$nfc_llcp(r2, &(0x7f0000000740)={&(0x7f00000002c0)={0x27, 0x0, 0x1, 0x7, 0x3, 0x49, "9bfc6a4932c43c727566de1f87496808687c257340206dc183c09682bc6dec4f51514c1c6d136d6eedf2d942f20ea24cb90fc5e28b07473064f0470ab99807", 0x2f}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000380)="882765b7171b70061c670471dbeeb8f04b25ba2a8a96cd33285125ca6163da24e7892a1d558086e2df4802dfea96ee379bce603a4141a1d3e8e0ee7ca987e73695d49d9ceb1fa4df7f9988f60b585efca195cb63fca0b7c7b836f7e001f43a16e067bd138e7f7f0cf6e4c07464", 0x6d}, {&(0x7f00000000c0)="6b7bb55df0b3852b6cff1ab4f45892aa88caa9d9c94ebf595814440b7d5558376cfe78b186d2a06d47db8b5de73bd10d5b51eb8928fa6bc48ca95250", 0x3c}, {&(0x7f0000000400)="319f3869b282a209debdfd94f8a4c37d911bb7969fb1089af7151283703abeae378589348105541b3492ff0458459d8de517fea41bfedcfbe44208dc5ee1c161b2", 0x41}, {&(0x7f0000000200)="2be94e94a3a9cfffb944e1e4e0ecdeb9337bbab270c9164e946f9248b15261c1795c478cac16d669d76f9f5413fe9fd1fec26d", 0x33}, {&(0x7f0000000480)="849dfa80fed8f0f64bc3c8e7d2baf7970f60bca719afe437fc745205c1d0b8969146db83d21a0b2684ca85e700d7450339c76c4396b15064fa2240016e85f430059ca3c31334575cdb16b28753248840b11e4c92e0c226df841c8b7f8575975677e8b7a2d5", 0x65}, {&(0x7f0000000500)="3ab28333e9b60ef95c504ee207aac6b9daf7168afd368bd7921216dc30bc48a28a91a88746be75837dae7cade6f440889e964d3e3db7823b3da67bb588a7f414c4f8", 0x42}, {&(0x7f0000000580)="c6b530862166d467dad225ab8270576ce2612bd0862162be9a156d6a8ef449a896f2f00be8d7b94a89647cbd32a65e1e42006748ce354c397685c086e7552fe504e5350689c3fa4eb1d0fbba692af682bbcdcc8397ec9706221180ebef22500e89b157d2f38bed5a40caff99987dd8adb445ffdf3fc4adef24697c3fd6ab4c9a7f5a3e87bf1adfc73fa2328b3be1a05706f3ac07aba25afb87fd761f24add6cea2ad4656cffd069d381ce086f96b320d3604d0429108e281185ef43fbe5d", 0xbe}, {&(0x7f0000000640)="5e7845f3923f890ca518dfd69ea2d8c935a781535ba640034c5c843ef4b742c5eec1ce72130a17479cb0609e1f280653b45a43f1127be4235fbb3dfb8701c369238255f19bd4483330bfbe9ec214d5171fca75919fbb2c9f46", 0x59}], 0x8, 0x0, 0x0, 0x80}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:10 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1c, 0x4, @thr={&(0x7f00000000c0)="c2740f1179a7c6e355c77741cd2313e4e2deb685494f5c83d47d34da319bca6c1c550c7f096ff5b4e20a353dfba2e8340265277af4af0e9efda8a69b8678f28b86eda532c95033477cbbe94122dcdb715dce4f626f9af05bfa9f33309edc42f7cadf5f456ac291e0b372157e7cef1e208c543c1d59e51e29590a44cce042ed52eb5fd8ef2717fbceb728369f9594e75c32b0c9a9b818d6ee47e7ad14de02ed1424bccaa126db09ba46ebb67f490fb0bb977f1d40ff2e28b53033394401cae4937efa08f299dc8b2f1f5072b924fe86b33dc9c3fa311ed090dd6ee3de57f2", &(0x7f00000001c0)="874b98343ac8ab28f0d119c7fb633f652e32ad2b75cffb4e83918df2621c35d2228f5edd5c091e37aa9e2ea9720d04353a3b5284716f9fa64e1d175519a968f81ec5dbce383c4f61878976c109b1e3d1a194711b15a1db7fd059a94a957c97a900b8df10d5e311e87a3a20265fbd47c68f8da61d596a91e0e36cfa4ed202a3c1a4d87124d26c45189d55a0b4898216bdcea50aad9cbda33735f0075ccb07641de442f094709a23632d7f94905c0557ae8816dcec7d10d10e2e4441021ed89752ccc31f108c604ee54c83f3de26050327f8380ee99d0e86d6"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x3, &(0x7f000004a000)={{0x0, 0x1}}, 0x0) 23:29:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) dup(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:10 executing program 3: 23:29:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) r7 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:10 executing program 3: 23:29:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:10 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b400000002060102000000000000000002000005050001000700000005000100070000000d0003006c6973743a7365740000000044000780050003000400000005000300e10000000800094000000004080008400000000008000944000000f5080008400000006605000300fd00000005001500400000001400078008000a400000008005001500ef0000000500040000000000050001000700000005000500010000000d0003006c6973743a73657400000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8001) socket$inet6(0xa, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) 23:29:10 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:29:11 executing program 3: 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:29:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) waitid(0x0, r1, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000000, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x800}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x4000010, 0xffffffffffffffff, 0x1) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:11 executing program 0: gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) dup3(r0, r1, 0x0) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) unshare(0x2060600) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:11 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:29:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write(0xffffffffffffffff, &(0x7f00000002c0)="bf29492987c5393569fb76b1a2eb75b3853593484efb869c8ebea2874efba62df70e9759e25fea9b60c76bca4ee31661057a5292c1199ce00b377851ee908ec89c217da56fd0081ca5d4a64f9b811427617b6bdb3c16b883e1edb69712b656bebe8f1e0d71de5b47e4861d025fb57ccc0303c202897342ae", 0x78) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/48) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:12 executing program 0: 23:29:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) unshare(0x2060600) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 23:29:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:12 executing program 0: 23:29:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x10000040, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="000327bd7000fbdbdf250200000003006a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:12 executing program 0: 23:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:13 executing program 0: 23:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:13 executing program 0: 23:29:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x800, 0x401) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0xc827d9c2356895f0, 0xff, 0x5, 0x2, 0x7, 0x34b9, 0x4, 0x3592c2aa}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x180800) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:13 executing program 3: 23:29:13 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) r3 = socket$inet6(0xa, 0x2, 0x4) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x40004) r6 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{}, {0x0, 0x989680}}, 0x0) 23:29:13 executing program 0: 23:29:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) write(0xffffffffffffffff, &(0x7f0000000380)="3eabdc53e262dce99d3c60af0cc002716fe978eef07259657fbb8382f24c3b32d6c12a47e5315c95345fbeae8a04966852a3a41417e2ba9e3a1b3b5f3a7cd27a304cec29c663029697784551d896f60e87004b05831dc98b2fa61f5bd8a429e360b15015f21b7a865dc0f621c2d827eaceb97238747adcb5c73d1d2fc16b83143029917e1a1d27fc987527a8d8c97be62b6b186052046b9bee0e1d66eb6dadb55db97945d591cbdedc44fa8e7b3d4a0b1a9970497ec16dcd7d46fe48a8631fa555596f274217", 0xc6) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:13 executing program 0: 23:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:13 executing program 3: 23:29:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:13 executing program 0: 23:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:13 executing program 0: 23:29:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:14 executing program 0: 23:29:14 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x800, &(0x7f0000000d00)=@abs, 0x6e) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff57e5e5"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x68, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x8, &(0x7f0000000180)=""/121, 0x79, 0x0, 0x19}, @fda={0x66646185, 0x9, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/227, 0xe3, 0x0, 0x33}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}, @increfs_done={0x40106308, 0x2}, @request_death], 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000000)) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:29:14 executing program 3: 23:29:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:14 executing program 3: 23:29:14 executing program 0: 23:29:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@hyper}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/anycast6\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:14 executing program 3: 23:29:14 executing program 0: 23:29:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 23:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:15 executing program 0: 23:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003840)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/102, 0x66}], 0x6}, 0x9}, {{&(0x7f0000000900)=@tipc, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/211, 0xd3}, {&(0x7f0000002b80)=""/18, 0x12}, {&(0x7f0000002bc0)}], 0x7, &(0x7f0000002c80)=""/58, 0x3a}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/93, 0x5d}, {&(0x7f0000002d40)=""/6, 0x6}], 0x2, &(0x7f0000002dc0)=""/90, 0x5a}, 0x80}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002ec0)=""/97, 0x61}, {&(0x7f0000002f40)=""/227, 0xe3}, {&(0x7f0000003040)=""/230, 0xe6}, {&(0x7f0000003140)=""/231, 0xe7}, {&(0x7f0000003240)=""/204, 0xcc}, {&(0x7f0000003340)=""/128, 0x80}, {&(0x7f00000033c0)=""/238, 0xee}, {&(0x7f00000034c0)=""/194, 0xc2}], 0x8, &(0x7f0000003640)=""/149, 0x95}, 0x5d}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000000c0)={0x8, 0x7, 0xfffc}) 23:29:15 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioprio_get$pid(0x1, r3) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f0200000d000000000001000000000000000b00f0000013001462726f2071694dde52c4fb98e2c18b"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x1000, @bearer=@l2={'ib', 0x3a, 'tunl0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendto$netrom(r1, &(0x7f0000000200)="daed0d5f43102370e3ea169aac0cb9466b5a0370663227a5f2df5bf82feca7736ab72b88fea9d14914bfe6b25cbc68b26ab180389e4af024b8d982cbe729415030cd3ef6269481adfbd09265e8e7f2d10c8573ce9be6ef9749819cf2dbca4aef8a44430f8667565daa39e260c4ac9e03705b012d29afc591fc5b1d47783bcc6927248aaab0ad5dc779abfadc153d4e9485f6", 0x92, 0x40, 0x0, 0x0) 23:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:15 executing program 0: 23:29:15 executing program 3: 23:29:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x40, 0x1, 0x5, 0x0, 0x0, 0x4, 0x48180, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x402, 0x100, 0x1000, 0x9, 0x0, 0x9, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:15 executing program 0: 23:29:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:15 executing program 0: 23:29:16 executing program 0: 23:29:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:29:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:19 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x200000f, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) accept(r3, &(0x7f0000000000)=@pppol2tp, &(0x7f00000000c0)=0x80) 23:29:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 23:29:19 executing program 0: 23:29:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x109}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:29:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x7b, 0x2, 0x10000016, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffe1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 23:29:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x2000000, [{}, {0x0, 0x85}]}}) 23:29:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x0, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 23:29:19 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1421.921733] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1421.944480] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1421.950418] CPU: 1 PID: 30288 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1421.958861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1421.968222] Call Trace: [ 1421.970862] dump_stack+0x1b2/0x283 [ 1421.975265] warn_alloc.cold+0x96/0x1af [ 1421.979259] ? zone_watermark_ok_safe+0x250/0x250 [ 1421.984128] ? wait_for_completion_io+0x10/0x10 [ 1421.988831] __alloc_pages_nodemask+0x2129/0x2730 [ 1421.993712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1421.998575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.003453] ? do_raw_spin_unlock+0x164/0x250 [ 1422.008003] alloc_pages_current+0xe7/0x1e0 [ 1422.012340] kvm_mmu_create+0xd1/0x1c0 [ 1422.016252] kvm_arch_vcpu_init+0x282/0x890 [ 1422.020591] ? alloc_pages_current+0xef/0x1e0 [ 1422.025104] kvm_vcpu_init+0x26d/0x360 [ 1422.029026] vmx_create_vcpu+0xf5/0x2950 [ 1422.033191] ? __mutex_unlock_slowpath+0x75/0x780 [ 1422.039790] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1422.044816] ? alloc_loaded_vmcs+0x240/0x240 [ 1422.049234] kvm_vm_ioctl+0x4ae/0x1430 [ 1422.053130] ? __lock_acquire+0x655/0x42a0 [ 1422.057398] ? kvm_vcpu_release+0xa0/0xa0 [ 1422.061551] ? trace_hardirqs_on+0x10/0x10 [ 1422.065795] ? trace_hardirqs_on+0x10/0x10 [ 1422.070216] ? futex_exit_release+0x60/0x60 [ 1422.074988] ? __might_fault+0x104/0x1b0 [ 1422.079064] ? lock_acquire+0x170/0x3f0 [ 1422.083153] ? kvm_vcpu_release+0xa0/0xa0 [ 1422.088178] do_vfs_ioctl+0x75a/0xfe0 [ 1422.092162] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1422.097814] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.102244] ? security_file_ioctl+0x76/0xb0 [ 1422.106677] ? security_file_ioctl+0x83/0xb0 [ 1422.111120] SyS_ioctl+0x7f/0xb0 [ 1422.114506] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1422.118489] do_syscall_64+0x1d5/0x640 [ 1422.122386] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1422.127607] RIP: 0033:0x45cb29 [ 1422.130795] RSP: 002b:00007fe2c8929c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.138531] RAX: ffffffffffffffda RBX: 00000000004e7ee0 RCX: 000000000045cb29 [ 1422.145806] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1422.153080] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1422.160355] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1422.167636] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe2c892a6d4 [ 1422.177519] Mem-Info: [ 1422.180222] active_anon:839155 inactive_anon:6168 isolated_anon:0 [ 1422.180222] active_file:4617 inactive_file:19768 isolated_file:0 [ 1422.180222] unevictable:0 dirty:224 writeback:0 unstable:0 [ 1422.180222] slab_reclaimable:15915 slab_unreclaimable:133590 [ 1422.180222] mapped:59477 shmem:7640 pagetables:26426 bounce:0 [ 1422.180222] free:471190 free_pcp:86 free_cma:0 [ 1422.220317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1422.254924] [ 1422.257080] ============================= [ 1422.261842] WARNING: suspicious RCU usage [ 1422.266407] 4.14.184-syzkaller #0 Not tainted [ 1422.271707] ----------------------------- [ 1422.276208] net/sched/act_sample.c:95 suspicious rcu_dereference_protected() usage! [ 1422.284863] Node 0 active_anon:1935544kB inactive_anon:16252kB active_file:48kB inactive_file:14748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221264kB dirty:12kB writeback:0kB shmem:22112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1298432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1422.327558] Node 1 active_anon:1424976kB inactive_anon:8420kB active_file:18420kB inactive_file:64324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16644kB dirty:884kB writeback:0kB shmem:8448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1422.334815] [ 1422.334815] other info that might help us debug this: [ 1422.334815] [ 1422.357136] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:2692kB inactive_anon:0kB active_file:40kB inactive_file:76kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1422.435989] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 1422.455320] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1422.460773] CPU: 0 PID: 30298 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 1422.468691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.478096] Call Trace: [ 1422.480697] dump_stack+0x1b2/0x283 [ 1422.484367] warn_alloc.cold+0x96/0x1af [ 1422.488722] ? zone_watermark_ok_safe+0x250/0x250 [ 1422.493695] ? wait_for_completion_io+0x10/0x10 [ 1422.498384] __alloc_pages_nodemask+0x2129/0x2730 [ 1422.503257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.508122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.512990] ? do_raw_spin_unlock+0x164/0x250 [ 1422.516203] lowmem_reserve[]: [ 1422.517497] alloc_pages_current+0xe7/0x1e0 [ 1422.517515] kvm_mmu_create+0xd1/0x1c0 [ 1422.517527] kvm_arch_vcpu_init+0x282/0x890 [ 1422.517535] ? alloc_pages_current+0xef/0x1e0 [ 1422.517548] kvm_vcpu_init+0x26d/0x360 [ 1422.517560] vmx_create_vcpu+0xf5/0x2950 [ 1422.517574] ? __mutex_unlock_slowpath+0x75/0x780 [ 1422.517588] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1422.524552] 0 [ 1422.525011] ? alloc_loaded_vmcs+0x240/0x240 [ 1422.542919] 2559 [ 1422.545611] kvm_vm_ioctl+0x4ae/0x1430 [ 1422.545626] ? __lock_acquire+0x655/0x42a0 [ 1422.545639] ? kvm_vcpu_release+0xa0/0xa0 [ 1422.566094] 2559 [ 1422.569889] ? trace_hardirqs_on+0x10/0x10 [ 1422.569906] ? trace_hardirqs_on+0x10/0x10 [ 1422.569918] ? futex_exit_release+0x60/0x60 [ 1422.569929] ? __might_fault+0x104/0x1b0 [ 1422.569940] ? lock_acquire+0x170/0x3f0 [ 1422.569951] ? kvm_vcpu_release+0xa0/0xa0 [ 1422.569962] do_vfs_ioctl+0x75a/0xfe0 [ 1422.578985] 2559 [ 1422.580521] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1422.580534] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.580554] ? security_file_ioctl+0x76/0xb0 [ 1422.587218] 2559 [ 1422.589028] ? security_file_ioctl+0x83/0xb0 [ 1422.589039] SyS_ioctl+0x7f/0xb0 [ 1422.589047] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1422.589060] do_syscall_64+0x1d5/0x640 [ 1422.589078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1422.589087] RIP: 0033:0x45cb29 [ 1422.589091] RSP: 002b:00007fe2c8908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.589102] RAX: ffffffffffffffda RBX: 00000000004e7ee0 RCX: 000000000045cb29 [ 1422.589111] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 1422.601673] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.601680] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1422.601685] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fe2c89096d4 [ 1422.619036] [ 1422.619036] rcu_scheduler_active = 2, debug_locks = 1 [ 1422.682416] Node 0 [ 1422.699324] 1 lock held by syz-executor.2/30305: 23:29:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sync_file_range(r1, 0x2, 0x7, 0x7) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010102, 0x0, 0xffffffff, 'veth1_to_batadv\x00', 'bond_slave_0\x00', {}, {0xff}, 0x84, 0x1, 0xc}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0x6, 0x4}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1422.714008] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 [ 1422.743902] [ 1422.743902] stack backtrace: [ 1422.764791] CPU: 0 PID: 30305 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 1422.772717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.781441] DMA32 free:42320kB min:36296kB low:45368kB high:54440kB active_anon:1932852kB inactive_anon:16252kB active_file:8kB inactive_file:236kB unevictable:0kB writepending:8kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11712kB pagetables:30160kB bounce:0kB free_pcp:664kB local_pcp:664kB free_cma:0kB [ 1422.782084] Call Trace: [ 1422.782104] dump_stack+0x1b2/0x283 [ 1422.782212] tcf_sample_init+0x71c/0x8c0 [ 1422.782227] ? tcf_sample_cleanup_rcu+0x80/0x80 [ 1422.825799] tcf_action_init_1+0x51a/0x9f0 [ 1422.830049] ? tcf_action_dump_old+0x80/0x80 [ 1422.835427] ? depot_save_stack+0x1dd/0x401 [ 1422.838437] lowmem_reserve[]: [ 1422.839809] ? nla_parse+0x162/0x220 [ 1422.839825] tcf_action_init+0x26d/0x400 [ 1422.839841] ? tcf_action_init_1+0x9f0/0x9f0 [ 1422.843193] 0 [ 1422.846767] ? basic_change+0x2b3/0xf00 [ 1422.846789] ? tc_ctl_tfilter+0xf13/0x18e7 [ 1422.851879] 0 [ 1422.859618] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1422.859666] ? sock_sendmsg+0xb5/0x100 [ 1422.859674] ? ___sys_sendmsg+0x349/0x840 [ 1422.859683] ? __sys_sendmmsg+0x129/0x330 [ 1422.859694] ? fs_reclaim_acquire+0x10/0x10 [ 1422.859708] tcf_exts_validate+0x2d7/0x490 [ 1422.859723] ? tcf_exts_change+0x120/0x120 [ 1422.862796] 0 [ 1422.865493] basic_change+0x3ef/0xf00 [ 1422.865511] ? basic_init+0xf0/0xf0 [ 1422.865530] ? basic_init+0xf0/0xf0 [ 1422.865540] tc_ctl_tfilter+0xf13/0x18e7 [ 1422.865559] ? tcf_chain_tp_remove.isra.0+0x200/0x200 [ 1422.870559] 0 [ 1422.871573] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1422.871591] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 1422.871612] ? tcf_chain_tp_remove.isra.0+0x200/0x200 [ 1422.871623] rtnetlink_rcv_msg+0x3be/0xb10 [ 1422.876478] 0 [ 1422.879934] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1422.879984] ? netdev_pick_tx+0x2e0/0x2e0 [ 1422.880004] netlink_rcv_skb+0x127/0x370 [ 1422.880014] ? memcpy+0x35/0x50 [ 1422.880025] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1422.888591] ? netlink_ack+0x970/0x970 [ 1422.888614] netlink_unicast+0x437/0x610 [ 1422.888627] ? netlink_sendskb+0x50/0x50 [ 1422.888641] netlink_sendmsg+0x64a/0xbb0 [ 1422.888656] ? nlmsg_notify+0x160/0x160 [ 1422.888667] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1422.888682] ? security_socket_sendmsg+0x83/0xb0 [ 1422.894614] Node 0 [ 1422.897287] ? nlmsg_notify+0x160/0x160 [ 1422.897301] sock_sendmsg+0xb5/0x100 [ 1422.897314] ___sys_sendmsg+0x349/0x840 [ 1422.897323] ? trace_hardirqs_on+0x10/0x10 [ 1422.897335] ? copy_msghdr_from_user+0x380/0x380 [ 1422.897348] ? trace_hardirqs_on+0x10/0x10 [ 1422.897359] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 1422.897373] ? lock_acquire+0x170/0x3f0 [ 1422.902216] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1422.903396] ? lock_downgrade+0x6e0/0x6e0 [ 1422.903412] ? __might_fault+0x104/0x1b0 [ 1422.903425] ? lock_acquire+0x170/0x3f0 [ 1422.903447] __sys_sendmmsg+0x129/0x330 [ 1422.903458] ? SyS_sendmsg+0x40/0x40 [ 1422.913058] lowmem_reserve[]: [ 1422.914565] ? __might_fault+0x104/0x1b0 [ 1422.914590] ? __might_fault+0x177/0x1b0 [ 1422.914623] ? _copy_to_user+0x82/0xd0 [ 1422.914636] ? put_timespec64+0xaa/0xf0 [ 1422.919427] 0 [ 1422.924226] ? nsecs_to_jiffies+0x30/0x30 [ 1422.924245] ? SyS_clock_gettime+0xf5/0x180 [ 1422.924261] SyS_sendmmsg+0x2f/0x50 [ 1422.924271] ? __sys_sendmmsg+0x330/0x330 [ 1422.924287] do_syscall_64+0x1d5/0x640 [ 1422.926598] 0 [ 1422.931138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1422.931148] RIP: 0033:0x45cb29 [ 1422.931152] RSP: 002b:00007faa64a8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1422.931162] RAX: ffffffffffffffda RBX: 00000000004fd760 RCX: 000000000045cb29 [ 1422.931167] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1422.931172] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1422.931178] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 23:29:20 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:20 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in=@local, 0x4e22, 0x5, 0x4e23, 0x1, 0x2, 0x20, 0x20, 0x3, 0x0, r4}, {0x6, 0xfff, 0x6, 0x200, 0x2ac626d0, 0xfff, 0x0, 0x2}, {0x1f, 0xa311, 0x4, 0x1}, 0x9, 0x6e6bb0, 0x0, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d3, 0xa1}, 0x2, @in6=@ipv4={[], [], @remote}, 0x0, 0x4, 0x3, 0x6, 0xffffff96, 0x800, 0x4}}, 0xe8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 1422.931184] R13: 0000000000000904 R14: 00000000004cbe1c R15: 00007faa64a8d6d4 [ 1422.962621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1423.063189] 0 [ 1423.241168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:20 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1423.345125] 0 0 [ 1423.365852] Node 1 Normal free:1871736kB min:53592kB low:66988kB high:80384kB active_anon:1395980kB inactive_anon:8420kB active_file:18572kB inactive_file:64700kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:27264kB pagetables:75456kB bounce:0kB free_pcp:680kB local_pcp:348kB free_cma:0kB [ 1423.411575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1423.433377] lowmem_reserve[]: 0 0 0 0 0 [ 1423.444240] Node 0 DMA: 69*4kB (UME) 63*8kB (UMEH) 12*16kB (UEH) 2*32kB (H) 2*64kB (ME) 1*128kB (E) 0*256kB 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10508kB [ 1423.468739] Node 0 DMA32: 715*4kB (UME) 386*8kB (ME) 899*16kB (UME) 500*32kB (UME) 21*64kB (UM) 17*128kB (M) 3*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 41644kB [ 1423.542485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1423.563344] Node 1 Normal: 11*4kB (UM) 417*8kB (U) 126*16kB (UME) 388*32kB (UME) 156*64kB (UME) 69*128kB (UME) 35*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 5*2048kB (UM) 440*4096kB (UM) = 1866772kB [ 1423.599849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1423.613847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1423.627648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1423.636666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1423.663677] 17473 total pagecache pages [ 1423.673485] 0 pages in swap cache [ 1423.685470] Swap cache stats: add 0, delete 0, find 0/0 [ 1423.695147] Free swap = 0kB [ 1423.703989] Total swap = 0kB [ 1423.707202] 1965979 pages RAM [ 1423.711914] 0 pages HighMem/MovableOnly [ 1423.716036] 338456 pages reserved [ 1423.725163] 0 pages cma reserved 23:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x2000000, [{}, {0x0, 0x85}]}}) 23:29:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/85, 0x55}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x7, &(0x7f0000000840)=""/24, 0x18}, 0xfffffffd}], 0x2, 0x40012041, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x2000000, [{}, {0x0, 0x85}]}}) 23:29:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) 23:29:22 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x73682a85, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @decrefs, @request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000000c0)={0x6, 0x0, [], {0x0, @reserved}}) [ 1424.522965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f0000000540)="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"}}], 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1424.778098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x2000000, [{}, {0x0, 0x85}]}}) [ 1424.911734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1425.066804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1425.149261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1425.257940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0), &(0x7f0000000300)=0x8) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x385002, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000200)=0x3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:25 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$bt_cmtp(0x1f, 0x3, 0x5) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x4}, &(0x7f0000bbdffc)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r1 = socket(0x40000000002, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/153, 0x99}], 0x2, &(0x7f0000000280)=""/76, 0x4c}, 0x7}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f00000009c0)=""/80, 0x50}, {&(0x7f00000008c0)=""/48, 0x30}], 0x7, &(0x7f0000000680)=""/144, 0x90}, 0x1}], 0x2, 0x40000100, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 23:29:25 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x3a4, 0x0, &(0x7f0000000000)={0x77359400}) 23:29:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0xfffffffffffffd80) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000445) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) 23:29:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x9) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:25 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x8009, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x104}, 0x40) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000000062f6e9a5d02bf5de58aeef00"/28, @ANYRES16=r2, @ANYBLOB="01002ebdf927bd7000fbdbdf2501000000080001000300000008000200010000000cc90b800504030005000000080002000200000008000200"], 0x3}}, 0x48080) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0061a9002200f4f071e690521d79ec2df20a1921292b81a9ff0700001853f6caa7bee88f97c39fa1a81e3bdd3b2a22728650938e70", @ANYRES16=r2, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf2502000000180108802c0007800800050061acf22408000600cc00000008000500491afe3308000500aebc2227080006004400000024000780080006008b0000000800060070000000080005000ba0b21f08000600740000003c00078008000600630000000800050092e45d0308000500789ae7540800050000f9e24b08000600db0000000800060084000000080005009705d052140007800800050052113c4508000500d1507e7d340007800800060090000000080006005300000008000500ac4e2b6808000500216a585408000500f720fa4408000500f7906e4e1c0007800800050089badb79080005008e3c177008000600c700000024000780080005008df06d1f080006000500000008000500b5153d7008000600ed0000002c0004000300010000000500030000000000050003000000000005000300050000004c000880140007800800050040fd4d45080005007303640c3400078008000500c485fd250800060069000000080006009b00000008000600240000000800060002000000080005006e8f684e"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4512f0cc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x1) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaac46, &(0x7f0000000040)=[{&(0x7f0000000100)="906ded9c567a14606b6673176661740008040980", 0x14, 0x2}], 0x0, 0x0) 23:29:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:26 executing program 0: [ 1428.529631] nla_parse: 1 callbacks suppressed [ 1428.529638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:26 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x3a4, 0x0, &(0x7f0000000000)={0x77359400}) 23:29:26 executing program 0: 23:29:26 executing program 0: 23:29:26 executing program 0: 23:29:26 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:26 executing program 3: 23:29:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="d31abe644eae33d444280fb8dd8a34624a176022404ed1", @ANYRES32=0x0, @ANYBLOB="08001000fcffffff"], 0x105c}, 0x1, 0x0, 0x0, 0x852}, 0x20004804) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r5, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, @perf_config_ext={0x3, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'vlan0\x00', 0x7}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:26 executing program 0: 23:29:26 executing program 0: 23:29:26 executing program 0: [ 1429.172251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:26 executing program 0: 23:29:26 executing program 3: 23:29:26 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:26 executing program 0: 23:29:26 executing program 0: [ 1429.389227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x400000b}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4072e09041e1100000000020000000200000800040006000000", 0x79) 23:29:27 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1429.649295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@can_newroute={0x144, 0x18, 0xc16, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_DST_IF={0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x29, 0x2b, 0x7b, 0x20, 0xff, "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", 0x3, "ae5c2fe4ffbea39150824a78fbb00ec26f6d104e"}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffffd, 0x6, 0x7f}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$isdn_base(0x22, 0x3, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:27 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800010, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x101) lseek(r1, 0x7ff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000ffffff05) 23:29:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r3, 0x14, 0x0, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 1430.221673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x253}, 0x0) r1 = socket$inet6(0xa, 0x2, 0xfffffffc) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x81800) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) accept(r3, &(0x7f0000000380)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x6f) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc0015}, 0x44004) 23:29:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x400000b}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4072e09041e1100002600020000000200000800040006000000", 0x79) 23:29:27 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:28 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./bus/file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x10001}, {0x8, 0x9}]}, 0x18, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') keyctl$chown(0x4, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="b4ab5514f156e25c0d345ce9549e28548c6c1c70f1b874c42ea3cff6c774d98f0983dc2ec8de323c05", 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @empty}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="b4ab5514f156e25c0d345ce9549e28548c6c1c70f1b874c42ea3cff6c774d98f0983dc2ec8de323c05df6442283d308b8aad67afcaf4d9908bb96f4e4da9d1abea560c1e45f0d91e05405c07bb071a950b98", 0x52, 0x0, 0x0, 0x0) [ 1430.606721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1430.624722] audit: type=1804 audit(1593732568.130:76): pid=30712 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir685217924/syzkaller.9j0pg1/1262/bus" dev="sda1" ino=17112 res=1 23:29:28 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1430.782810] overlayfs: failed to resolve './file1': -2 [ 1430.843669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1430.853700] overlayfs: failed to resolve './file0gِoNMѫ': -2 23:29:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x0, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0xffff}, {0xffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) 23:29:28 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:28 executing program 0: syz_open_procfs(0x0, 0x0) socket(0x0, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) [ 1431.072526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x20004}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1431.246806] audit: type=1804 audit(1593732568.750:77): pid=30732 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir685217924/syzkaller.9j0pg1/1262/bus" dev="sda1" ino=17112 res=1 [ 1431.373251] audit: type=1804 audit(1593732568.880:78): pid=30795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir685217924/syzkaller.9j0pg1/1262/bus" dev="sda1" ino=17112 res=1 [ 1431.495584] device gretap0 entered promiscuous mode [ 1431.525249] device macvtap1 entered promiscuous mode 23:29:29 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1431.666184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:29 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f00000001c0), 0x10) 23:29:29 executing program 0: syz_open_procfs(0x0, 0x0) socket(0x0, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 23:29:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan1\x00') sendfile(r5, r6, 0x0, 0x50000000000443) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f00000000c0)=0x400, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:29:29 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:29 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1431.999254] device macvtap2 entered promiscuous mode 23:29:29 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:29:29 executing program 0: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x8905f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 23:29:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="a00000004000000000010000104b32dfcbe2753391837de3e1ff25bbea0f2a9e4859c1b7e5c0da18c074d726b73c4b9cab9c9f6a671b87f42ee669dddb5111f7937ad784a5766939a388e0204a2006b75bda5c4b2fb61c9163d622112235c4a8539bd34a3ef74e45dfb477be5c268c40aac8000000000000000071b764dcaf2659debfb0f3eb1900c7d701549ed53c8c517ec2194e35b3d77e43be73c2361440a0f2db97c186191c3850213a6b02a323fe1f83b15eed072a1079ae62e85991d9a1f18b6d6e7dcc6171a322a49ca2ceb8d4dee0616dd8b57fd2bd8ef36f364d24188495681dd2cf4c026079c0dd343d3645763d749ed78b1262ce2e2862cc24d3ae8cd5409b"]) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) 23:29:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000004}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0)