000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x11256dc5]}, 0x10) shutdown(r0, 0x1) 03:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:14 executing program 2: pkey_free(0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000006c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x2, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x30, 0x9, r4, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) prctl$intptr(0x29, 0x2) clone(0x0, &(0x7f0000000200)="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", &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0)=0x4000000, 0x1, 0x2000000000002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r6 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="4cf6e0a6d4546e53dc0000000400a5889908022bb1fe1a34903b3f27e0ee3bf8207be2996bfee7f86c28236b08cde8d077cc1aa0470097618164"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, &(0x7f0000000200)=0x14) r7 = dup2(r2, r2) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={r5, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x1cb}, 0x7c063d5d43514ce1) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r7, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @local, 0x2d3}, 0x1c) fcntl$notify(r6, 0x402, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x1000000]}], 0x10) close(0xffffffffffffffff) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xac720557]}, 0x10) shutdown(r0, 0x1) 03:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20042) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0xd1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x2000000]}], 0x10) close(0xffffffffffffffff) 03:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x240]}, 0x10) shutdown(r0, 0x1) 03:34:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000700)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f00000002c0)=""/152, 0x98) fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$team(&(0x7f0000000a40)='team\x00') add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="9f11c92cad2313e2a426f4e6955b9f481e9ee4ec0eb52e69a87b4252e4ad1362103886a63aef5d98cad84dd46648253085b6d6a9b70e999901d96ede4c4ad98f4bb666992466306b950e46", 0x4b, 0xfffffffffffffffa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) connect$inet(r2, &(0x7f0000001080)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) clock_gettime(0x0, &(0x7f0000007500)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000072c0)=[{{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005200), 0x0, &(0x7f0000005240)=""/69, 0x45}}, {{&(0x7f0000005740)=@nfc_llcp, 0x80, &(0x7f0000005a00), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}, {{&(0x7f0000005b00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005b80)=""/30, 0x1e}, {&(0x7f0000005bc0)=""/212, 0xd4}, {&(0x7f0000005cc0)=""/13, 0xd}, {&(0x7f0000005d00)=""/23, 0x17}], 0x4, 0x0, 0x0, 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000005d80)=""/44, 0x2c}], 0x1, &(0x7f0000005e00)=""/215, 0xd7, 0xae}, 0x5}, {{&(0x7f0000005f00)=@un=@abs, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005f80)}, {&(0x7f0000005fc0)=""/192, 0xc0}, {&(0x7f0000006080)=""/49, 0x31}], 0x3, &(0x7f0000006100)=""/58, 0x3a, 0x7}, 0xd1}, {{&(0x7f0000006140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006280)=[{&(0x7f00000061c0)=""/175, 0xaf}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000, 0x3f80000000000}, 0x8}], 0x6, 0x2, &(0x7f0000007540)={r3, r4+10000000}) connect$unix(0xffffffffffffffff, &(0x7f0000007580)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@multicast1, @local, 0x0}, &(0x7f0000000480)=0xc) recvfrom$packet(r6, &(0x7f00000002c0)=""/134, 0x86, 0x2000, &(0x7f00000004c0)={0x11, 0xf5, r7, 0x1, 0x81, 0x6, @local}, 0x14) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockname$packet(r6, &(0x7f0000000080), &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@dev, 0x0, r7}) ioctl(r8, 0x1000000000008915, &(0x7f0000000500)="17e8d4f933b7d11cd2df8450afab76afe84b465dca5500277c5335b7d0b80882acaf4898ca3486c8a23e5ab931567f431237fe0c3827334b5655f45c9afa2cc5777903a73a9172cd5bff14a12ed4f6f956e3a64f21c1f43c2c8cffd2ffbd15c2da903d5903da8cd7206aa62938e75d6355b16c76bfae98e7b43bfd493598958be16387d98cb9e686eed17dca7abe6f5a724763758f0f6d43b1b35e860c9fb4f8684b593e9d4055d781dfee3f8959d705d1473aef811a2690bb205a20010000048cddfb9ba1f195eeb1c6c2144f") write$binfmt_elf64(r5, &(0x7f0000008080)=ANY=[@ANYBLOB="7f454c4603964e083f00000000000000030006000300000035000000000000004000000000000000870200000000000003000000ff073800010001000500080057e5746401010000018000000000000000005600000000000400000000000000ffffffff00000000810000000000000006000000000000000c2ffb339df50080dc144c6b458b000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089d5f098000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcb435a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b756c29256a572309aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d74636c40016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e6c1c046c5617a308388cbd8beed6157deb5490c94bad7c5dc69e70f2c3d1dd9bae965150ed2448509160cdf3b7c646a736780a17cd5de91febad"], 0x7ba) sendto$inet(r2, &(0x7f00000000c0)="b0", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 03:34:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0xffffffffa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x402100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000001c0)={{0x5, 0x5, 0x2, 0x17, 'syz1\x00', 0x80}, 0x0, [0x1000, 0xfffffffffffffffe, 0xb70c, 0x7e61, 0x9, 0x7fffffff, 0x2, 0x9, 0x7, 0xa46, 0x5, 0x8, 0x3, 0x6, 0xff, 0x0, 0x9, 0x3, 0x6, 0x7, 0x8000, 0x1, 0x3ff, 0xff, 0x7, 0x1000, 0xfffffffffffffffa, 0x8, 0x3, 0x1ff5, 0x5, 0x6, 0x10000, 0xaa85, 0x1d85, 0x6, 0x10000, 0x1ff, 0x1, 0x6, 0x7fff, 0x200, 0x39819e61, 0x2, 0x0, 0x0, 0x6, 0xff, 0x2, 0x8, 0x400, 0x17, 0xffff, 0x2, 0x7fffffff, 0xffffffffffffffff, 0xff, 0x71caf0ed, 0x80ac, 0x9, 0xfffffffffffffffb, 0x3, 0xf5f, 0x3, 0xfff, 0x8000, 0x5, 0xa1, 0x1, 0x800, 0xe53f, 0x3, 0xad69, 0x5, 0x6, 0x4, 0x4, 0x100, 0xff, 0x4e7, 0x1, 0x100, 0x8, 0xc46, 0x8000, 0x4, 0x0, 0x331, 0x80000001, 0x3, 0xffffffffb9c29645, 0x81, 0x47f00502, 0x0, 0x8, 0x9, 0x10001, 0x6, 0x6, 0x6, 0x0, 0x20, 0x1c00000, 0x9, 0xa4d, 0x9, 0x26d768ba, 0x3c52, 0x7, 0x3, 0x2, 0x3fe0000000, 0x7fff, 0xe0, 0x2, 0x1, 0xff, 0x1, 0x16b8ce94, 0xffff, 0x1000, 0x8, 0x8000, 0x1, 0x6, 0x0, 0x4942, 0x7], {0x0, 0x1c9c380}}) 03:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x463b1]}, 0x10) shutdown(r0, 0x1) 03:34:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x240]}, 0x10) shutdown(r0, 0x1) 03:34:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x200000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff88]}, @local, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x54282, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000140)="f27d415d8fd6287c89e7d43f319c33b2857aca986b283d715e4e3980eb34ce289f261229df3deeae5a5372476a", &(0x7f0000000180)=""/16}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x80}, 0x2) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0xb83fc, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000002c0)={0x475, 0xfffffffffffffea7}) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x271c5ee8, 0x2003) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) fremovexattr(r0, &(0x7f0000000240)=@known='system.posix_acl_access\x00') 03:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x8000a0ffffffff]}], 0x10) close(0xffffffffffffffff) 03:34:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x5]}, 0x10) shutdown(r0, 0x1) 03:34:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffefb, &(0x7f00000004c0)=0x40000000000009) syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x1, 0x40001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/35) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @rand_addr}}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f00000003c0)=0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000002000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001ac0)={0x0, 0x0, 0x4, 0x9, @scatter={0x3, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f00000005c0)=""/23, 0x17}]}, &(0x7f0000001a00)="90e63d21", &(0x7f0000001a40)=""/54, 0x2, 0x0, 0x3, &(0x7f0000001a80)}) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r0) sendto$packet(r4, &(0x7f0000000140), 0x0, 0x4004854, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:34:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x8) ioctl$TIOCSCTTY(r0, 0x540e, 0x101) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x800000400005) [ 482.101148] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) close(r1) 03:34:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0xa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x14280000000000]}, 0x10) shutdown(r0, 0x1) 03:34:16 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f000000efe8)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x18002) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000080)={{&(0x7f0000006000/0x3000)=nil, 0x3000}}) 03:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000140)="1767a37b74bbc43b6475b3ba4e590695c8076a4584a4373a477ec448e3a022434e2bdd37c28c5a4873d97bb106f6a53bba7f1bfb3bb17c109b9ebbdb64eb806ca751db48c790374fd1cdd5b2edb4022c686836590aa199d743dcdf6f9690896d07d2c94664e16d5b01c4c75e09ef3396586b76937c210da190a0f348895a35d8f5b7dd88b72047d8c859425426ba5f94d1805a38c9b1c274c1d2d244c5c777d811a054d734a02f739deaf5e9e58541b9407c8f548f278c77cde2cdac51434c6782258ca0977eb84e07e977867e0360e92d0c6f4090112e59b76622c10d6a7d4699d2baa123137e2936d692eb51366b14f584b06937", &(0x7f0000000240)="32d37b060593001c83dd9c6969e78a0d79f14fe55c6b799d628a6fb1089b22034f32ad9cd9ec63d410d593f503c0c3e73cca1212e60c609b1a658880728e8a421a1a2344e3de4ceb105e89f17748d7974f8602d869ad4330540f27d81e3e616600d679117c823b216df590c8db77842663b8620ded95101adcf266e8e99379c59d052da51fb315266687eca485f9636b3066c96fd2702e750992ea8f0e32ebdf43f196b3b275f3df7f054f83d8efc4eb54fec0809e1939be4208b56456bbb3", 0x3}, 0x20) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) close(r1) 03:34:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x8000a0]}], 0x10) close(0xffffffffffffffff) 03:34:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x208}, &(0x7f0000000140)=0x712bf334457a6caf) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x5, 0x400, 0x8, 0x5, 0x4}, 0x14) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xfeffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:34:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000000140), 0x80000000000006, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0x2) 03:34:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) close(r1) 03:34:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x8000a0]}], 0x10) close(0xffffffffffffffff) 03:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x18020000]}, 0x10) shutdown(r0, 0x1) 03:34:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x10) close(0xffffffffffffffff) 03:34:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x20000000000002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[0x42c2, 0x50f3ae0b, 0x1]}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80, 0xe22cf26c24d153ee) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0xae, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000140)=""/174}, &(0x7f0000000280)=0x78) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) ioctl$void(r1, 0xc0045c78) 03:34:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0xf5, "2bfc80", "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"}}, 0x110) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0x80, 0x101}, 'port0\x00', 0x40, 0x400, 0x1, 0x84ec, 0x0, 0x2e6, 0x5, 0x0, 0x2, 0x3}) 03:34:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) close(r1) 03:34:18 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r1, 0x9}) 03:34:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x10) close(0xffffffffffffffff) 03:34:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xa2000000]}, 0x10) shutdown(r0, 0x1) 03:34:18 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r1, 0x9}) 03:34:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) [ 484.027900] QAT: Invalid ioctl 03:34:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x20000]}, 0x10) shutdown(r0, 0x1) [ 484.129562] QAT: Invalid ioctl 03:34:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0xf5, "2bfc80", "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"}}, 0x110) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0x80, 0x101}, 'port0\x00', 0x40, 0x400, 0x1, 0x84ec, 0x0, 0x2e6, 0x5, 0x0, 0x2, 0x3}) 03:34:18 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r1, 0x9}) [ 484.807984] QAT: Invalid ioctl [ 484.819844] QAT: Invalid ioctl 03:34:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x7, 0x0, 0x0, 0x3, 0x9}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) flock(r1, 0x1) 03:34:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x600]}, 0x10) shutdown(r0, 0x1) 03:34:19 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0xf5, "2bfc80", "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"}}, 0x110) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0x80, 0x101}, 'port0\x00', 0x40, 0x400, 0x1, 0x84ec, 0x0, 0x2e6, 0x5, 0x0, 0x2, 0x3}) 03:34:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) 03:34:19 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x1100]}, 0x10) shutdown(r0, 0x1) 03:34:19 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0xf5, "2bfc80", "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"}}, 0x110) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0x80, 0x101}, 'port0\x00', 0x40, 0x400, 0x1, 0x84ec, 0x0, 0x2e6, 0x5, 0x0, 0x2, 0x3}) 03:34:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}], 0x10) close(0xffffffffffffffff) 03:34:19 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 03:34:19 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0xa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xf401]}, 0x10) shutdown(r0, 0x1) 03:34:19 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0xf5, "2bfc80", "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"}}, 0x110) 03:34:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) 03:34:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x1802000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, 0xfa00, {0x2, &(0x7f0000000480), 0x111, 0x1009}}, 0x20) 03:34:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xe000000]}, 0x10) shutdown(r0, 0x1) 03:34:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) 03:34:20 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1, 0x20400) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xac00000000000000, 0x80) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x90faffff]}, 0x10) shutdown(r0, 0x1) 03:34:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 03:34:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="339a010000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cc874ffe19d9ae963ca96b6e96e6ea430d1b5c85f0468ad83df42f1fbdc2ec5c5a97ab5d3f98e197e99a3cea618fa05111e50039b917856aba979957d9cf7b5d612554c2d4d4d5fdfb9adf18ecdd8058a3ff737ac39fd300000000000000"], @ANYBLOB="add302000400ffffff0300000700e3ff75427ae75a73befbc41f2d997616408c392cc897046f2d63fab59de0a520606275c1c12aeb06de7c5cda4f189d7902d91f7298dfa3ac1f6af65ca821b64adcf8d1107d26e0bd459349639393fb7df09ff4db425a8cd5d06e4c810400555b3d822eff0b744806003f90fc0414b603dae9b1d0f89de648669bc36ebaa7ce1928e6d8e8440f640a0989e8bf07974a8df921dc413ad333ce3cfdfb0510a91d859ac207be00db530c6153c253c25177e06d64fd7fd8563e866ea6838f588fc55895fe0d2e58162b2bce0bcfbca223ad9ef0c3e4a9b3"]) 03:34:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}], 0x10) close(0xffffffffffffffff) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x3f000000]}, 0x10) shutdown(r0, 0x1) 03:34:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 03:34:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x80000000000000}) r1 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x20000000) r3 = syz_open_pts(r0, 0xfffffffffffffffd) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x5f0, 0x1f, 0x2, 0x0, 0x1, 0x14f, 0x40, 0x312, 0x10001, 0xffffffff, 0x38, 0x2, 0x9, 0x400, 0x5}, [{0x7, 0x4, 0x5, 0x2, 0xfffffffffffffffa, 0x3, 0xe9, 0x2}, {0x6474e551, 0x7, 0x3, 0xfb2, 0x4, 0x0, 0x1, 0x1f}], "283cb27025cda081ac896241f5ddf2e2bd549474789f37b5d33f2cb99937e3fe076dee64caa6899d49f7f64905e508a89337b7e7c9f789506ab3cf5729d9bccd3ed530faee96b83ae7520eabf3c5ce3a9db7ff85f607c35d9b12e8b0fe2e2f", [[]]}, 0x20f) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000000)) 03:34:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) creat(&(0x7f00000003c0)='./file0\x00', 0x40) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x700]}, 0x10) shutdown(r0, 0x1) 03:34:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 03:34:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x10) close(0xffffffffffffffff) 03:34:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x300]}, 0x10) shutdown(r0, 0x1) 03:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='eql\x00', 0x10) 03:34:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x10) close(0xffffffffffffffff) 03:34:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x2]}, 0x10) shutdown(r0, 0x1) 03:34:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:34:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}], 0x10) close(0xffffffffffffffff) 03:34:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x800000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x10) close(0xffffffffffffffff) 03:34:23 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) rt_sigtimedwait(&(0x7f0000000100)={0x5}, &(0x7f0000000140), &(0x7f0000000180)={0x77359400}, 0x8) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x7, 0x1, 0x8, 0xb08, 0x9, 0x7, 0x80, 0x1, 0x2, 0x20, 0x5, 0x1}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x4000000]}, 0x10) shutdown(r0, 0x1) 03:34:23 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:23 executing program 1: fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(0xffffffffffffffff) 03:34:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x9000000]}, 0x10) shutdown(r0, 0x1) 03:34:23 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffd8e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}], 0x10) close(0xffffffffffffffff) 03:34:24 executing program 1: fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(0xffffffffffffffff) 03:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x132600]}, 0x10) shutdown(r0, 0x1) 03:34:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:24 executing program 1: fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(0xffffffffffffffff) 03:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_pts(r0, 0x804) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x400000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000180)={r3, 0x20}) uname(&(0x7f0000000240)=""/187) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000300)={0x0, 0x100000001, 0x200000, 0x0, 0x0, 0x100, 0x7}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0xb22, 0x7fff}, {0x4, 0x2}, 0x1, 0x2, 0x2}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x1b, 0x1f, 0x0, 0xd, 0x9, 0xffff, 0x2, 0x131, 0x1}}) 03:34:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x4002]}, 0x10) shutdown(r0, 0x1) 03:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x10) close(0xffffffffffffffff) 03:34:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/218) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TIOCCBRK(r0, 0x5428) 03:34:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488d") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}], 0x10) close(0xffffffffffffffff) 03:34:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xff0f]}, 0x10) shutdown(r0, 0x1) 03:34:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488d") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x55053080]}, 0x10) shutdown(r0, 0x1) 03:34:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x100) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xff}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xc4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r2, 0x80000, r3}) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000000)) 03:34:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488d") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x3b4d566000000000]}, 0x10) shutdown(r0, 0x1) 03:34:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}], 0x10) close(0xffffffffffffffff) 03:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x5000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) clock_settime(0x3, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x80300e3300000000]}, 0x10) shutdown(r0, 0x1) 03:34:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}], 0x10) close(0xffffffffffffffff) [ 492.746642] audit: type=1804 audit(2000000066.860:38): pid=20278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir156805454/syzkaller.thERli/318/file0" dev="sda1" ino=17122 res=1 03:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}], 0x10) close(0xffffffffffffffff) 03:34:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x54550100]}, 0x10) shutdown(r0, 0x1) 03:34:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:27 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}], 0x10) close(0xffffffffffffffff) 03:34:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x330e3080]}, 0x10) shutdown(r0, 0x1) 03:34:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}], 0x10) close(0xffffffffffffffff) 03:34:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x80300bd300000000]}, 0x10) shutdown(r0, 0x1) 03:34:28 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5412, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) 03:34:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}], 0x10) close(0xffffffffffffffff) 03:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r3 = eventfd2(0x100000000000000, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xfeffffff]}, 0x10) shutdown(r0, 0x1) 03:34:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:28 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x20000050) close(0xffffffffffffffff) 03:34:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x218]}, 0x10) shutdown(r0, 0x1) 03:34:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000000)) close(r0) close(r1) 03:34:29 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x40000, 0xfff, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x7}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/icmp6\x00') r4 = request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='net/icmp6\x00', 0xffffffffffffffff) r5 = request_key(&(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)=']\x00', 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)={'syz', 0x2}, r5) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000280)={0x5, 0xe675, 0x4, 0x10001, 0xf11}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$cgroup_type(r3, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000200)) 03:34:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x7) close(0xffffffffffffffff) 03:34:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000000)) close(r0) close(r1) 03:34:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xe]}, 0x10) shutdown(r0, 0x1) 03:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x4002, &(0x7f0000000080), 0x1, r2, 0x9}) 03:34:29 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000000)) close(r0) close(r1) 03:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:34:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:34:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:34:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x0, r3, 0x9}) 03:34:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x400) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0x6, 0xfff, 0x5, 0xf0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000340)) r3 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000140)={{0x0, 0x211}, 'port0\x00', 0x8, 0x1, 0x71, 0x938, 0x200000000, 0x8000, 0x2, 0x0, 0x1, 0x9}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000380)=0xffffffff00000001, &(0x7f00000003c0)=0x2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000740)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0x6}, 0x4}}, 0x8000, 0x7, 0x4, 0x4, 0x5}, &(0x7f0000000040)=0x98) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000440)="25d34c8dfc4d22295020d09d7ede55f4534f05b2295a5c707b3e184c1f025bf84be213f0daee8b5dbcf5d66c6d7767bfc90ba6db7c7df042828185f20f9c9ea4bedf2f28a5bb3a46a3e2180d488f73ed8b9a0c70f8b6ec59aa1a55fdfdc5ff36bf2a25cfa40e74b9f2a180f57c7b3f27f478096165f5f27d4486278fb43c8dc2ba0acd9aa209d8c7fec59f7ef3ca7caced2e136e33fd6cbdae574dfe267ca906abcd919ec7e30c7252dbd1195b583af8494de83d98a3559cca8f6f8e658ea64232402e44c28fa9d64a0ed278b35e8145d94943034d", 0xd5}, {&(0x7f0000000540)="76f88e1adbb7e9a3db68f3454e8e6adb5fb5b2b9a4449f811ab8a8d67ec8a3669cc03adba43ccc33eda9d28a7d19ae261d556f1a455018d96f9a56f119997ceffc803b759b1ffc6ae5fd74e87161fbfb3b85c88652012d7d9df9a98733698264b732e9111db26a97d1", 0x69}, {&(0x7f00000005c0)="1172f24dda8d9f3d340cbde0b882c1d59a59fda9edce6b021cbee5caa7430cc65971a6e199cab61a15903081dbb75f64c97f47742dd3794088f3a085571078b08971f90cc36caf7e3c211183b2bd3d602033466861915c5e05a0c1ac453e5413c491e311a7e628e7d273cd3181ae1aab2adcde785b4503191da71b0fd86ddb28e90bdb8aa2829f3b2b3aa6ef1e4a65b6eec8f8794cb0d23ac127967d4071e19918ab90a5dc12e09b2f2656a5220b755d7df55e85c6adbeed90de1afe772bdcc5bb2aa56ddee1de9f4f2343ea95e39f521324061b45447f8a4a952e5f5db4d1d6ad5e7d0015c987be1b187207a9e466ac14f546cb37d5", 0xf6}, {&(0x7f00000006c0)="8ec753412f4f7385f4c6e745e48b5dd17439c14ecec69ff5cc36e1bd0cf41c0618e2e3", 0x23}], 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0xffffffffffff9930}, &(0x7f00000002c0)=0x8) 03:34:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x1, 0x9, 0x1}}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000001c0)={0xffffffff, 0x1, 0xb0, 0x2, 0x10, 0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000180)="5e5c40ec62646576656d3000", 0xc, 0x2) 03:34:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, 0xffffffffffffffff, 0x9}) 03:34:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 03:34:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x5455010000000000]}, 0x10) shutdown(r0, 0x1) 03:34:30 executing program 2: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) 03:34:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3}) 03:34:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 03:34:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x8000000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3}) 03:34:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x8}, 0x40) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=@hopopts={0x36, 0x1b, [], [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x9}, @generic={0x100000001, 0x6f, "442df566762ac32762e2bcfb512a17bc33e8ccdb08a8a0b71fbd6ec8f4f9a3e4637505bb4d709c2ab53a7fd0a681e98f1f04c310e10cea05cd3c295b63a880bf2f9a9da7276b215943b9a4f354362c26396d1ef2527d0af729579fab7fce0533070adcdb98378e9667971db11ea6e9"}, @enc_lim={0x4, 0x1, 0x4b}, @calipso={0x7, 0x50, {0x4, 0x12, 0x0, 0x8, [0x2, 0x80, 0x1, 0x72, 0xffffffffffffff2c, 0x30, 0x8, 0x9, 0x28c2]}}]}, 0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x5, 0x57c, 0x5, 0x6f3, 0x7ff, 0x0, 0x100000001, 0x5, 0x9ef, 0x8, 0x1, 0x1}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x2, &(0x7f00000001c0)=[{}, {}]}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000003c0)={0x401, 0x1, 0x0, 0xd0b, 0x54, 0x5, 0x4, 0xffffffffffffffff, 0x9, 0x1}) r3 = getpid() ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000480)=@get={0x1, &(0x7f0000000400)=""/105, 0x1}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r3) 03:34:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x42, 0x0) close(0xffffffffffffffff) 03:34:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 03:34:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3}) 03:34:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x80300e33]}, 0x10) shutdown(r0, 0x1) 03:34:31 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x798eafe7, 0x8001}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={r2, 0x3}, &(0x7f0000000340)=0x8) splice(r1, &(0x7f0000000200), r1, &(0x7f0000000240)=0x8, 0x7fff, 0xb) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x100}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x3e}, &(0x7f00000001c0)=0x8) write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x6c, 0x40, 0x14000000000, 0x100, 0x8001, 0x1, "c4e9f024636e7516f977687d61abbd5b8754f4273c990f82b4621d880c609e2976a3ea54c981b1d4d8b5362ece639bde27176d2d69eaa3ce6424e749988fae38208d1586c7a19b523cb215886569e984407f10c27ffe485acec1a9d0d5478fa835212b33fb21e2d00f56f71d"}, 0x184) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r0) 03:34:31 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(0xffffffffffffffff) 03:34:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3f00000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:31 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) close(0xffffffffffffffff) 03:34:31 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:fonts_cache_t:s0\x00', 0x23, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:32 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8030095400000000]}, 0x10) shutdown(r0, 0x1) 03:34:32 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0xfffffffffffffecf) close(0xffffffffffffffff) 03:34:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x400000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(0xffffffffffffffff) 03:34:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/137) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:32 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:32 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80550000]}, 0x10) shutdown(r0, 0x1) 03:34:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1271, 0x5ae, 0x6, 0x7b47, 0x6, 0x4, 0x8, 0x8, 0x1, 0x86, 0x3, 0x2}) r1 = semget(0x0, 0x6, 0x630) semop(r1, &(0x7f0000000280)=[{0x4, 0x80}, {0x3, 0x9, 0x1800}, {0x0, 0xff, 0x1000}, {0x4, 0x942, 0x1800}, {0x3, 0xb9c, 0x800}, {0x3, 0x400, 0x1000}, {0x0, 0x3, 0x1800}, {0x0, 0x9, 0x1000}], 0x8) r2 = syz_open_pts(r0, 0x40) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r3, &(0x7f0000000180)=""/253, 0xfd) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:33 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200400, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x4, 0x101, 0x2, 0x0, 0x0, [], [], [], 0x5, 0x309c}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:33 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:33 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:34:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) shutdown(r0, 0x1) 03:34:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x940) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8, 0x4, [0x8, 0x6, 0x7fff, 0xfffffffffffffffc]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r3, 0x6}, &(0x7f00000001c0)=0x8) 03:34:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@local, @remote, @local, 0x5, 0xf1, 0x8, 0x500, 0x4, 0x100000, r2}) 03:34:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(0xffffffffffffffff) 03:34:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8055000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x14, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:33 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 03:34:33 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) socket$inet(0x2, 0x805, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) 03:34:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x50000]}, 0x10) shutdown(r0, 0x1) 03:34:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) close(0xffffffffffffffff) 03:34:33 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x800, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00000001c0)=""/245, &(0x7f00000002c0)=0xf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x111002) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) fcntl$setlease(r2, 0x400, 0x1) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x40020000]}, 0x10) shutdown(r0, 0x1) 03:34:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc]}, 0x10) shutdown(r0, 0x1) 03:34:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='team0\x00') close(0xffffffffffffffff) 03:34:34 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000004c0)) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:34:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], 0x10) close(0xffffffffffffffff) 03:34:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x90faffff]}, 0x10) shutdown(r0, 0x1) 03:34:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000180)={0x1, 0x7fff, 0x2, 0x1, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x5, @empty, 0x2}, {0xa, 0x4e21, 0xcd, @local, 0x7}, 0x7, [0x8, 0x1, 0x8, 0x1b1, 0x2, 0x70000000, 0x0, 0x6]}, 0x5c) close(0xffffffffffffffff) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xfffffffffffffff9) ioctl$TIOCSBRK(r1, 0x5427) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="9804b0fc0086e32e43e68e4879294ee6a11ab8e4ed058dc164b615722704c1a00aec82a3e297f9fdd02dc149dfe81ce618bbe959b489c895800384f6e029251307495fee96765c36e14f4c930ac21862c0c7c404fe97af", 0x57, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="75706461746520656372797074667320757365723a23776c616e306370757365742d76626f786e6574316d643573756d5d106e6f64657640656d317b28706f7369785f61636c5f61636365737300"], 0x4e, r3) 03:34:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4000000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) close(0xffffffffffffffff) 03:34:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:35 executing program 4: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740)) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 03:34:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc]}, 0x10) shutdown(r0, 0x1) 03:34:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x7fff}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x5}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x0, @remote, 0x800}, @in6={0xa, 0x4e22, 0xffffffffffff8001, @local, 0xa70}], 0xd0) close(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x3}, @in6={0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @rand_addr=0x7}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x4c00, @mcast1, 0xc16}, @in={0x2, 0x4e21}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x10001, @empty, 0x1}, @in={0x2, 0x4e24, @rand_addr}], 0xd0) 03:34:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x13260000000000]}, 0x10) shutdown(r0, 0x1) 03:34:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x40000000]}, 0x10) shutdown(r0, 0x1) 03:34:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:35 executing program 4: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:35 executing program 1 (fault-call:2 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x420081) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffffac23d3ea, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x12002f7d, @mcast2, 0x9}}}, 0x84) 03:34:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3f000000]}, 0x10) shutdown(r0, 0x1) [ 501.456497] FAULT_INJECTION: forcing a failure. [ 501.456497] name failslab, interval 1, probability 0, space 0, times 0 [ 501.487643] CPU: 0 PID: 20772 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #71 [ 501.494988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.504355] Call Trace: [ 501.506990] dump_stack+0x1c4/0x2b6 [ 501.510647] ? dump_stack_print_info.cold.1+0x20/0x20 [ 501.515879] ? __lock_acquire+0x7ec/0x4ec0 [ 501.520135] ? print_usage_bug+0xc0/0xc0 [ 501.524214] ? rcu_bh_qs+0xc0/0xc0 [ 501.527780] should_fail.cold.4+0xa/0x17 [ 501.531865] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 501.536989] ? mark_held_locks+0x130/0x130 [ 501.541241] ? graph_lock+0x170/0x170 [ 501.545059] ? __lock_acquire+0x7ec/0x4ec0 [ 501.549303] ? dput.part.26+0x26d/0x790 [ 501.553303] ? find_held_lock+0x36/0x1c0 [ 501.557402] ? ___might_sleep+0x1ed/0x300 [ 501.561576] ? arch_local_save_flags+0x40/0x40 [ 501.566179] ? _kstrtoull+0x188/0x250 [ 501.570004] __should_failslab+0x124/0x180 [ 501.574255] should_failslab+0x9/0x14 [ 501.578072] kmem_cache_alloc+0x2be/0x730 [ 501.582310] locks_alloc_lock+0x8e/0x270 [ 501.586387] ? locks_check_ctx_file_list+0x120/0x120 [ 501.591507] ? __fget+0x4aa/0x740 [ 501.594971] ? lock_downgrade+0x900/0x900 [ 501.594990] ? check_preemption_disabled+0x48/0x280 [ 501.595016] fcntl_setlk+0xc8/0xfb0 [ 501.607801] ? fcntl_getlk+0x520/0x520 [ 501.611716] ? lock_downgrade+0x900/0x900 [ 501.615887] ? lock_release+0x970/0x970 [ 501.619881] ? arch_local_save_flags+0x40/0x40 [ 501.624505] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 501.630057] ? _copy_from_user+0xdf/0x150 [ 501.634228] do_fcntl+0xa6f/0x1500 [ 501.637781] ? f_getown+0xc0/0xc0 [ 501.641251] ? smk_curacc+0x7f/0xa0 [ 501.644912] ? smack_file_fcntl+0x259/0x4d0 [ 501.649262] ? smack_unix_stream_connect+0x4e0/0x4e0 [ 501.654393] ? do_syscall_64+0x9a/0x820 [ 501.658395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 501.663956] ? security_file_fcntl+0x94/0xc0 [ 501.668391] __x64_sys_fcntl+0x177/0x1f0 [ 501.672469] do_syscall_64+0x1b9/0x820 [ 501.676370] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 501.681753] ? syscall_return_slowpath+0x5e0/0x5e0 [ 501.686708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 501.691566] ? trace_hardirqs_on_caller+0x310/0x310 [ 501.696602] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 501.701641] ? prepare_exit_to_usermode+0x291/0x3b0 03:34:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc00000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) [ 501.706883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 501.711751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 501.716952] RIP: 0033:0x457569 [ 501.720157] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.739070] RSP: 002b:00007fb72e686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 501.747518] RAX: ffffffffffffffda RBX: 00007fb72e686c90 RCX: 0000000000457569 03:34:35 executing program 1 (fault-call:2 fault-nth:1): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) [ 501.747529] RDX: 0000000020000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 501.747538] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 501.747548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72e6876d4 [ 501.747556] R13: 00000000004bdcf5 R14: 00000000004cca00 R15: 0000000000000005 03:34:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:35 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:36 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x201, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mq_timedreceive(r0, &(0x7f0000000180)=""/173, 0xad, 0x8000, &(0x7f0000000240)) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x811, r1, 0xfffffffffffffffd) read(r2, &(0x7f0000000000)=""/63, 0x3f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) [ 501.911574] FAULT_INJECTION: forcing a failure. [ 501.911574] name failslab, interval 1, probability 0, space 0, times 0 [ 501.966125] CPU: 1 PID: 20789 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #71 [ 501.973468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.982832] Call Trace: [ 501.982861] dump_stack+0x1c4/0x2b6 [ 501.982887] ? dump_stack_print_info.cold.1+0x20/0x20 [ 501.982921] should_fail.cold.4+0xa/0x17 [ 501.982948] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 501.982972] ? mark_held_locks+0x130/0x130 [ 502.007754] ? graph_lock+0x170/0x170 [ 502.007783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.007802] ? check_preemption_disabled+0x48/0x280 [ 502.007817] ? check_preemption_disabled+0x48/0x280 [ 502.007839] ? find_held_lock+0x36/0x1c0 [ 502.007873] ? ___might_sleep+0x1ed/0x300 [ 502.017223] ? arch_local_save_flags+0x40/0x40 [ 502.017247] ? locks_init_lock+0x250/0x250 [ 502.017269] ? is_bpf_text_address+0xac/0x170 [ 502.017292] __should_failslab+0x124/0x180 [ 502.053036] should_failslab+0x9/0x14 [ 502.056857] kmem_cache_alloc+0x2be/0x730 [ 502.061023] ? rcu_bh_qs+0xc0/0xc0 [ 502.064580] ? rcu_bh_qs+0xc0/0xc0 [ 502.068138] ? unwind_dump+0x190/0x190 [ 502.072053] locks_alloc_lock+0x8e/0x270 [ 502.076131] ? locks_check_ctx_file_list+0x120/0x120 [ 502.081255] ? is_bpf_text_address+0xd3/0x170 [ 502.085779] ? kernel_text_address+0x79/0xf0 [ 502.090219] ? __kernel_text_address+0xd/0x40 [ 502.094733] ? unwind_get_return_address+0x61/0xa0 [ 502.099695] ? __save_stack_trace+0x8d/0xf0 [ 502.104040] posix_lock_inode+0x62b/0x26c0 [ 502.108300] ? save_stack+0xa9/0xd0 [ 502.111942] ? save_stack+0x43/0xd0 [ 502.115589] ? locks_remove_flock+0x5d0/0x5d0 [ 502.120098] ? fcntl_setlk+0xc8/0xfb0 [ 502.123920] ? do_syscall_64+0x1b9/0x820 [ 502.127998] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.133378] ? dput.part.26+0x26d/0x790 [ 502.137373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.142920] ? smack_log+0x423/0x590 [ 502.146650] ? smk_access_entry+0x310/0x310 [ 502.151004] ? smk_tskacc+0x3dd/0x520 [ 502.154828] ? smack_privileged+0xd0/0xd0 [ 502.158995] ? __lockdep_init_map+0x105/0x590 [ 502.163522] ? __lockdep_init_map+0x105/0x590 [ 502.168036] ? lockdep_init_map+0x9/0x10 [ 502.172123] vfs_lock_file+0xc3/0xe0 [ 502.175859] do_lock_file_wait.part.28+0xd0/0x260 [ 502.180725] ? vfs_lock_file+0xe0/0xe0 [ 502.184640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.190213] fcntl_setlk+0x310/0xfb0 [ 502.193949] ? fcntl_getlk+0x520/0x520 [ 502.197849] ? lock_downgrade+0x900/0x900 [ 502.202010] ? lock_release+0x970/0x970 [ 502.205997] ? arch_local_save_flags+0x40/0x40 [ 502.210622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 502.216193] ? _copy_from_user+0xdf/0x150 [ 502.220364] do_fcntl+0xa6f/0x1500 [ 502.223925] ? f_getown+0xc0/0xc0 [ 502.227397] ? smk_curacc+0x7f/0xa0 [ 502.231045] ? smack_file_fcntl+0x259/0x4d0 [ 502.235382] ? smack_unix_stream_connect+0x4e0/0x4e0 [ 502.240521] ? do_syscall_64+0x9a/0x820 [ 502.244520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.250078] ? security_file_fcntl+0x94/0xc0 [ 502.254509] __x64_sys_fcntl+0x177/0x1f0 [ 502.258597] do_syscall_64+0x1b9/0x820 [ 502.262492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 502.267862] ? syscall_return_slowpath+0x5e0/0x5e0 [ 502.272794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.277643] ? trace_hardirqs_on_caller+0x310/0x310 [ 502.282658] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 502.287687] ? prepare_exit_to_usermode+0x291/0x3b0 [ 502.292705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.297561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.302752] RIP: 0033:0x457569 [ 502.305936] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.324825] RSP: 002b:00007fb72e686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 502.332524] RAX: ffffffffffffffda RBX: 00007fb72e686c90 RCX: 0000000000457569 [ 502.339779] RDX: 0000000020000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 502.347045] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 502.354317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72e6876d4 03:34:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x40000000) [ 502.361586] R13: 00000000004bdcf5 R14: 00000000004cca00 R15: 0000000000000005 03:34:36 executing program 1 (fault-call:2 fault-nth:2): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488d") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 502.455253] FAULT_INJECTION: forcing a failure. [ 502.455253] name failslab, interval 1, probability 0, space 0, times 0 [ 502.478698] CPU: 1 PID: 20809 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #71 [ 502.486002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.495366] Call Trace: [ 502.497978] dump_stack+0x1c4/0x2b6 [ 502.501630] ? dump_stack_print_info.cold.1+0x20/0x20 [ 502.506851] ? __kernel_text_address+0xd/0x40 [ 502.511369] ? unwind_get_return_address+0x61/0xa0 [ 502.516328] should_fail.cold.4+0xa/0x17 [ 502.520418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 502.525549] ? save_stack+0xa9/0xd0 [ 502.529200] ? graph_lock+0x170/0x170 [ 502.533009] ? kasan_slab_alloc+0x12/0x20 [ 502.537165] ? kmem_cache_alloc+0x12e/0x730 [ 502.541506] ? locks_alloc_lock+0x8e/0x270 [ 502.545752] ? posix_lock_inode+0x62b/0x26c0 [ 502.550168] ? vfs_lock_file+0xc3/0xe0 03:34:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0xe2) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000280)={0x5, @remote}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r3 = syz_open_pts(r0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x4202, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000200)=0x9) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x7, 0x5, 0xfff}) r5 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x401, 0x400) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x259) close(r5) fgetxattr(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="00008b7c001ba016c013a71e06387b2a8fab7d1b96daa158e5cd80518ce9dcede07ea3e431ba5432220b883186188253b8111d32d8b335460a52d750b055bf809eb180ad60bcabf60b4ce94e507472ad2840acf32716f69c17f5e9c01b5b482012a4c555c9adbadbb4255401d6e142a9fa8f72217e387850fae46e7b35c4e655fb30fad31d4d275c58800f5894f5f205c98b144eec7702f2e2ee48f24eedc5b9ed4bfe7ec0b736c7c142e9aa3745e0d7076fb1f74fe0c5f7fa3266"], &(0x7f0000000300)=""/165, 0xa5) [ 502.554075] ? do_lock_file_wait.part.28+0xd0/0x260 [ 502.559107] ? do_fcntl+0xa6f/0x1500 [ 502.562834] ? __x64_sys_fcntl+0x177/0x1f0 [ 502.567085] ? do_syscall_64+0x1b9/0x820 [ 502.571159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.576548] ? check_preemption_disabled+0x48/0x280 [ 502.581586] ? find_held_lock+0x36/0x1c0 [ 502.585694] ? ___might_sleep+0x1ed/0x300 [ 502.589864] ? arch_local_save_flags+0x40/0x40 [ 502.594478] __should_failslab+0x124/0x180 [ 502.598730] should_failslab+0x9/0x14 03:34:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) r4 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r2, r3, r4}, 0xc) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000000)) [ 502.602556] kmem_cache_alloc+0x2be/0x730 [ 502.606717] ? rcu_bh_qs+0xc0/0xc0 [ 502.610273] ? rcu_bh_qs+0xc0/0xc0 [ 502.613822] ? unwind_dump+0x190/0x190 [ 502.617739] locks_alloc_lock+0x8e/0x270 [ 502.621825] ? locks_check_ctx_file_list+0x120/0x120 [ 502.626945] ? is_bpf_text_address+0xd3/0x170 [ 502.631459] ? kernel_text_address+0x79/0xf0 [ 502.635883] ? __kernel_text_address+0xd/0x40 [ 502.640397] ? unwind_get_return_address+0x61/0xa0 [ 502.645348] ? __save_stack_trace+0x8d/0xf0 [ 502.649698] posix_lock_inode+0x637/0x26c0 [ 502.653964] ? save_stack+0x43/0xd0 [ 502.657611] ? locks_remove_flock+0x5d0/0x5d0 [ 502.662123] ? fcntl_setlk+0xc8/0xfb0 [ 502.665944] ? do_syscall_64+0x1b9/0x820 [ 502.670183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.675565] ? dput.part.26+0x26d/0x790 [ 502.679557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.685110] ? smack_log+0x423/0x590 [ 502.688843] ? smk_access_entry+0x310/0x310 [ 502.693242] ? smk_tskacc+0x3dd/0x520 [ 502.697062] ? smack_privileged+0xd0/0xd0 [ 502.701223] ? __lockdep_init_map+0x105/0x590 [ 502.705738] ? __lockdep_init_map+0x105/0x590 [ 502.710250] ? lockdep_init_map+0x9/0x10 [ 502.714336] vfs_lock_file+0xc3/0xe0 [ 502.718086] do_lock_file_wait.part.28+0xd0/0x260 [ 502.722948] ? vfs_lock_file+0xe0/0xe0 [ 502.726855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.732427] fcntl_setlk+0x310/0xfb0 [ 502.736165] ? fcntl_getlk+0x520/0x520 [ 502.740079] ? lock_downgrade+0x900/0x900 [ 502.744250] ? lock_release+0x970/0x970 [ 502.748240] ? arch_local_save_flags+0x40/0x40 [ 502.752861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 502.758419] ? _copy_from_user+0xdf/0x150 [ 502.762586] do_fcntl+0xa6f/0x1500 [ 502.766145] ? f_getown+0xc0/0xc0 [ 502.769632] ? smk_curacc+0x7f/0xa0 [ 502.773288] ? smack_file_fcntl+0x259/0x4d0 [ 502.777625] ? smack_unix_stream_connect+0x4e0/0x4e0 [ 502.782762] ? do_syscall_64+0x9a/0x820 [ 502.786765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.792317] ? security_file_fcntl+0x94/0xc0 [ 502.796740] __x64_sys_fcntl+0x177/0x1f0 [ 502.801303] do_syscall_64+0x1b9/0x820 [ 502.805186] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 502.810542] ? syscall_return_slowpath+0x5e0/0x5e0 [ 502.815477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.820311] ? trace_hardirqs_on_caller+0x310/0x310 [ 502.825318] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 502.830337] ? prepare_exit_to_usermode+0x291/0x3b0 [ 502.835347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.840199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.845388] RIP: 0033:0x457569 [ 502.848624] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.867544] RSP: 002b:00007fb72e686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 502.875274] RAX: ffffffffffffffda RBX: 00007fb72e686c90 RCX: 0000000000457569 [ 502.882534] RDX: 0000000020000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 502.889803] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 502.897078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72e6876d4 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300156]}, 0x10) shutdown(r0, 0x1) 03:34:37 executing program 4: io_setup(0x0, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom(r0, &(0x7f0000000080)=""/69, 0x45, 0x2000, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) [ 502.904358] R13: 00000000004bdcf5 R14: 00000000004cca00 R15: 0000000000000005 03:34:37 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 03:34:37 executing program 1 (fault-call:2 fault-nth:3): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488d") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:37 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000002000000000a0000000000000000000000000000000000000000000007000000002000000000000000000000008000000000"]) r1 = getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x8}, 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000500)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0xfffffffffffffff7) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000000)=r1) write$P9_RXATTRCREATE(r8, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r8, &(0x7f0000000040)={0x7}, 0x7) sendfile(r5, r8, &(0x7f0000d83ff8), 0x800000000024) r9 = creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x33, 0xc3, &(0x7f0000000000)="f882d4fab97627cf83267e5ce036e76f1f729be74da05fb9592f73586487cc849cb54784a3de8db66e2412e6850799e0c540a2", &(0x7f0000000180)=""/195}, 0x28) 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x60000000]}, 0x10) shutdown(r0, 0x1) [ 503.186168] FAULT_INJECTION: forcing a failure. [ 503.186168] name failslab, interval 1, probability 0, space 0, times 0 [ 503.217696] CPU: 0 PID: 20845 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #71 [ 503.225053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.234444] Call Trace: [ 503.237055] dump_stack+0x1c4/0x2b6 [ 503.240720] ? dump_stack_print_info.cold.1+0x20/0x20 [ 503.245944] should_fail.cold.4+0xa/0x17 [ 503.250028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 503.255148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.260796] ? __perf_event_task_sched_out+0x337/0x1ab0 [ 503.266191] ? graph_lock+0x170/0x170 [ 503.270012] ? print_usage_bug+0xc0/0xc0 [ 503.274092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.279643] ? check_preemption_disabled+0x48/0x280 [ 503.284708] ? check_preemption_disabled+0x48/0x280 [ 503.289750] ? find_held_lock+0x36/0x1c0 [ 503.293855] ? ___might_sleep+0x1ed/0x300 [ 503.298021] ? arch_local_save_flags+0x40/0x40 [ 503.302618] ? locks_init_lock+0x250/0x250 [ 503.306884] __should_failslab+0x124/0x180 [ 503.311135] should_failslab+0x9/0x14 [ 503.314970] kmem_cache_alloc+0x2be/0x730 [ 503.319139] ? graph_lock+0x170/0x170 [ 503.322963] locks_alloc_lock+0x8e/0x270 [ 503.327033] ? locks_check_ctx_file_list+0x120/0x120 [ 503.332146] ? finish_task_switch+0x1b4/0x910 [ 503.336655] ? __switch_to_asm+0x34/0x70 [ 503.340758] ? find_held_lock+0x36/0x1c0 [ 503.344834] posix_lock_inode+0x62b/0x26c0 [ 503.349080] ? prepare_to_wait_event+0x39f/0xa10 [ 503.353856] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 503.358969] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 503.364089] ? lockdep_hardirqs_on+0x421/0x5c0 [ 503.368702] ? trace_hardirqs_on+0xbd/0x310 [ 503.373049] ? locks_remove_flock+0x5d0/0x5d0 [ 503.377557] ? find_held_lock+0x36/0x1c0 [ 503.381644] ? finish_wait+0x25d/0x430 [ 503.385564] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 503.390696] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 503.395819] ? lockdep_hardirqs_on+0x421/0x5c0 [ 503.400420] ? trace_hardirqs_on+0xbd/0x310 [ 503.404762] ? kasan_check_read+0x11/0x20 [ 503.408925] ? finish_wait+0x25d/0x430 [ 503.412829] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 503.418301] ? kasan_check_write+0x14/0x20 [ 503.422556] ? do_raw_spin_lock+0xc1/0x230 [ 503.426817] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 503.431941] ? finish_wait+0x25d/0x430 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5c]}, 0x10) shutdown(r0, 0x1) 03:34:37 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) [ 503.435854] ? remove_wait_queue+0x360/0x360 [ 503.440284] ? replenish_dl_entity.cold.55+0x36/0x36 [ 503.445412] vfs_lock_file+0xc3/0xe0 [ 503.449150] do_lock_file_wait.part.28+0xd0/0x260 [ 503.454017] ? vfs_lock_file+0xe0/0xe0 [ 503.457926] ? finish_wait+0x430/0x430 [ 503.461836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.467398] fcntl_setlk+0x310/0xfb0 [ 503.471134] ? fcntl_getlk+0x520/0x520 [ 503.475040] ? lock_downgrade+0x900/0x900 [ 503.479208] ? lock_release+0x970/0x970 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3e8]}, 0x10) shutdown(r0, 0x1) [ 503.483197] ? arch_local_save_flags+0x40/0x40 [ 503.487819] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 503.493393] ? _copy_from_user+0xdf/0x150 [ 503.497561] do_fcntl+0xa6f/0x1500 [ 503.501119] ? f_getown+0xc0/0xc0 [ 503.504584] ? smk_curacc+0x7f/0xa0 [ 503.508227] ? smack_file_fcntl+0x259/0x4d0 [ 503.508246] ? smack_unix_stream_connect+0x4e0/0x4e0 [ 503.508272] ? do_syscall_64+0x9a/0x820 [ 503.508294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.508311] ? security_file_fcntl+0x94/0xc0 [ 503.508331] __x64_sys_fcntl+0x177/0x1f0 [ 503.517771] do_syscall_64+0x1b9/0x820 [ 503.517790] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 503.517810] ? syscall_return_slowpath+0x5e0/0x5e0 [ 503.517826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.517846] ? trace_hardirqs_on_caller+0x310/0x310 [ 503.517864] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 503.517882] ? prepare_exit_to_usermode+0x291/0x3b0 [ 503.517905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.517928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.517946] RIP: 0033:0x457569 [ 503.583112] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.602027] RSP: 002b:00007fb72e686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 503.609754] RAX: ffffffffffffffda RBX: 00007fb72e686c90 RCX: 0000000000457569 [ 503.617038] RDX: 0000000020000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 503.624319] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 503.631601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72e6876d4 [ 503.638883] R13: 00000000004bdcf5 R14: 00000000004cca00 R15: 0000000000000005 [ 503.655426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.700052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/29) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x24) 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1f4]}, 0x10) shutdown(r0, 0x1) 03:34:37 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) 03:34:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488d") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:37 executing program 1 (fault-call:2 fault-nth:4): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) [ 503.798595] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 503.816269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.883143] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 503.906796] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 503.917737] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 504.017156] FAULT_INJECTION: forcing a failure. [ 504.017156] name failslab, interval 1, probability 0, space 0, times 0 [ 504.036848] CPU: 1 PID: 20884 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #71 [ 504.044147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.053508] Call Trace: [ 504.056132] dump_stack+0x1c4/0x2b6 [ 504.059788] ? dump_stack_print_info.cold.1+0x20/0x20 [ 504.064997] ? __kernel_text_address+0xd/0x40 [ 504.069514] ? unwind_get_return_address+0x61/0xa0 [ 504.074463] should_fail.cold.4+0xa/0x17 [ 504.078541] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 504.083677] ? save_stack+0xa9/0xd0 [ 504.087317] ? graph_lock+0x170/0x170 [ 504.091128] ? kasan_slab_alloc+0x12/0x20 [ 504.095286] ? kmem_cache_alloc+0x12e/0x730 [ 504.099617] ? locks_alloc_lock+0x8e/0x270 [ 504.103858] ? posix_lock_inode+0x62b/0x26c0 [ 504.108272] ? vfs_lock_file+0xc3/0xe0 [ 504.112166] ? do_lock_file_wait.part.28+0xd0/0x260 [ 504.117214] ? do_fcntl+0xa6f/0x1500 [ 504.120937] ? __x64_sys_fcntl+0x177/0x1f0 [ 504.125191] ? do_syscall_64+0x1b9/0x820 [ 504.129315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.134707] ? check_preemption_disabled+0x48/0x280 [ 504.139744] ? find_held_lock+0x36/0x1c0 [ 504.143835] ? ___might_sleep+0x1ed/0x300 [ 504.147994] ? arch_local_save_flags+0x40/0x40 [ 504.152601] __should_failslab+0x124/0x180 [ 504.156852] should_failslab+0x9/0x14 [ 504.160674] kmem_cache_alloc+0x2be/0x730 [ 504.164844] locks_alloc_lock+0x8e/0x270 [ 504.168917] ? locks_check_ctx_file_list+0x120/0x120 [ 504.174027] ? finish_task_switch+0x1b4/0x910 [ 504.178535] ? __switch_to_asm+0x34/0x70 [ 504.182621] ? find_held_lock+0x36/0x1c0 [ 504.186709] posix_lock_inode+0x637/0x26c0 [ 504.190961] ? prepare_to_wait_event+0x39f/0xa10 [ 504.195776] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 504.200895] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 504.206017] ? trace_hardirqs_on+0xbd/0x310 [ 504.210360] ? locks_remove_flock+0x5d0/0x5d0 [ 504.214903] ? find_held_lock+0x36/0x1c0 [ 504.219008] ? finish_wait+0x25d/0x430 [ 504.222919] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 504.228094] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 504.233258] ? lockdep_hardirqs_on+0x421/0x5c0 [ 504.237915] ? trace_hardirqs_on+0xbd/0x310 [ 504.242297] ? kasan_check_read+0x11/0x20 [ 504.246464] ? finish_wait+0x25d/0x430 [ 504.250426] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 504.256034] ? kasan_check_write+0x14/0x20 [ 504.260359] ? do_raw_spin_lock+0xc1/0x230 [ 504.264655] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 504.269793] ? finish_wait+0x25d/0x430 [ 504.273782] ? remove_wait_queue+0x360/0x360 [ 504.278243] ? replenish_dl_entity.cold.55+0x36/0x36 [ 504.283371] vfs_lock_file+0xc3/0xe0 [ 504.287114] do_lock_file_wait.part.28+0xd0/0x260 [ 504.291989] ? vfs_lock_file+0xe0/0xe0 [ 504.295899] ? finish_wait+0x430/0x430 [ 504.299806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.305369] fcntl_setlk+0x310/0xfb0 [ 504.309113] ? fcntl_getlk+0x520/0x520 [ 504.313020] ? lock_downgrade+0x900/0x900 [ 504.317327] ? lock_release+0x970/0x970 [ 504.321319] ? arch_local_save_flags+0x40/0x40 [ 504.325965] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 504.331583] ? _copy_from_user+0xdf/0x150 [ 504.335795] do_fcntl+0xa6f/0x1500 [ 504.339354] ? f_getown+0xc0/0xc0 [ 504.342823] ? smk_curacc+0x7f/0xa0 [ 504.346471] ? smack_file_fcntl+0x259/0x4d0 [ 504.350821] ? smack_unix_stream_connect+0x4e0/0x4e0 [ 504.355950] ? do_syscall_64+0x9a/0x820 [ 504.359949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.365499] ? security_file_fcntl+0x94/0xc0 [ 504.369940] __x64_sys_fcntl+0x177/0x1f0 [ 504.374032] do_syscall_64+0x1b9/0x820 [ 504.377938] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 504.383338] ? syscall_return_slowpath+0x5e0/0x5e0 [ 504.388298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.393167] ? trace_hardirqs_on_caller+0x310/0x310 [ 504.398219] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 504.403311] ? prepare_exit_to_usermode+0x291/0x3b0 [ 504.408385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.413260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.418469] RIP: 0033:0x457569 [ 504.421691] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.440644] RSP: 002b:00007fb72e686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 504.448445] RAX: ffffffffffffffda RBX: 00007fb72e686c90 RCX: 0000000000457569 [ 504.455782] RDX: 0000000020000000 RSI: 0000000000000007 RDI: 0000000000000003 03:34:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, &(0x7f0000000b00)) 03:34:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x7]}, 0x10) shutdown(r0, 0x1) [ 504.463320] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 504.470681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72e6876d4 [ 504.478031] R13: 00000000004bdcf5 R14: 00000000004cca00 R15: 0000000000000005 03:34:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d76") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:38 executing program 1 (fault-call:2 fault-nth:5): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x3e57, 0x80}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) 03:34:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 03:34:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x100000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x400000ffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f00000000c0), 0x268) close(0xffffffffffffffff) 03:34:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d76") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:34:39 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 03:34:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x15554]}, 0x10) shutdown(r0, 0x1) 03:34:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000180)=""/4096, 0x1000}, &(0x7f0000000000), 0x2}, 0x20) 03:34:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x4, &(0x7f0000000000)) close(r0) close(r1) 03:34:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x200000000000001e, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) ioctl$RTC_WIE_ON(r1, 0x700f) 03:34:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d76") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:39 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000002000000000a0000000000000000000000000000000000000000000007000000002000000000000000000000008000000000"]) r1 = getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x8}, 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000500)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0xfffffffffffffff7) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000000)=r1) write$P9_RXATTRCREATE(r8, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r8, &(0x7f0000000040)={0x7}, 0x7) sendfile(r5, r8, &(0x7f0000d83ff8), 0x800000000024) r9 = creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x33, 0xc3, &(0x7f0000000000)="f882d4fab97627cf83267e5ce036e76f1f729be74da05fb9592f73586487cc849cb54784a3de8db66e2412e6850799e0c540a2", &(0x7f0000000180)=""/195}, 0x28) 03:34:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8055]}, 0x10) shutdown(r0, 0x1) [ 505.422972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.429807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.446822] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 505.454173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.461664] IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready [ 505.470791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.478119] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 505.484207] 8021q: adding VLAN 0 to HW filter on device bond3 03:34:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffff, 0x280002) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0)="ae54ac3aedaf557cc38239ba2863821e228024d45ae5002f6905a46362878a3bf0b7d50c3eb189d89c879d36efa7e16865aff531015be860a6", &(0x7f0000000140)=""/54}, 0x18) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x9, &(0x7f0000000000)) close(r0) close(r1) 03:34:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x330e3080]}, 0x10) shutdown(r0, 0x1) 03:34:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d7660") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:39 executing program 4 (fault-call:2 fault-nth:0): io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 505.831416] FAULT_INJECTION: forcing a failure. [ 505.831416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.870128] CPU: 0 PID: 20979 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 03:34:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040), 0x0) close(0xffffffffffffffff) 03:34:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x409, &(0x7f0000000000)) close(r0) close(r1) [ 505.877460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.886910] Call Trace: [ 505.889529] dump_stack+0x1c4/0x2b6 [ 505.893174] ? dump_stack_print_info.cold.1+0x20/0x20 [ 505.898380] ? mark_held_locks+0x130/0x130 [ 505.902636] should_fail.cold.4+0xa/0x17 [ 505.902658] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 505.911838] ? graph_lock+0x170/0x170 [ 505.915654] ? mark_held_locks+0xc7/0x130 [ 505.919839] ? graph_lock+0x170/0x170 [ 505.923659] ? check_noncircular+0x20/0x20 [ 505.927938] ? __lock_is_held+0xb5/0x140 [ 505.932030] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 505.937329] ? ___might_sleep+0x1ed/0x300 [ 505.941495] ? lock_release+0x970/0x970 [ 505.945494] ? arch_local_save_flags+0x40/0x40 [ 505.945543] ? __might_sleep+0x95/0x190 [ 505.945573] __alloc_pages_nodemask+0x34b/0xde0 [ 505.958787] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 505.963852] ? mark_held_locks+0x130/0x130 [ 505.968113] ? print_usage_bug+0xc0/0xc0 [ 505.972198] ? ima_get_action+0x7e/0xa0 [ 505.976199] ? print_usage_bug+0xc0/0xc0 [ 505.980339] ? __lock_acquire+0x7ec/0x4ec0 [ 505.984600] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 505.990155] alloc_pages_current+0x10c/0x210 [ 505.990250] pte_alloc_one+0x1b/0x1a0 [ 505.990279] __handle_mm_fault+0x43f4/0x53e0 [ 505.990293] ? print_usage_bug+0xc0/0xc0 [ 505.990317] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 505.990333] ? graph_lock+0x170/0x170 [ 505.990347] ? print_usage_bug+0xc0/0xc0 [ 505.990366] ? mark_held_locks+0x130/0x130 [ 505.990384] ? graph_lock+0x170/0x170 [ 505.990397] ? graph_lock+0x170/0x170 [ 505.990428] ? handle_mm_fault+0x42a/0xc70 [ 505.990445] ? lock_downgrade+0x900/0x900 [ 505.990462] ? check_preemption_disabled+0x48/0x280 [ 505.990485] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 505.990506] ? kasan_check_read+0x11/0x20 [ 506.054993] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 506.060298] ? rcu_bh_qs+0xc0/0xc0 [ 506.063852] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 506.069322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 506.074882] ? check_preemption_disabled+0x48/0x280 [ 506.079923] handle_mm_fault+0x54f/0xc70 [ 506.084002] ? __handle_mm_fault+0x53e0/0x53e0 [ 506.088606] ? find_vma+0x34/0x190 [ 506.092170] __do_page_fault+0x67d/0xed0 [ 506.096283] ? mm_fault_error+0x380/0x380 [ 506.100456] ? graph_lock+0x170/0x170 [ 506.104290] ? lock_release+0x970/0x970 [ 506.108278] ? arch_local_save_flags+0x40/0x40 [ 506.112880] do_page_fault+0xf2/0x7e0 [ 506.116713] ? vmalloc_sync_all+0x30/0x30 [ 506.120937] ? error_entry+0x76/0xd0 [ 506.124686] ? trace_hardirqs_off_caller+0xbb/0x310 03:34:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x406, &(0x7f0000000000)) close(r0) close(r1) [ 506.129747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.134616] ? trace_hardirqs_on_caller+0x310/0x310 [ 506.139665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.144554] page_fault+0x1e/0x30 [ 506.148024] RIP: 0010:__get_user_4+0x21/0x30 [ 506.152446] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 506.171355] RSP: 0018:ffff8801896afb40 EFLAGS: 00010206 [ 506.176730] RAX: 00007fa8ae3e3003 RBX: 1ffff100312d5f6d RCX: ffffc90009eda000 [ 506.184010] RDX: ffffffffffffffff RSI: ffffffff81b159c3 RDI: 0000000000000286 [ 506.191290] RBP: ffff8801896afcf0 R08: 0000000000000000 R09: 0000000000000000 [ 506.198568] R10: ffff8801b7fdee40 R11: acaec3f4da740084 R12: ffff8801896afcc8 [ 506.205848] R13: ffff8801c57a0d80 R14: dffffc0000000000 R15: 00007fa8ae3e3000 [ 506.213153] ? __might_fault+0x1a3/0x1e0 [ 506.217304] ? lookup_ioctx+0xf0/0xb70 [ 506.221212] ? find_held_lock+0x36/0x1c0 [ 506.225287] ? free_ioctx+0x80/0x80 [ 506.228930] ? kasan_check_write+0x14/0x20 [ 506.228949] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 506.228970] ? wait_for_completion+0x8a0/0x8a0 [ 506.228989] ? __lock_is_held+0xb5/0x140 [ 506.229011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 506.242753] ? check_preemption_disabled+0x48/0x280 [ 506.257366] __x64_sys_io_submit+0x123/0x580 [ 506.261823] ? __ia32_sys_io_destroy+0x580/0x580 [ 506.266596] ? do_syscall_64+0x9a/0x820 [ 506.270590] ? lockdep_hardirqs_on+0x421/0x5c0 [ 506.275216] ? trace_hardirqs_on+0xbd/0x310 [ 506.279595] ? __ia32_sys_read+0xb0/0xb0 [ 506.283685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.283706] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 506.283735] do_syscall_64+0x1b9/0x820 [ 506.283756] ? __ia32_sys_io_destroy+0x580/0x580 [ 506.303200] ? do_syscall_64+0x1b9/0x820 [ 506.307276] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 506.312658] ? syscall_return_slowpath+0x5e0/0x5e0 [ 506.317621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.322482] ? trace_hardirqs_on_caller+0x310/0x310 [ 506.327511] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 506.327531] ? prepare_exit_to_usermode+0x291/0x3b0 [ 506.327556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.327582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.327595] RIP: 0033:0x457569 [ 506.327611] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 506.327620] RSP: 002b:00007fa8ae403c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 03:34:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)='@userppp0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) flistxattr(r1, &(0x7f00000000c0)=""/10, 0xa) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) 03:34:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa200]}, 0x10) shutdown(r0, 0x1) [ 506.377502] RAX: ffffffffffffffda RBX: 00007fa8ae403c90 RCX: 0000000000457569 [ 506.384784] RDX: 0000000020000b00 RSI: 20000000000000ae RDI: 00007fa8ae3e3000 [ 506.392061] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 506.399340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8ae4046d4 [ 506.406621] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 03:34:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x40a, &(0x7f0000000000)) close(r0) close(r1) 03:34:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x7, 0x1, 0x1f, 0xfffffffeffffffff, 0x4, 0x6a79, 0x10000, 0x7, 0x1, 0xbe9e, 0x2, 0x751}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:40 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000000, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000180)="7cd4de5f8d060fec7ba2396ef7e2829e5ae5b2885aa5a0cd2b7389b3dc1c00983da5d459e27609fc06455d052611750368db369d253e1594071e5160a8fa80de78d1f8bf8ea852aa9a27d78da60e14ec1976f6bef877fa94ea5a519121b7a9f32e3e5393eb8bafd9fbdc9b728a332d52d6dd85bbfcb88565054488eb84ed09f982a65e4c0b7c357f7af09502a50cf2ec68057921025be57a09fc6ff9a6d02a2b475c5cc9ecbc32d1323b38a2efab06dd819c848d85545a774dececc3011b583d544db7d6b1fd5785f01807d00a70d9", 0xcf, 0x1}, {&(0x7f0000000280)="8771134f3c7c874d55a2af5042434f6b8214f7286007ddf97be7747133312b50916ee67aa094ecf79f560d7b26d5b79a81cf279048b2f060a95071ce5d5e5def4c325faac6d7cf7c1ac00a849f9062872fe45889e361364206", 0x59, 0x2}, {&(0x7f0000000300)="9d0dc085d08021e78460bb3b546aac3478e34c1620a32d1ad4286576204195fc44ae66e55716ea9e1644f48112170e14ac9495d6961a35834579d628fa378f63ca5cb9c52d1da4f601aa0ed36cbb7f990946aede21fbb0b732f83aa46bc37eaaf5e04efd8a02c35114e7ab9e0e5e9ae3c42e049fd0c5c4849d7004f10518098d4e9fd2b1fd4aed", 0x87, 0x7f}, {&(0x7f00000003c0)="e094f0d0470086c548419eb0d4d02616260078cfe06ae356d02ad7fd51fa73140b6c45c2f179cb67765a15840cc8989d", 0x30, 0x3}, {&(0x7f0000000400)="c007e19d45a52b2237066d00e2604200ec0d154db1a3376e6b1a8555fbb4ae7dc6cc71f657f1a3ff4afb028f16f17079db69e20d7f829c62aa998e3df466216bec8325acfd910aa2d0f6a23f2a2963f34593b83b00b8f7d0c6d1b63989106772a9eeb388f37c302d109e7d1d5ec8dab44584c9cd4f26b2e53987364771f397b2732819d3b89e043395a82862e0d6", 0x8e, 0x1f9480}], 0x848, &(0x7f0000000680)={[{@flush_merge='flush_merge'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@quota='quota'}, {@fsync_mode_posix='fsync_mode=posix'}, {@whint_mode_off='whint_mode=off'}, {@quota='quota'}, {@nolazytime='nolazytime'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@noheap='noheap'}, {@noextent_cache='noextent_cache'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'mime_typecpuset'}}, {@dont_appraise='dont_appraise'}, {@fowner_lt={'fowner<', r2}}]}) close(0xffffffffffffffff) 03:34:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d7660") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:40 executing program 4 (fault-call:2 fault-nth:1): io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3b4d5660]}, 0x10) shutdown(r0, 0x1) 03:34:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) close(r0) close(r1) 03:34:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x10, &(0x7f0000000000)) close(r0) close(r1) [ 506.794779] FAULT_INJECTION: forcing a failure. [ 506.794779] name failslab, interval 1, probability 0, space 0, times 0 [ 506.808005] CPU: 1 PID: 21028 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 506.815315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.824683] Call Trace: [ 506.824713] dump_stack+0x1c4/0x2b6 [ 506.824738] ? dump_stack_print_info.cold.1+0x20/0x20 [ 506.824773] should_fail.cold.4+0xa/0x17 [ 506.840229] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 506.845354] ? check_preemption_disabled+0x48/0x280 [ 506.850391] ? check_preemption_disabled+0x48/0x280 [ 506.855434] ? graph_lock+0x170/0x170 [ 506.859264] ? graph_lock+0x170/0x170 [ 506.863121] ? find_held_lock+0x36/0x1c0 [ 506.867212] ? __lock_is_held+0xb5/0x140 [ 506.871303] ? ___might_sleep+0x1ed/0x300 [ 506.875484] ? arch_local_save_flags+0x40/0x40 [ 506.880089] ? print_usage_bug+0xc0/0xc0 [ 506.884171] __should_failslab+0x124/0x180 [ 506.888433] should_failslab+0x9/0x14 [ 506.892244] kmem_cache_alloc+0x2be/0x730 [ 506.896406] ? __lock_acquire+0x7ec/0x4ec0 [ 506.900658] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 506.906244] ptlock_alloc+0x20/0x80 [ 506.909891] pte_alloc_one+0x6b/0x1a0 [ 506.913726] __handle_mm_fault+0x43f4/0x53e0 [ 506.918150] ? print_usage_bug+0xc0/0xc0 [ 506.922242] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 506.927099] ? graph_lock+0x170/0x170 [ 506.930917] ? print_usage_bug+0xc0/0xc0 [ 506.934996] ? mark_held_locks+0x130/0x130 [ 506.939240] ? graph_lock+0x170/0x170 [ 506.943050] ? graph_lock+0x170/0x170 [ 506.946887] ? handle_mm_fault+0x42a/0xc70 [ 506.951134] ? lock_downgrade+0x900/0x900 [ 506.955300] ? check_preemption_disabled+0x48/0x280 [ 506.960337] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 506.966149] ? kasan_check_read+0x11/0x20 [ 506.970320] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 506.975623] ? rcu_bh_qs+0xc0/0xc0 [ 506.979175] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 506.984646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 506.990214] ? check_preemption_disabled+0x48/0x280 [ 506.995258] handle_mm_fault+0x54f/0xc70 [ 506.999336] ? __handle_mm_fault+0x53e0/0x53e0 [ 507.003940] ? find_vma+0x34/0x190 [ 507.007510] __do_page_fault+0x67d/0xed0 [ 507.011596] ? mm_fault_error+0x380/0x380 [ 507.015764] ? graph_lock+0x170/0x170 [ 507.019578] ? lock_release+0x970/0x970 [ 507.023575] ? arch_local_save_flags+0x40/0x40 [ 507.028173] do_page_fault+0xf2/0x7e0 [ 507.031995] ? vmalloc_sync_all+0x30/0x30 [ 507.036155] ? error_entry+0x76/0xd0 [ 507.039895] ? trace_hardirqs_off_caller+0xbb/0x310 [ 507.044930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.049793] ? trace_hardirqs_on_caller+0x310/0x310 [ 507.054835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.059708] page_fault+0x1e/0x30 [ 507.063175] RIP: 0010:__get_user_4+0x21/0x30 [ 507.067611] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 507.086525] RSP: 0018:ffff880190a4fb40 EFLAGS: 00010206 [ 507.091904] RAX: 00007fa8ae3e3003 RBX: 1ffff10032149f6d RCX: ffffc90009eda000 [ 507.099198] RDX: ffffffffffffffff RSI: ffffffff81b159c3 RDI: 0000000000000286 [ 507.106474] RBP: ffff880190a4fcf0 R08: 0000000000000000 R09: 0000000000000000 [ 507.113756] R10: ffff8801c13489c0 R11: acaec3f4da740084 R12: ffff880190a4fcc8 [ 507.121035] R13: ffff880180d918c0 R14: dffffc0000000000 R15: 00007fa8ae3e3000 [ 507.128345] ? __might_fault+0x1a3/0x1e0 [ 507.132425] ? lookup_ioctx+0xf0/0xb70 [ 507.136335] ? find_held_lock+0x36/0x1c0 [ 507.140415] ? free_ioctx+0x80/0x80 [ 507.144061] ? kasan_check_write+0x14/0x20 [ 507.148314] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 507.153262] ? wait_for_completion+0x8a0/0x8a0 [ 507.157868] ? __lock_is_held+0xb5/0x140 [ 507.161950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.167515] ? check_preemption_disabled+0x48/0x280 [ 507.172558] __x64_sys_io_submit+0x123/0x580 [ 507.176988] ? __ia32_sys_io_destroy+0x580/0x580 [ 507.181757] ? do_syscall_64+0x9a/0x820 [ 507.185745] ? lockdep_hardirqs_on+0x421/0x5c0 [ 507.190341] ? trace_hardirqs_on+0xbd/0x310 [ 507.194682] ? __ia32_sys_read+0xb0/0xb0 [ 507.198766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.204145] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 507.209627] do_syscall_64+0x1b9/0x820 [ 507.213538] ? __ia32_sys_io_destroy+0x580/0x580 [ 507.218304] ? do_syscall_64+0x1b9/0x820 [ 507.222375] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 507.227759] ? syscall_return_slowpath+0x5e0/0x5e0 [ 507.232714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.237587] ? trace_hardirqs_on_caller+0x310/0x310 [ 507.242617] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 507.247656] ? prepare_exit_to_usermode+0x291/0x3b0 [ 507.252722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.257604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.262805] RIP: 0033:0x457569 [ 507.266012] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 507.284927] RSP: 002b:00007fa8ae403c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 03:34:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom(r0, &(0x7f0000000000)=""/3, 0x3, 0x2, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r0) 03:34:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x11256d1a]}, 0x10) shutdown(r0, 0x1) 03:34:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0xb, &(0x7f0000000000)) close(r0) close(r1) [ 507.292643] RAX: ffffffffffffffda RBX: 00007fa8ae403c90 RCX: 0000000000457569 [ 507.299913] RDX: 0000000020000b00 RSI: 20000000000000ae RDI: 00007fa8ae3e3000 [ 507.307171] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 507.314432] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8ae4046d4 [ 507.321699] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 03:34:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d7660") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000180)=""/189, &(0x7f0000000000)=0xbd) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)="bdce7d18324fc2d207e5bf91b79efb431be6d3f797df2ebc5a343fdc1de0be165a929ba13461d56f925195f846813b01c81cfa6081e551da207a43fd27e3369756cf058f4d6cdf8939151edfbf2ad22ad9b8712dd42c7d818bd0a269ad3260f88aa56c8d749b9ebfb6c86a0571c7fa06bcae52eda1d809e3", 0x78, 0x100000001}, {&(0x7f00000002c0)="0521bc8cb8bc241ca019d3ed563f8cfdff6d9818fe270b18bd6223af407a89219e6d8360e882a6d5e3002347a2706e082c01a64bf96dacb4458155ba8d", 0x3d, 0x1}], 0x2000000, &(0x7f0000000340)={[{@decompose='decompose'}], [{@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, "2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828"}}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) [ 507.511247] hfsplus: unable to parse mount options 03:34:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x6377}, 0x28, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000007140)=[{{&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/41, 0x29}], 0x3, &(0x7f0000000440)=""/56, 0x38, 0x7}}, {{&(0x7f0000000480)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/148, 0x94}, {&(0x7f0000001840)=""/239, 0xef}, {&(0x7f0000001940)=""/147, 0x93}, {&(0x7f0000001a00)=""/138, 0x8a}], 0x9, 0x0, 0x0, 0x6}, 0x81}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001b80)=""/175, 0xaf}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)}], 0x3, 0x0, 0x0, 0xffffffff}, 0x8}, {{&(0x7f0000002cc0)=@pptp, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/198, 0xc6}, {&(0x7f0000002e40)=""/141, 0x8d}, {&(0x7f0000002f00)=""/177, 0xb1}], 0x3, &(0x7f0000003000)=""/57, 0x39, 0x7ff}, 0x2}, {{&(0x7f0000003040)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/93, 0x5d, 0x3f}, 0x5a}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/47, 0x2f}], 0x1, &(0x7f0000003200)=""/27, 0x1b, 0x9}, 0x7f}, {{&(0x7f0000003240)=@un=@abs, 0x80, &(0x7f0000004400)=[{&(0x7f00000032c0)=""/11, 0xb}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/238, 0xee}], 0x3, &(0x7f0000004440)=""/152, 0x98, 0x1}, 0x4}, {{&(0x7f0000004500)=@xdp, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004580)=""/204, 0xcc}, {&(0x7f0000004680)=""/125, 0x7d}, {&(0x7f0000004700)=""/243, 0xf3}, {&(0x7f0000004800)=""/63, 0x3f}, {&(0x7f0000004840)=""/65, 0x41}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/5, 0x5}, {&(0x7f0000005900)}, {&(0x7f0000005940)=""/161, 0xa1}], 0x9, &(0x7f0000005ac0)=""/90, 0x5a, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000005b40)=""/176, 0xb0}, {&(0x7f0000005c00)=""/6, 0x6}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/216, 0xd8}, {&(0x7f0000006d40)=""/20, 0x14}, {&(0x7f0000006d80)=""/77, 0x4d}, {&(0x7f0000006e00)=""/32, 0x20}, {&(0x7f0000006e40)=""/247, 0xf7}, {&(0x7f0000006f40)=""/3, 0x3}], 0x9, &(0x7f0000007040)=""/213, 0xd5, 0x1}, 0x4}], 0x9, 0x1, &(0x7f0000007380)={0x0, 0x1c9c380}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4200, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000002c40)={0x3, 0x43c9385f, 0x0, 0x9, 0x3e, 0x7, 0x33c, 0x400, 0x2, 0x5, 0x4, 0x9}) 03:34:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x8, &(0x7f0000000000)) close(r0) close(r1) 03:34:41 executing program 4 (fault-call:2 fault-nth:2): io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xffffff91]}, 0x10) shutdown(r0, 0x1) 03:34:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/216) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) 03:34:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x0, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x0, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:41 executing program 3: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x420080, 0x0) write$UHID_INPUT(r3, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006) close(0xffffffffffffffff) [ 507.733175] FAULT_INJECTION: forcing a failure. [ 507.733175] name failslab, interval 1, probability 0, space 0, times 0 [ 507.806978] CPU: 0 PID: 21080 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 507.814311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.823694] Call Trace: [ 507.826309] dump_stack+0x1c4/0x2b6 [ 507.829969] ? dump_stack_print_info.cold.1+0x20/0x20 [ 507.835203] should_fail.cold.4+0xa/0x17 [ 507.839286] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 507.844401] ? __lock_acquire+0x7ec/0x4ec0 [ 507.848652] ? graph_lock+0x170/0x170 [ 507.852478] ? __do_page_fault+0x4a6/0xed0 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000300)='&\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x13, 0x34, 0xf, 0x19, 0x9, 0xb22, 0x3, 0x5c, 0xffffffffffffffff}) 03:34:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x0, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 507.856727] ? graph_lock+0x170/0x170 [ 507.860548] ? mark_held_locks+0x130/0x130 [ 507.864803] ? find_held_lock+0x36/0x1c0 [ 507.868894] ? ___might_sleep+0x1ed/0x300 [ 507.873062] ? arch_local_save_flags+0x40/0x40 [ 507.877658] ? lock_release+0x970/0x970 [ 507.881686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 507.887252] __should_failslab+0x124/0x180 [ 507.891510] should_failslab+0x9/0x14 [ 507.895332] kmem_cache_alloc+0x2be/0x730 [ 507.899502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 507.905050] ? _copy_from_user+0xdf/0x150 [ 507.909223] io_submit_one+0x1a2/0xf80 [ 507.913132] ? aio_poll+0x1420/0x1420 [ 507.916958] ? __might_fault+0x12b/0x1e0 [ 507.921041] ? lock_downgrade+0x900/0x900 [ 507.925211] ? lock_release+0x970/0x970 [ 507.929202] ? arch_local_save_flags+0x40/0x40 [ 507.933800] ? __lock_is_held+0xb5/0x140 [ 507.937901] __x64_sys_io_submit+0x1b7/0x580 [ 507.942328] ? __ia32_sys_io_destroy+0x580/0x580 [ 507.947108] ? trace_hardirqs_on+0xbd/0x310 [ 507.951446] ? __ia32_sys_read+0xb0/0xb0 [ 507.955525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.960910] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 507.966394] do_syscall_64+0x1b9/0x820 [ 507.970299] ? __ia32_sys_io_destroy+0x580/0x580 [ 507.975069] ? do_syscall_64+0x1b9/0x820 [ 507.979150] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 507.984536] ? syscall_return_slowpath+0x5e0/0x5e0 [ 507.989498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.994367] ? trace_hardirqs_on_caller+0x310/0x310 [ 507.999398] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 508.004434] ? prepare_exit_to_usermode+0x291/0x3b0 [ 508.009471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 508.014336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 508.019550] RIP: 0033:0x457569 [ 508.022757] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.041688] RSP: 002b:00007fa8ae403c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 508.041706] RAX: ffffffffffffffda RBX: 00007fa8ae403c90 RCX: 0000000000457569 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000080)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000000)) close(r0) close(r1) [ 508.041715] RDX: 0000000020000b00 RSI: 20000000000000ae RDI: 00007fa8ae3e3000 [ 508.041723] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 508.041731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8ae4046d4 [ 508.041739] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 03:34:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x4000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 03:34:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x4, 0x2}, 0x49}, 0x10) close(0xffffffffffffffff) 03:34:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8030055500000000]}, 0x10) shutdown(r0, 0x1) 03:34:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x407, &(0x7f0000000000)) close(r0) close(r1) 03:34:42 executing program 4 (fault-call:2 fault-nth:3): io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000180)=""/238) close(0xffffffffffffffff) [ 508.715439] FAULT_INJECTION: forcing a failure. [ 508.715439] name failslab, interval 1, probability 0, space 0, times 0 [ 508.730106] CPU: 1 PID: 21127 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 508.737404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.747170] Call Trace: [ 508.749788] dump_stack+0x1c4/0x2b6 [ 508.753448] ? dump_stack_print_info.cold.1+0x20/0x20 [ 508.758662] ? mark_held_locks+0x130/0x130 [ 508.762931] ? __lock_acquire+0x7ec/0x4ec0 [ 508.767201] should_fail.cold.4+0xa/0x17 [ 508.771297] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 508.776417] ? graph_lock+0x170/0x170 [ 508.780229] ? graph_lock+0x170/0x170 [ 508.784046] ? graph_lock+0x170/0x170 [ 508.787858] ? find_held_lock+0x36/0x1c0 [ 508.791942] ? graph_lock+0x170/0x170 [ 508.795770] ? find_held_lock+0x36/0x1c0 [ 508.799871] ? ___might_sleep+0x1ed/0x300 [ 508.804035] ? arch_local_save_flags+0x40/0x40 [ 508.808650] __should_failslab+0x124/0x180 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xe8, 0x100) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x7, 0xebb9, 0x7, 0x3, 0x0, 0xa2}) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x401) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) [ 508.812910] should_failslab+0x9/0x14 [ 508.816724] kmem_cache_alloc_trace+0x2d7/0x750 [ 508.821412] ? _raw_spin_unlock+0x2c/0x50 [ 508.825649] binder_get_thread+0x255/0x880 [ 508.829915] ? binder_open+0x950/0x950 [ 508.833832] ? ksys_dup3+0x680/0x680 [ 508.837576] binder_poll+0x94/0x3b0 [ 508.841231] ? __kernel_text_address+0xd/0x40 [ 508.845739] ? unwind_get_return_address+0x61/0xa0 [ 508.850689] ? binder_get_thread+0x880/0x880 [ 508.855130] ? __save_stack_trace+0x8d/0xf0 [ 508.859500] aio_poll+0x6ad/0x1420 [ 508.863072] ? binder_get_thread+0x880/0x880 [ 508.867487] ? free_ioctx_users+0x710/0x710 [ 508.871820] ? kmem_cache_alloc+0x12e/0x730 [ 508.876144] ? aio_setup_rw+0x170/0x170 [ 508.880139] ? graph_lock+0x170/0x170 [ 508.883943] ? mark_held_locks+0x130/0x130 [ 508.888192] ? graph_lock+0x170/0x170 [ 508.892015] ? find_held_lock+0x36/0x1c0 [ 508.896097] ? find_held_lock+0x36/0x1c0 [ 508.900184] ? __might_fault+0x12b/0x1e0 [ 508.904253] ? lock_downgrade+0x900/0x900 [ 508.908444] ? lock_release+0x970/0x970 [ 508.912436] ? arch_local_save_flags+0x40/0x40 [ 508.917027] ? kasan_check_read+0x11/0x20 [ 508.921188] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 508.926487] io_submit_one+0xa49/0xf80 [ 508.930411] ? io_submit_one+0xa49/0xf80 [ 508.934494] ? aio_poll+0x1420/0x1420 [ 508.938309] ? __might_fault+0x12b/0x1e0 [ 508.942376] ? lock_downgrade+0x900/0x900 [ 508.946536] ? arch_local_save_flags+0x40/0x40 [ 508.951126] ? __lock_is_held+0xb5/0x140 [ 508.955230] __x64_sys_io_submit+0x1b7/0x580 [ 508.959651] ? __ia32_sys_io_destroy+0x580/0x580 [ 508.964432] ? trace_hardirqs_on+0xbd/0x310 [ 508.968759] ? __ia32_sys_read+0xb0/0xb0 [ 508.972825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 508.978200] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 508.983676] do_syscall_64+0x1b9/0x820 [ 508.987573] ? __ia32_sys_io_destroy+0x580/0x580 [ 508.992361] ? do_syscall_64+0x1b9/0x820 [ 508.996424] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 509.001794] ? syscall_return_slowpath+0x5e0/0x5e0 [ 509.006731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.011582] ? trace_hardirqs_on_caller+0x310/0x310 [ 509.016608] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 509.021629] ? prepare_exit_to_usermode+0x291/0x3b0 [ 509.026653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.031515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.036719] RIP: 0033:0x457569 [ 509.039920] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.058822] RSP: 002b:00007fa8ae403c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 03:34:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1a6d2511]}, 0x10) shutdown(r0, 0x1) [ 509.066536] RAX: ffffffffffffffda RBX: 00007fa8ae403c90 RCX: 0000000000457569 [ 509.073807] RDX: 0000000020000b00 RSI: 20000000000000ae RDI: 00007fa8ae3e3000 [ 509.081076] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 509.088347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8ae4046d4 [ 509.095627] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 03:34:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0xf, &(0x7f0000000000)) close(r0) close(r1) 03:34:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:43 executing program 4 (fault-call:2 fault-nth:4): io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x408, &(0x7f0000000000)) close(r0) close(r1) 03:34:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x200002) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x7, 0x4) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:34:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xfeffffff]}, 0x10) shutdown(r0, 0x1) 03:34:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x40b, &(0x7f0000000000)) close(r0) close(r1) 03:34:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x8000011, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) syncfs(r0) 03:34:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80, 0x301c00) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:43 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa2000000]}, 0x10) shutdown(r0, 0x1) 03:34:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x402, &(0x7f0000000000)) close(r0) close(r1) 03:34:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x5, &(0x7f0000000000)) close(r0) close(r1) 03:34:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfc5e, 0x200) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/173, 0xad) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000240)=""/159) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000b00)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000380)="7444e018cd7638f94bdd5baa4b85d2a53d08975a21641acc192f865223718103fe5bb49e527bcd62b905eb61fe7eaac8c58728e771edb19fa4956aeddc14c93354c14f8c9c671d09bf507ea21f46a08df8a15c71aaec8718d81f1152506f744f7355a770341a857c61fd4ad67d0f20635f71808bc5bacfd20030b4736f2a6588c3d9c5f5d5e4c936ef699a3bad781c56986e46a641412a296a413962be6eee5ed78dde54e6e8cc7c749827f9a2afb07d3d8706c4b3d3dfcb1772", 0xba}, {&(0x7f0000000440)="b74dd7d7deea254a4fd14f3741b1a89dc057b9c3f1de743be8f133d167e94831b0b3587a67820f6551acbe275fcd64603510a4c158d681fac4a8d7a6890d71bd758553cd141bb825b37b164f7ce81bb3e00f6b2468d17c1e837675b033bccdc05d788138bef96a20640d94fed8414d0eef84bcf42196171cf8d27f50d25a56da06654b5a81c5ec782e7fde9f70c01c94fb126bbb77841e5cbebf3d1425e4025131c53625d3ce2df739f0f39053b1cce24bfefd7d2715", 0xb6}, {&(0x7f0000000500)="e808d75d7cae0f32870bebcb27b6ddd1c10aec8f7b03e3f30f9b61e5c643a41aab2abc9ba8055d86d810aac83a0f19e4d48fd7d34ab9a12f1bd77dd29e8e9b3d68ef14ce1463c43ef70199b240e3cab368a43d6d5f847efdcbad9ca2867b36a2ebf02137bbf5a4d9f7f89969f522bcaff669dc4974f178fd85d0da667e987b396f176b4f59b94c7991d711dde6287c9a97a53b5c1aaa14610b7395245f3754bbaa85ffb672f195cc4941fbf434ad478cf80d2f55646af01432b81b8af87ad4a59960811c13a8025ad8ad9f680f52077a24aabb1c66674e737a", 0xd9}, {&(0x7f0000000600)="71f60c273e12af0a87900478b687af9b90519595b80b1a6fcf2f8823d7023fbc2ef09212050a2317a5d43d644efd5931c568a7f53ba20dc3bf7a2cbafb4d9313b398a38e70669f567c5718ad27635cb17262abc1236b7a3a3dc74bfd13d0b2063ae4fba1fcacafe9269b29167f8f2d2443d2a920b9caec5ea49173e5a156731a3e069e9a8668d4", 0x87}, {&(0x7f00000006c0)="afe3868e8662975c5f00d8da5abb72696dc0309066e0103663e7d860aa16ac3360665b5c5db8bb658147b6e4b09249fb69fcf6cf5e18a199fb5b65af1865d7d0616238e2527f4aa986250be2c7b15e0fb2ed850d32d969709539c0c975199e951aa36dac1f9d9a5ecc8163c1bf4e8174de12fe990675ea0a17b051ca34c98d23ddd4c747e3823f96aa873e8d8f97253b7014e3daf08118aed50b0b683fd63c8f8c00a50fc138274e549fa703e36464b4c3c120431eef48e1607a748c75671a9981920555ce58ff2bc7236d10d66072", 0xcf}, {&(0x7f00000000c0)="18e2dbe0d0cf216aff37915e3d8ef9113438a38134321eec948d0060b508e62713fdb643516aab91299128", 0x2b}], 0x6, &(0x7f0000000a40)=[@rights={0x28, 0x1, 0x1, [r2, r0, r1, r1, r1]}, @rights={0x38, 0x1, 0x1, [r2, r0, r2, r2, r2, r0, r0, r2, r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0xa0, 0x10}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x4, 0x20032, r2, 0x0) 03:34:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x8000000000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x60]}, 0x10) shutdown(r0, 0x1) 03:34:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x11, &(0x7f0000000000)) close(r0) close(r1) 03:34:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x1}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x7300, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x2, &(0x7f0000000000)) close(r0) close(r1) 03:34:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ftruncate(r0, 0x3) 03:34:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x60564d3b]}, 0x10) shutdown(r0, 0x1) 03:34:44 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @remote, @multicast1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r3) 03:34:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x40e, &(0x7f0000000000)) close(r0) close(r1) 03:34:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1802000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x70e000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x1cd) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x3, &(0x7f0000000000)) close(r0) close(r1) 03:34:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:45 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x730000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xb815, 0x408002) getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f00000001c0)=""/215, &(0x7f0000000140)=0xd7) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) mq_open(&(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0xa0, &(0x7f00000000c0)={0x6, 0x8, 0x3, 0x10001, 0x20, 0x7f, 0xf6}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x54550100]}, 0x10) shutdown(r0, 0x1) 03:34:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fadvise64(r0, 0x0, 0x100000000, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) 03:34:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) close(r0) close(r1) 03:34:45 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x100000000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TCSBRK(r1, 0x5409, 0x5) 03:34:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffff9c, 0x0, 0x76, &(0x7f00000001c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828"}, 0x30) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x6, 0x5, 0x0, 0x771, 0x0, 0xfffffffffffff9d8, 0x21000, 0x1, 0x5, 0x4, 0x3, 0x3f, 0x9, 0x7, 0x3, 0x4, 0x2, 0x0, 0x7fff, 0x2d56b8c2, 0x965, 0x20, 0x2, 0x100000001, 0x0, 0x1, 0x4, 0x79, 0x7ff, 0x100, 0x455bc091, 0x40, 0x6, 0x219800000000000, 0x7, 0xe6, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x3, 0x0, 0x6, 0xfff, 0x8, 0x6ce4}, r1, 0xf, r2, 0x8) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc00]}, 0x10) shutdown(r0, 0x1) 03:34:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:45 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x4, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) fcntl$dupfd(r0, 0x1000000406, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}], 0xfffffffffffffed3) close(0xffffffffffffffff) 03:34:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0xa, &(0x7f0000000000)) close(r0) close(r1) 03:34:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'bcsh0\x00', 0x4}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000000)) close(r0) close(r1) 03:34:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa2]}, 0x10) shutdown(r0, 0x1) 03:34:46 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x400000000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0xffffffff, 0x22, 0xffff, 0x80}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x40}, 0x8) 03:34:46 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) r2 = socket$inet6_sctp(0xa, 0x7, 0x84) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3011}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="54f468b7", @ANYRES16=r4, @ANYBLOB="000029bd7000fedbdf2503000000500001000c00070001000000010000000c0007003b000000040000000800090018000000080002006f0000000c000700260000000c0000000800090051000000080004004e210000080004004e210000"], 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x802, 0x0) 03:34:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0xa0008000}) close(r0) close(r1) 03:34:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xfffffa90]}, 0x10) shutdown(r0, 0x1) 03:34:46 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x4000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3f000000}) close(r0) close(r1) 03:34:46 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x705000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe803000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x7, 0x84) r1 = memfd_create(&(0x7f0000000400)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x84, @remote, 0x8b91}], 0x1c) close(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000000)=0xe8) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) setresuid(r2, r3, r4) 03:34:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2000000}) close(r0) close(r1) 03:34:47 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1000, 0x200000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:47 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x506000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x54000000]}, 0x10) shutdown(r0, 0x1) 03:34:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f00000000c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r4 = getegid() getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xa16edaa156f31ed2) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001009e880000000002000400", @ANYRES32=r2, @ANYBLOB="040001000000000008000200", @ANYRES32=r3, @ANYBLOB="e6000500", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="10000200000000002000020000000000"], 0x5c, 0x2) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000006c0)={r9, 0x2, 0x8, 0x7fff, 0x2000000000, 0x8}, 0x14) 03:34:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1000000}) close(r0) close(r1) 03:34:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000600)="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", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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") getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r2, 0x6, 0x2, [0xb5, 0x6]}, 0xc) close(0xffffffffffffffff) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000480)=""/79, &(0x7f0000000500)=0x4f) sendmsg$nfc_llcp(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x5, 0x2, "3530edbe2a92d28bc467bc5b0e38e7efa89420a636cec85429cd578acd2cb3ebe8d2bf5eac5a43969850107539d40855ca1ffbb6856c372ae40e53c6d6a794", 0x1c}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000100)="20592ca1f333088dee35d92360b47aa715282608f73de27094a71f03876943d96e227dfdc02bc7977e66874589a22ff9084491d8921cf3fd1dbf4b87531b0461f0d721cd0a060188411ba688cfc6e53b185270991d2c51739b933fe19498faabc579d3ac7845e4f9568daf86b82cd3375c2ce6847573b13ccd32d81aaba21173a64146e1f122335d144ca0cbcc3e0415abef48a8629c1f1c55f7aa46062bbdbcff02a185a01fece5b56264ed27e38f71e741b774700fc78f", 0xb8}, {&(0x7f00000001c0)="6599d1016a4e7b2ce245581af145fb9f6a9fb99de4ce52abf8a29084b0377061c89ac133aac0dc76bb015fe2caa01151deb8ff0e0a68436bf0bdb3b09fca97cd0df818f95e34518f5f0c043d9577caf4511df132206fc18b1c75593782a7ce10169b52d1a343afffc653dfb78a45da6c9fe1988a86cdcaf853a09f9317d64f42a77060076513e29e6a58e914f59abbd9869da6249fdb758e32cf97ec8298c905d0578685b19450d296c7df41d3affaa7883732ef6fb9", 0xb6}], 0x2, 0x0, 0x0, 0x40}, 0x40804) 03:34:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 03:34:47 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x930000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x18020000]}, 0x10) shutdown(r0, 0x1) 03:34:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x6, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) close(0xffffffffffffffff) 03:34:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3f00}) close(r0) close(r1) 03:34:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:48 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x50700000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x261300]}, 0x10) shutdown(r0, 0x1) 03:34:48 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3f00000000000000}) close(r0) close(r1) 03:34:48 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000180)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x6b}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in6={0xa, 0x4e22, 0x2, @local, 0x6}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @loopback}], 0xb4) close(0xffffffffffffffff) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 03:34:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="070100dd41000000400200009a030000de0100000300000000000000000000009d952621688440156cf4c361a1f34dd77fa381258c33e8c79cec30e7f3ace4f7bbca4f575a2a9e50071858ea1b5266f84f23c867a84b4b4c04c4a06052626b02b526b6e1abfeecdeaf39f022a32aa8cced1e78d26015966e7513f6aee8ad19b365877f0843881d9022d7533ce34d9f43c8bdec29a97c913a01741b46c17e9f6148060f753eff53434604323bc027b1e69246d5f9d96de4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000115cd69d11f03a249a0c270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x6ac) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa]}, 0x10) shutdown(r0, 0x1) 03:34:48 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x8000a0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0xffffffffffffff7f}) close(r0) close(r1) 03:34:48 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x77, &(0x7f0000000180)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:34:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200003, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x90faffff]}, 0x10) shutdown(r0, 0x1) 03:34:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x8000a0}) close(r0) close(r1) 03:34:49 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x400000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="bf12a179a3e2ff8eae994a4c05573ba785d00f3fb8639816dd078ea9f6a82e1c73119e6eafddab5986e97c367508b3033b636bee33fee88022c0c0b58b5936525a8bb5f1c5b5e5608c961604dd5d05ffdec8c109900253d9053e54eb978d6319d4a789ee3f342e41d396424a63542a85b139671fc8dd3777880051d5d5f6554546d72fa1366be16d8419a7956995a461640963d15682aa2a6d02ca67611f05924e99b225e3db7ee7506e5eb9cfb0d91eb51d539cd86fe3d9353da86d3559a04d56b0a1116c3d06af40dbe495dd0493f5", 0xd0}, {&(0x7f0000000000)="97c79ac34694921a42baacc2f2bc7c381dd0af719b16565742291eefa4dfda311e81cd22e5381c7381192ea82869d88a9472", 0x32}, {&(0x7f0000001280)="8dbf6d8d23c695756a8da6949962a074cce37bb92a1c31d97ff75bbf417fd8b02d03acdd41327628f3d8ce9ca925c798035d18ae451a2ebbfb6585f3dc28b1acdf37b908de10dfcbedcef93b70eff56e7c7bee782651afcf64854cacdd1ddb35ef06ee97445e66555e02b8162f9f59ab447eabbe5eff96aedc6c0bf54d9c3985be5ebd4ef81d28fafc23d5f7d8fd24d5eb73f55e01f904a7303bff92c8e4b06a13c50b13837c75e7452b3072fc70635e22714a3f2538a5741a8d0e78f4574930f6fd8b9aacaa8ac2ca3d5477cc358e5f", 0xd0}, {&(0x7f0000001380)="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", 0x1000}], 0x5, 0x0) 03:34:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x4020940d, 0x0) 03:34:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x48000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x1}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x1, 0x5, 0x1, 0x1}, 0x8) r3 = dup3(r1, r1, 0x80000) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0xffffffffa0008000}) close(r0) close(r1) 03:34:49 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x65, 0x40ad40) r1 = dup(r0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) syslog(0x4, &(0x7f0000000040)=""/217, 0xd9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) flistxattr(r3, &(0x7f0000000180)=""/158, 0x9e) close(r3) 03:34:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc0045878, 0x0) 03:34:49 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x7fa8ae3e3000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x7000000]}, 0x10) shutdown(r0, 0x1) 03:34:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x200000000000000}) close(r0) close(r1) 03:34:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) close(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8400, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)={0x3, 0x6000}) 03:34:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88000, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x8, 0x4, 0x0, [{0xc0000000000000, 0x9, 0x5, 0x7, 0x0, 0x9c0, 0x80000000}, {0x3, 0x86a, 0x771, 0x6, 0x2, 0x3, 0x5}, {0xffffffffffffff21, 0xdf71, 0x4, 0x3ff, 0x99, 0x9, 0xffffffffffffffe0}, {0x100000000, 0xba, 0x80000001, 0x1ff, 0x81, 0x2, 0x8}]}) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:49 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xe0700000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc018620b, 0x0) 03:34:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xf401]}, 0x10) shutdown(r0, 0x1) 03:34:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r1, 0x0, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) [ 515.890796] binder: 21581:21588 ioctl c018620b 0 returned -14 03:34:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x8000a0ffffffff}) close(r0) close(r1) 03:34:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) socket(0x3, 0xe, 0x80) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x240000) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x4) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x18000, 0x2) r3 = accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 03:34:50 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x730000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xfffffffffffffffc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 03:34:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc0045878, 0x0) 03:34:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xffffff8d]}, 0x10) shutdown(r0, 0x1) 03:34:50 executing program 3: r0 = socket$inet(0x2, 0xa, 0x7ff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x0, @multicast2, 0x4e20, 0x4, 'none\x00', 0x10, 0x5, 0x3b}, {@multicast1, 0x4e23, 0x1, 0x6, 0x1}}, 0x44) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fstat(0xffffffffffffffff, &(0x7f00000003c0)) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="c1f4ec5680f8145e5199981f6e002840d252db4950f4411c1831fd2bc4da34eb5b9b5506fdd6ee8b8bb49328c922bd8b857787db84089f330b169a48db8a020ae621a61229b3ab4f4077135f716ed15f8af6a6969448f16a953a446703395695786a428ff952355e247a63ea2cada62e1ffaece1f8b39cabaa50df7af5bd1e0edc62fafdbe5ea9dd01b37588dde68961c8ea4bcf67a53a2d5b6aced2fb7e25c9c0ec097030ffd4d4941f45a3d4138aeb3a2b1ee5fbe26b6db11d03fc7d2f0cffd6d019d07e1b67dd3c6f10eda9e485595869de85f98cd07f65d384edf9d9c529cb938f21fbeac2b32fabb563ba14f94f343f482bc188", 0xf6, 0xfffffffffffffffa) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="9f55b88d456ca22b2de8d11a7a3be908213b1c9023ce06848f0e601fbf940a98b0fc412fde351c1e3f78c88a4d9a79d29af0614ce17871f7d06574cda8963d7d2894e5e3fbd585f19b06950463eb961e31cea9c55f564ad5fe0b38ef9453933e939ea404515c120841fe98f7bc6591f55e8818b316b070debf0b3306108122f331189adcccd37390d3bf55ec9bc86ae98f3bc3796f9fd72fa8d3181bc819a45eacdf4a4d5366694db0744b60daf870ee9809f6abf12ad5d0fac299a51449c301226d562c192823ea13b4e10fd3c0a35e8c8686a44708d767e16c9e359c9ddacc8e3f5e6fe94c82e909e15c7ac03f529a93f9459088e815cc", 0xf8, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) pipe2(&(0x7f0000000440), 0x4000) close(r2) 03:34:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x7fffffffffffffff}) close(r0) close(r1) 03:34:50 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xffffffffa0008000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046205, 0x0) 03:34:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2}) close(r0) close(r1) 03:34:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5c00000000000000]}, 0x10) shutdown(r0, 0x1) [ 516.428409] binder: 21637:21639 ioctl 40046205 0 returned -22 03:34:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x93f, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000001180)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000011c0)={0x1e4, 0x1, 0xc25, 0x4, 0x2, 0x2, 0xff, 0x8, 0x1, 0x8, 0xffffffffffffffc0, 0x7d}) 03:34:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x9300, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x9, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) fdatasync(r1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='bcsf0\x00') 03:34:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40049409, 0x0) 03:34:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x100000000000000}) close(r0) close(r1) 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1000000]}, 0x10) shutdown(r0, 0x1) 03:34:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x7) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5c000000]}, 0x10) shutdown(r0, 0x1) 03:34:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x303eaea87f0000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc0306201, 0x0) 03:34:51 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x82000, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/185) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) fcntl$setown(r0, 0x8, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40000000}) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) dup3(r1, r3, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000001c0)=0x6) r4 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r4) 03:34:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2}) close(r0) close(r1) 03:34:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xffffffffffffff00}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0xc3, "52cb338e332854c0e96302a8d3dd61f9580e47a6a6d32bdf13722e390369135f900c8d9cb99bb21eb633e3d701f89d3b70ca019874b5eb5be61dddd83bd62340ab09cb08791346feb4777c8f29be51468f4b7fc360a8e6eda79134e162e9e9020b1863ef5c2b8ff0cd21f9836b5d1dce9d92168560d053731157beb24c434558a94fdb70f94595b65b75aeb9017571bad11c14a9b2096d1952b87eed1a7fea0321c9b7faf85982d08eb7aece42ad0b5c3f8ac8be1d53f524cae74314804b632a2d5785"}, &(0x7f00000002c0)=0xcb) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300), 0x10) [ 517.183942] binder: 21690:21696 ioctl c0306201 0 returned -14 [ 517.198870] Unknown ioctl -2143271670 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300bd300000000]}, 0x10) shutdown(r0, 0x1) 03:34:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x8000a0ffffffff, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 517.266102] Unknown ioctl 1074026288 [ 517.310661] Unknown ioctl -2143271670 03:34:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046207, 0x0) 03:34:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3f000000}) close(r0) close(r1) [ 517.370760] Unknown ioctl 1074026288 03:34:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8000000]}, 0x10) shutdown(r0, 0x1) 03:34:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x2000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x5450, 0x0) 03:34:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000080)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x132600]}, 0x10) shutdown(r0, 0x1) 03:34:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0xffffffffa0008000}) close(r0) close(r1) 03:34:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ptmx\x00', 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x8001, 0x0, 0x10001, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000001c0)={0x101, r2}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000300)=0x401, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffff396}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES32=r0], 0x34) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={{r3, r4/1000+30000}, {0x0, 0x7530}}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimensat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {r5, r6/1000+30000}}, 0x100) r7 = syz_open_pts(r0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000340)="555f145a67772f93ecdac9e88a61c4ebaef3d302654e57833a2cd0f19c1905d157d030a4c60f9d1339938d89", 0x2c) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000000)) 03:34:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) 03:34:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x605000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x5451, 0x0) 03:34:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x7fffffffffffffff}) close(r0) close(r1) 03:34:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xff0f000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x200000000000000}) close(r0) close(r1) 03:34:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readahead(r0, 0x0, 0x4ce3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) r2 = getpgrp(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x3, 0x0, 0x3, 0x7fffffff, 0x8, r2}) close(0xffffffffffffffff) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x0) 03:34:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x600000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x5460, 0x0) 03:34:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x507000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0xffff, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0xbc39, 0x10000, 0x2, 0x7, 0x400, 0x7, 0x3, 0x4, 0x26, 0x8001, 0xf50, 0x2, 0x401, 0x0, 0x2cb, 0x80000000, 0x2, 0x100000000, 0x8001, 0x7, 0x4, 0x5, 0x200, 0x8, 0x0, 0xffff, 0xc8, 0x159, 0x1, 0x8, 0x7, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000180), 0x2}, 0x800, 0x9, 0x4, 0x0, 0x10000, 0x20, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x8) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x5094, 0x0, 0x0, 0x65cd, 0x0, 0x9}) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioprio_set$uid(0x3, r3, 0x80000000) 03:34:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r0) 03:34:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3f00000000000000}) close(r0) close(r1) 03:34:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x7fffffffefff, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc0046209, 0x0) 03:34:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe]}, 0x10) shutdown(r0, 0x1) 03:34:52 executing program 3: socketpair(0xf, 0x6, 0xffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x7, 0x1}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1c, @mcast2, 0x180000}, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x100000001}]}, &(0x7f0000000280)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x10, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) [ 518.606150] binder: 21821:21826 ioctl c0046209 0 returned -22 03:34:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'vcan0\x00', 0x1}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x43, @mcast2, 0x80}}, 0x9, 0x0, 0x100, 0x101, 0x1ff}, &(0x7f0000000000)=0x98) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x867) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8000, 0x1, 0xffff, 0xbd, r2}, 0x10) close(0xffffffffffffffff) 03:34:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x1000000}) close(r0) close(r1) 03:34:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x20000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5]}, 0x10) shutdown(r0, 0x1) 03:34:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x5421, 0x0) 03:34:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x4100) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:53 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x301000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000400)={0x9, 0x5, 0x6, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) r2 = memfd_create(&(0x7f00000000c0)='+-em0%wlan0\x00', 0x1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000fa4d00000000000000001d0001ffffff000000000000000000000000000000000000000000fd7a0000ff00000000080000000000001f00000000000000ff000000060000000000000000000000000000000000000000000000000000040000000000000007000000000000001f00000000000000e10f00000000000000143d000000000000000000000000000000000000000000000000000000000000000000000000000080c5d4a6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x31f, 0x4) close(r0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') 03:34:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x8000a0}) close(r0) close(r1) 03:34:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x5452, 0x0) 03:34:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x6]}, 0x10) shutdown(r0, 0x1) 03:34:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x930000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0xffffffffffffff7f}) close(r0) close(r1) 03:34:53 executing program 3: socketpair$inet(0x2, 0xe, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x8, 0x9, 0x6, 0x0, 0x0, 0xff, 0xbdf, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r2, 0xa9, "e18b68f69a5de6748a8adb2ec5468268f40161ed29ef02d08d1cfdc22750d13573f966a9db5a4b775350f3d0b37f1ec61f40a2c4d0d0c4e3d0e7b29750713af2300c59712ee8c275b9c618e3144b1d4dd8e4e6d05e65e117bc737c8b6dd8458c1999356cd245a1e9ff51abcdbb45d1530bdf1d498336f16db1542da662199ea9926190a233eb9e2bb8bf9df4dd8d37535aca84eb5d44a05674558f7bb30ce22d4a77c6ed3907f94a09"}, &(0x7f0000000300)=0xb1) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000180)=0x44) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1e, r3, 0x4) close(0xffffffffffffffff) 03:34:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc0189436, 0x0) 03:34:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xa0008000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x256800]}, 0x10) shutdown(r0, 0x1) 03:34:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2000000}) close(r0) close(r1) 03:34:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x90100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) close(0xffffffffffffffff) 03:34:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x2, 0x0) 03:34:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1a6d251100000000]}, 0x10) shutdown(r0, 0x1) 03:34:54 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x100000000000000}) close(r0) close(r1) 03:34:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x42, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0xc020660b, 0x0) 03:34:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x55053080]}, 0x10) shutdown(r0, 0x1) 03:34:54 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x8000a0ffffffff}) close(r0) close(r1) 03:34:54 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(0xffffffffffffffff) 03:34:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) io_setup(0x1ff, &(0x7f0000000040)=0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xac8, 0x101000) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f00000000c0)="7347eae6cd382dce21e51e6731db54f25dc958d6c0", 0x15, 0x10001, 0x0, 0x2, r2}, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000000)) 03:34:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0xa0008000}) close(r0) close(r1) 03:34:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000240)=""/76) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xe1, 0xc8c, 0x7, 0x9, 0x2, 0x5, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x76e}}, 0x1ff, 0x6, 0x1, 0x0, 0x4}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x6}, 0xc) close(0xffffffffffffffff) 03:34:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:34:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0xffffffffa0008000) 03:34:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xffffffff00000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "4a5a294044834bc7777d7674a8086db305eb4ea60daa3cec2b6b51b4631b7e137afecff307"}, 0x29) 03:34:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3f00}) close(r0) close(r1) 03:34:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x400000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb00000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0xfdfdffff00000000) 03:34:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) timerfd_create(0x0, 0x80800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffff9c, 0x84, 0x74, &(0x7f0000000180)=""/151, &(0x7f0000000000)=0x97) close(r1) 03:34:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:34:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x7f, 0x9, 0x4}, 0x10) r2 = memfd_create(&(0x7f0000000080)='eth1\x00', 0x1000000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0xffff, 0x4e88, 0x5, 0x2, 0x7, 0x6, 0x17a, 0x40, 0x1b4, 0x2, 0x100, 0x38, 0x2, 0x8, 0x1, 0xff}, [{0x60000003, 0x7fff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x53, 0x9}, {0x7, 0xeb6, 0x6783, 0x1, 0x8000, 0x4c00, 0x1, 0x5}], "72fbf45e367dc80a2dd781cc887b8f8b27b0cd34a3e93a07c84bb3797d5c42cd10223f2effc7612a2fab", [[], []]}, 0x2da) close(0xffffffffffffffff) 03:34:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x60500000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8dffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:34:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x8000a0ffffffff) 03:34:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x5, {0x2}}, 0x18) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/121) close(0xffffffffffffffff) 03:34:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xffefffffff7f0000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0xfdfdffff) 03:34:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8000000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000080), 0xffffffffffffff65) close(0xffffffffffffffff) 03:34:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10000) fsetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)='/dev/mixer\x00', 0xb, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000000c0)=0x2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000001c0)=0x2) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0xe07000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x14280000000000]}, 0x10) shutdown(r0, 0x1) 03:34:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) 03:34:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x8000a0) 03:34:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4000000000001, 0x84) r1 = memfd_create(&(0x7f0000000080)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc822cad60cf74b97f28b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={{0x4, 0x6c, 0x80000000, 0x7ff, 0x401, 0x9}, 0x20000000000000, 0x7, 0x8fa, 0x84, 0x8001, "650f20eb1d7623431eb2c47446b1cdf19343b6583621b55143bafe6a50bce34b0ec6969c5c32370e297499f497db3d5dfdde5a55050031fa247f7668e8574fe257ff787aadbdc26cdcadf271139a8a87b7d7219d35649df9a0f49e9e22475e2e774c504940bfad36cb9270ec78dfe4f83a9e3507233260944b82ac4933c4ce86"}) 03:34:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x930000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x500]}, 0x10) shutdown(r0, 0x1) 03:34:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x1000000) 03:34:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:57 executing program 3: r0 = dup(0xffffffffffffff9c) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000180)=""/132, &(0x7f0000000000)=0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xe489, 0x64a00) ioctl$KDSETMODE(r2, 0x4b3a, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x54093080]}, 0x10) shutdown(r0, 0x1) 03:34:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) close(r0) 03:34:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xe0700000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0xfffffdfd) 03:34:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x463b1]}, 0x10) shutdown(r0, 0x1) 03:34:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x40) r2 = memfd_create(&(0x7f00000001c0)='$trusted.\x00', 0x3) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000200)=""/55) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x135000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8, 0x0, 0x20000000000, 0x0, 0xfffffffffffffff8, 0x8, 0x0, 0x0, 0x0, 0x2}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:34:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x400000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x185c14d9faeed323, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x7500, 0xfff, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x81}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0xfac2, 0x20, 0x400, 0xffffffffffff8001}, &(0x7f0000000180)=0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x100000000000000) 03:34:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa00000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x3, "3ea5aea856ccbab1"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xa0008000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe00000000000000]}, 0x10) shutdown(r0, 0x1) 03:34:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0xa0008000) 03:34:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={r1, 0x0, 0xd1, "24590c06ae853422d862d6bf60f5f193f210f70130da040117749508b4382173b4f59c12ca4224430c2c8d12595f293ca887589723e451d3db2542db2f1e63089a42607dd8b5a0438c3ed5ce99999eb6c906973e7f7d84b8cc16f29817f06c0f0f7b086af059e917d9cb3a0c957941c10ea5690b7d419d5f0a4e3bd7f886e0f31f06e28b12f8e3cd593fb6f0effbd0a2aaba48791f4b4328314dac6e4033f81a4359b696a01a6879ace606b8c0d49375710310a3cdd2cfaee26790ef271f74a25337c80ca96cba9ecefa27f6187a903f6a"}, 0xd9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x220800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x3f, 0x0, 0x96bd, 0x6, 0x3db}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='yam0\x00', 0x1f}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) ppoll(&(0x7f00000001c0)=[{r3, 0x2000}, {r0, 0x5000}, {r3, 0x2000}, {r0, 0x120}, {r3, 0x84}], 0x5, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x3}, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x4, 0x0) 03:34:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/217) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x3) 03:34:59 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xe07000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$void(r1, 0x5451) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xffff, @loopback, 0x5}], 0x1c) 03:34:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x570572ac]}, 0x10) shutdown(r0, 0x1) 03:34:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:34:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) r5 = getgid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1a) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x5, r2}, {0x2, 0x5, r3}, {0x2, 0x4, r4}], {0x4, 0x3}, [{0x8, 0x4, r5}, {0x8, 0x2, r6}, {0x8, 0x1, r7}], {0x10, 0x4}, {0x20, 0x6}}, 0x54, 0x2) 03:34:59 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x506000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:34:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x9000000]}, 0x10) shutdown(r0, 0x1) 03:34:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) 03:34:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:34:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd2595d766070") io_setup(0x7, &(0x7f0000000200)=0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400080, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', r4}, 0x10) 03:35:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) close(0xffffffffffffffff) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) ioctl$FICLONE(r0, 0x40049409, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @rand_addr=0x101}, 0x52, r2}) 03:35:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x7fffffffefff, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa00]}, 0x10) shutdown(r0, 0x1) 03:35:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:35:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7fff, 0x80, 0x9, 0x8, 0x1}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r1, 0x80}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x501000) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f00000000c0)=0x7) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000300)=0x4) memfd_create(&(0x7f0000000140)=')eth0GPL&md5sumwlan1-selinux[(ppp0\x00', 0x6) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:00 executing program 3: socketpair$unix(0x1, 0x400000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x0) 03:35:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x900]}, 0x10) shutdown(r0, 0x1) 03:35:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xffffffffa0008000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:00 executing program 3: 03:35:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x58e6, &(0x7f0000000140)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:35:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x2000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x9]}, 0x10) shutdown(r0, 0x1) 03:35:01 executing program 3: 03:35:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:35:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:01 executing program 3: 03:35:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x2000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:01 executing program 3: 03:35:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x400000000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x10013c93a) 03:35:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1, 0x66, "14593ef9c075dafe4daef9878cfbaba9dcb88ab1384e3783fd46c8ed745ddd5be342a35e22271c6b81ef4023ab3401beebeeef94d553795efd449fb5a9f94dc1839ac865ba70f1896eff35e424a8ce4d862442d2b638ba34fc80bf2b543832ea2366587968ab"}, &(0x7f0000000200)=0x6e) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) ioctl$void(r0, 0x5451) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 03:35:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:35:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300e3300000000]}, 0x10) shutdown(r0, 0x1) 03:35:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x605000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x8840) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x20070a, 0x4) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000140)=""/223) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000400)={0x5, 0x9b, 0x3ff}) 03:35:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x90faffff00000000]}, 0x10) shutdown(r0, 0x1) 03:35:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x730000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0}) close(r0) close(r1) 03:35:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2001, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000400)=0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x98, 0x1ff, 0x2, 0x401, 0x8, 0x5, 0x401, {0x0, @in6={{0xa, 0x4e20, 0x7f, @ipv4={[], [], @loopback}, 0x7}}, 0x80, 0x9, 0xe4e, 0x3, 0x5}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0x400, @local, 0x8}}, 0x10000, 0x8}, &(0x7f0000000380)=0x90) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000000)) 03:35:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x2000000]}, 0x10) shutdown(r0, 0x1) 03:35:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x4000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:02 executing program 2: r0 = socket$inet6(0xa, 0xe, 0x6) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff7f}) close(r0) close(r1) 03:35:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) close(r0) close(r1) 03:35:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x8000a0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4000]}, 0x10) shutdown(r0, 0x1) 03:35:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x1, 0x2) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000003c0)=0x80, 0x4) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000400)={0x76, 0x9, 0x3751}) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x40, 0x2602) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x7, 0x100) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000140)="0fde013f212ef1b3f73c5119a0214ad9b08c3ceb551776648db4a81c596acc98d66a6bc98993ffe45bbbc538f306bb7146c3b533e2964a72dc10c922143594820780f57513437eaeb9340d0b9f09d09c434b92678ff27bb5a1a01b0de2194512f780a06c0eb8f111ea1d1a7972d8b1e5ecd65ce278c57de60413c7a0d0e0d8f5df95adc26694ea9eb694dcb2cfa5bba36c6d15f3b3187b22314df6599a3324689477", 0xa2, 0x2f95, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf, 0x95, r4, &(0x7f0000000b40)="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", 0x1000, 0x4, 0x0, 0x0, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf, 0x6, r3, &(0x7f0000000240)="c0f8d8cbc1a6cc0432fa498c56a0203aad11a07d97f93fdfb5a1e5bbe3921e58d2cd18fbcebfd078dc89f9d3595a1e78201108c4b1f9747533626d24df57b36792250f79fcb7a251e2dee754c3d151778d6825a879d92cdbe167a7c0c358fed79292ccf0a1f11b200f64", 0x6a, 0x8001, 0x0, 0x2, r6}]) 03:35:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x3f00000000000000}) close(r0) close(r1) 03:35:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x6000]}, 0x10) shutdown(r0, 0x1) 03:35:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x106, 0x100) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000140)={r3}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) write$nbd(r2, &(0x7f0000000280)={0x67446698, 0x0, 0x1, 0x2, 0x2, "8b6602005ea06354429d332f971afa896def0cd63f8ac5219ecc7fe63ef01acd6c206ce4635c98b936364e74b8b6d59273a5af5f076ecad9d8dd30abf64c2397fbc21e8c3782ccb74061b3436a87d6fe1dd4e9e8a3ca95b451954b1803f06eebf50001f8c007c34effb93425a715eb8f81627f35afbb73a6f3ddfb92e20f3c651defb6a39de697f35befb5bed28f7b1dc26e419e16c5ac81f74bde5733"}, 0xad) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x930000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@empty, @dev, 0x0}, &(0x7f0000000540)=0xc) ioctl$sock_ifreq(r0, 0x897f, &(0x7f0000000580)={'lo\x00', @ifru_addrs=@hci={0x1f, 0x0}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000029c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002640)={0x330, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x13c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0x7fff, 0x1000}, {0x1, 0x80000000, 0x100, 0xfffffffffffffff7}]}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5ba7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r9}, {0x108, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r12 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0) 03:35:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x600]}, 0x10) shutdown(r0, 0x1) 03:35:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x2000000}) close(r0) close(r1) 03:35:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x3f000000}) close(r0) close(r1) 03:35:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x7fa8ae3e3000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x700000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") fsync(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000ffb000/0x4000)=nil}) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xffffffff00000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5455010000000000]}, 0x10) shutdown(r0, 0x1) 03:35:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x28}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200280, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:35:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff}) close(r0) close(r1) 03:35:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x500000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300954]}, 0x10) shutdown(r0, 0x1) 03:35:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x400000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xffffffffa0008000}) close(r0) close(r1) 03:35:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000004, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x420, 0x4) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) 03:35:05 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x8000000000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8dffffff]}, 0x10) shutdown(r0, 0x1) 03:35:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x8000a0}) close(r0) close(r1) 03:35:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x20000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:05 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x9300, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x3f00}) close(r0) close(r1) 03:35:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xd7128266b8d2120e, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1f, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x11000000]}, 0x10) shutdown(r0, 0x1) 03:35:05 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x50700000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300555]}, 0x10) shutdown(r0, 0x1) 03:35:06 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x0) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000140)=""/249, 0xf9, &(0x7f0000000240)=""/214, 0x3, 0x3}}, 0x68) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:35:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x8000a0ffffffff}) close(r0) close(r1) 03:35:06 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x100000000000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x16f040, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, &(0x7f0000000280)=0xc) sendmmsg$inet_sctp(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x3, @loopback, 0x6ef1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="348c95f4874ba2df663bc9fef867b71824dd3e650a70cd44da8f3c336a8aef0d68bb2f4430298d6def0ac1652041a4ab3e2cb796f351a57c36728b379e979b5002c3a036f331f852051c1bee156a46d173038e68c1cebab4cbd24f9db33a9b7ca1b3a1554aee192f473b15f1db6b40481041fe713dbfa6e421efa25b3f82e3da870012a444e08a4207f4b4243ecb65de1492c04438233ea6b4", 0x99}], 0x1, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffffffff3af}}, @sndinfo={0x20, 0x84, 0x2, {0xdd1, 0x8001, 0x1, 0x3, r2}}, @init={0x18, 0x84, 0x0, {0x99, 0x800, 0x4, 0xfffffffffffffff9}}], 0x50, 0x1}], 0x1, 0x4048000) ppoll(&(0x7f0000000380)=[{r0, 0x8}, {r1, 0x100}], 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)={0x9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x300]}, 0x10) shutdown(r0, 0x1) 03:35:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xd30b3080]}, 0x10) shutdown(r0, 0x1) [ 532.547865] audit: type=1800 audit(2000000106.660:39): pid=22624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=17424 res=0 03:35:06 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x60500000000000, 0x0, 0x5, 0x0, r1, 0x0}]) [ 532.631207] audit: type=1800 audit(2000000106.750:40): pid=22624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=17424 res=0 03:35:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pwrite64(r2, &(0x7f0000000140)="2c309167af08d630d975a8b80ddaad6ef88f3414b39ea0c4d090d0b3f5a9232628234d8aabd0b76db87cd1880809ef8d5a777f52c36618d88ef6f70463e6bf817bc8750f15779b565fd78682b45c9696810d680a5037447d36bb152d993794b443ed47dbc602d8b346616a29aab21e583ef2923636dbec45a276e5575a43bb90f77a4bcf5f5683eab4c511601a9860cb51ec5da0b8deaeb5731487bcdf522b44e5b23c48d7e3e5", 0xa7, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:06 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x2}) close(r0) close(r1) 03:35:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x7, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x10001, 0x0, 0x9}) 03:35:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x56013080]}, 0x10) shutdown(r0, 0x1) 03:35:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x200000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x200000000000000}) close(r0) close(r1) 03:35:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xfffffffe]}, 0x10) shutdown(r0, 0x1) 03:35:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x7300, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xa0008000}) close(r0) close(r1) 03:35:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x200000000100) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400800, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x301080, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x23, 0x2c, 0xe, 0x11, 0xb, 0x1f, 0x6, 0xef, 0x1}) 03:35:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}) 03:35:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xfeffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:35:08 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x705000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) close(r0) close(r1) 03:35:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000b5163f058de7f3f49f91df55cfcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 03:35:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb1630400]}, 0x10) shutdown(r0, 0x1) 03:35:08 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x70e000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchdir(r0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f00000000000000}) close(r0) close(r1) 03:35:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe803]}, 0x10) shutdown(r0, 0x1) 03:35:09 executing program 0: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x1}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xc5, 0x7, 0x5, 0x8]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3}, 0x8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:09 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x20000000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1d) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000200), 0x80000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x40000, 0x0) r4 = shmget$private(0x0, 0x3000, 0xa40, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) connect$l2tp(r3, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0x74, @local, 0x5}}}, 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x281400]}, 0x10) shutdown(r0, 0x1) 03:35:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000000000}) close(r0) close(r1) 03:35:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:09 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xf401000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000a0ffffffff}) close(r0) close(r1) 03:35:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x490000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3b4d566000000000]}, 0x10) shutdown(r0, 0x1) 03:35:10 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0xffefffffff7f0000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5630, &(0x7f0000000000)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa0008000}) close(r0) close(r1) 03:35:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80042, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000140)=0x6) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:10 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x8000a0ffffffff, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe8030000]}, 0x10) shutdown(r0, 0x1) 03:35:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f000000}) close(r0) close(r1) 03:35:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000780)=0xfffffffffffffecd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x5, 0x800) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000440)={0x10, 0x2, 0x7}) r3 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_procfs(r3, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) r5 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r5, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r5, &(0x7f0000000000), 0x4000074, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73797a308c", 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r7 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r6, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x8, 0xff0, 0x8e, 0x1}, 'syz1\x00', 0x24}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 03:35:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) [ 536.563955] tls_set_device_offload_rx: netdev lo with no TLS offload 03:35:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x240]}, 0x10) shutdown(r0, 0x1) 03:35:10 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x730000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) close(r0) close(r1) [ 536.651253] binder: 22855:22859 ioctl 405c5503 20000140 returned -22 [ 536.746456] binder: 22855:22859 ioctl 405c5503 20000140 returned -22 03:35:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000200)=""/150) r1 = dup2(r0, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x10b000, 0x0) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='user.syz\x00', &(0x7f0000000380)=""/130, 0x82) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) chmod(&(0x7f00000002c0)='./file0\x00', 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000ddffffffffffff02000000000000006d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000027c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002780)={&(0x7f00000005c0)={0x2198, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {0xe}, [@typed={0x8, 0x5, @fd=r2}, @nested={0x10e8, 0x40, [@generic="936a0c2a5016065cbccbe6bd4e01f8162b91e3deba9453d14c283a1c6ff193884d59d1d8b9dc37cddfc6a35f284fa7c21a8dd81ed57373d880f068f72d06ee366171977d0ce3d7ce2523f92ffa42239e825aae30533db0c57dd9715ede20784d790dea8e24aac34c1ead9c13c01a862a03c945c8a9d74df9094c", @typed={0x1004, 0x83, @binary="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"}, @generic="40c70309c73fc73c13722cc6f0e3f389275d421ff9950b4a438fc4f71f3deddaebd19ad88ff250789a2f5efb89f4066600578c8e3307a5b9282928136159e5c156bb0f805a44f74ad823caea76c96299ca91a329385500c425030130a38bfd31909db09de4df"]}, @typed={0x8, 0x86, @uid=r4}, @nested={0xc, 0x2d, [@typed={0x8, 0x10, @pid=r5}]}, @typed={0x8, 0x4c, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @typed={0x8, 0x66, @u32}, @nested={0x1008, 0x13, [@typed={0x1004, 0x73, @binary="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"}]}, @generic="06e02b2edf4621c860808e8fd2818c14856d21114fa800a4abbc7afe66a2ed16e15f7a31d6569c26552104bef556fa7b9b1682e0b4239b1a91e65e67f5080ff9b0cc438abb96882a583db0a8ec04315b6f696e9489eea5bc7f7fc088a252e718130326ee1695"]}, 0x2198}, 0x1, 0x0, 0x0, 0x4}, 0x44040) r6 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000080)) accept4$bt_l2cap(r2, &(0x7f0000000440), &(0x7f0000000480)=0xe, 0x80800) 03:35:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:11 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x303eaea87f0000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5580]}, 0x10) shutdown(r0, 0x1) 03:35:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4200, 0x0) memfd_create(&(0x7f0000000180)='&/\x00', 0x2) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40800, 0x0) r5 = pkey_alloc(0x0, 0x2) pkey_free(r5) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f00000000c0)=0x2) prctl$setfpexc(0xc, 0x80000) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000000000000}) close(r0) close(r1) 03:35:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x700]}, 0x10) shutdown(r0, 0x1) 03:35:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff7f}) close(r0) close(r1) 03:35:11 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x507000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:11 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:35:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb]}, 0x10) shutdown(r0, 0x1) 03:35:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000000}) close(r0) close(r1) 03:35:12 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x8000a0ffffffff, 0x5, 0x0, r1, 0x0}]) 03:35:12 executing program 3: 03:35:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffffff7fffd, 0x1000006}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) rt_sigtimedwait(&(0x7f00000001c0)={0x2}, &(0x7f0000000280), &(0x7f00000002c0), 0x8) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r0, 0x85) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2000000000, 0x10002) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x3}}, 0x1e) r4 = socket$inet6(0xa, 0x5, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') dup2(r5, r6) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fsetxattr(r4, &(0x7f0000000140)=@random={'trusted.', '/dev/input/mouse#\x00'}, &(0x7f0000000180)='/dev/binder#\x00', 0xd, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14) 03:35:12 executing program 3: 03:35:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x2]}, 0x10) shutdown(r0, 0x1) 03:35:12 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x400000000000, 0x5, 0x0, r1, 0x0}]) 03:35:12 executing program 3: 03:35:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) close(r0) close(r1) 03:35:12 executing program 3: 03:35:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x91ffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:35:12 executing program 3: 03:35:12 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x400000, 0x5, 0x0, r1, 0x0}]) 03:35:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'nat\x00'}, 0x28) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x3, 0xa2, 0xffffffff, 0x3, 0x0, 0x4, 0x44000, 0x7, 0x800, 0xc24, 0x8, 0x3f, 0x9, 0x8, 0x5, 0x4, 0x7, 0xfc0, 0xfffffffffffffffd, 0x7fffffff, 0x1, 0x1, 0x0, 0x6, 0x400000004, 0x8001, 0x7538, 0x100000000, 0x6, 0x187, 0x1000, 0x4, 0x0, 0x3e, 0x0, 0xc3, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0x4, 0xfff, 0x5, 0xaef, 0x1000, 0xc9}, r2, 0xa, r3, 0x3) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8180, 0x0) 03:35:13 executing program 3: 03:35:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000a0}) close(r0) close(r1) 03:35:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x142800]}, 0x10) shutdown(r0, 0x1) 03:35:13 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x100000000000000, 0x5, 0x0, r1, 0x0}]) 03:35:13 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x800, 0x103040) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000240)=[@register_looper, @increfs_done={0x40106308, r1, 0x4}], 0x8d, 0x0, &(0x7f0000000440)="55960917db41d64a2fd5ce2d3aa6b745b218a95887f1173b74e72fb1ed3a3e194363bb3ae9b56f3f3b446a3ddd1612b8b3133d43b8b63c0094278b5555170376f3f52105c1e90703f07098802eb8bc5935a3d036c106765449bfae5310f042f09112689f8c08481973323e070c3966c354c0cd66f914e085a9b3609fbabe708a4dac3a6b1ba05264ccfcfdf8b2"}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x101, 0x80000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x3, 0x8001, 0x2}, 'syz0\x00', 0x22}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x69, 0x20002) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x14) r5 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)={r4, 0x1000, "8f460f6ead788044cc361f183ddb171189c812cc579c526caec9a07a144b76b186b6a23ec7d6597c5ea2598495657f9a70c77cafcc11dab7adb0b68145736149e50201b9f251ffa5c73d25bc53b75528b35b6caac05478411dcfffa1348e4949c564175ef356a034209416ffc127d87afbfbb123e9fb4c277d2070b55b838b5a483d8d0ca26f862a7bdbd8107832fab81da4d587ce75de735b41270ebd75d8e7fc85923aae289cf066ebe28446c7f9f7be550a1f1670f142ce7a5cb139bbc35f9825912062a48562fec6fc1fa19719020de1ed227e45e501e770d02151af65758c7d2574343164f726e65da731aaec6b66cb4828d2a4c1a91790d91e474f09ada83c8f0ce1b7ffb03c07e1a574ede720ac96c580746d70b7cfcb82db594afbaa71dea9094c653ddcc8dd1fafe70e9a9bc150bb6326ca45768ac1a2140d341027b7afe6bb107c2a3efe14d67b446f39f93f57fe09d89b23a06d9b19ef7c197ba987d8833eb3150762ccacb865bab1802483e4f74965f0180b857c5aa05ba15b38b670a02eae05509af5053290984e5fb7c7a1faa4f3e81ca312a6ed27f1663a78f8fc0f9275cf07e199b3e26d97c0e30742087570b79b0e1c5702fa4e5279e048ab7474e05f9426962a45ecfc0f98a554f663bcbb875f3f6867105697f436441ccf9c1bc3e0114f79c794a8090a2742d0fbf2ec3b50709a963bdb5fcbb55f1c653589c94d2df9f101b80741149a0c807d34d30899d78b949edb9c6531bba588b38bd640f67f1b293f7a51706128d686c674b6573d9d492a749f4881ed276a8b9bbe0b76a431aad88d86b35939a48191098d3b11c6e840bf2e26461f08035341c93f4fc6ac8259dfefd68db456cb942b05729aa4dbdb0681b62c6d26ccb0306307da2623be1fbe6d77adde00ef05db3bccff331f6c4088bdfd4bab867803f99744bac95aedf5f28de3e1376341df468eedd465a6d0e7ee1125b0995417fce10aa96c5a6768c757cf2eb06d02bc762bf3db435d985ddbacbca3b69bfa487f9af3ed92836f5e2a0e89bb433f21cecaefee62c1a523ea38be85aabbefa3667fe20e3f558e2d9b64ec6100811e60a592af56dabb3fa9e0bd1e3bc07c14b97bd05e6b19a3c6f36b3d5ded9264d8bc07c8d4a8959478f8be3c651d10b04a72c1108d4c1343992b8b6e0241515bfcefb39814d5f16706334949f353f01d5fd2a088ad2e3a461d48f27ee7f1fc3607eb93f5ea74ed5f04cf3b19f311aebb58680da0c73e9ce41ba3f04019e24a934c1c0eda4acb255796894a896434f73850f30e241602f37be6ee2fe96ac7bb112127cbe73cf2d79cb8d333881893fb7ffa27df5b5bf016c657a45ae5ef50ddd168fe0fc97c068e8d63a3cc59df6355ab0a0e5d5dd263aa4be48b46622b46b1a9e92b9296de51ba8f8c27624747b19b62316712340468e75ed13899ba40a01e5e9e5d3a2662ea5147cbffe4377308b9037c6cb21f72f7024f2f200875e3b466056810c81375b3617c5f817bca7dc554a3bb6fb13d0df17831b03cd8d08bdee5a558547de8535e480530d57bfc08987d2cbac7a512b47a0b7b315361423bf50bf75f746cac092b630d4eb61f7e1286cd999c39a6397d9effc3a0fb4f5743338b002bba91e4268eb3533b58413a6a8e8192153a447865e68930ce3abbf461f2bbab9289978fb51f902e8cacd770a899ed0131292a1f280531266265558c670869883350f374866063b06b327f6167a57d4bf835af3f2c83e0b4b021c38bc6571033acf91338999e63dd6a50cbcf1f28915d30622e8c2d220c83ea7a1c55d42b93d3c5734659c3f23c4c05a12087cb6550b8b2b5591c310c56abae34c63c07a1b8260538e3de134d3b5fe88cfbb432876b01ffb09062076345e4ebbeac8953380994c48a3aa02c6fb21d559b759755369ad448bed35ff792b3d632cb3a675d09199b8c605954698f354a2412107f7efb7120b0da44cb1822ce2901baf37d6ba5eba556a3027be1123278bc5e37b47554e3d573edca1f3139d14c7ec6c7437bbce97e82c8d3594e574e90641784af4751101a7d331245bdf065ad767f2bbf62a5cff4edc41e1593166536f59e7f499d16c3c1f141f0bbb323447e545c739844b238ca68060ffa0b52db773efaab28bfbe8f6027ba1d293b8c1949cc9a393696db3ab384fb496b7f05bec5561d0235e8d0aa8dfaa4cea14ad9b894f05f870fd8a936b9b7c27ed522bf99ba4f7b8da6a05c4dc3346395b542bd981fea2fee27fbe430552c92466eb4c1f2d20c4e05f43bef9a3afbd6be3e0913ce8356ef55b5377494383183e5364a48da7ed61702ad70160c95083f7fcb4b6bdf646b2d88f434e401d93179eeba7e799e2dab7c847143c048a61507e10f6c5944e3b4952fc3935af93b29f0d51e7d793f0222fac3cfdbf8e8a34527db88d459d280e3c559bfa453496f8feae01b7020feb46496fd3e452f3e6b2e94fd9cb393da053145f6c27c2817ef7c8325174966767fd79696dd27c6454d04ac7f75e19582a9b2f9ef0d1a7a6922eabe49d348cbbba6f6a30ae2cf84dc6bdcaf1b7271b12b212aaca96a3d5259dedeee195402ad8a23c670c1efb456f42eee6702ab5903734adc130654fdb08ff9bd489b2e53a69b036fb6fe0e508d4160b75b1e7491c044dd4d29a3da1fcec25fae42308230455fd3247676211a882d47ee8b9f1642a1f489b29c54094f293d12cdeb1e931986cac7f166e2ba7ca0e5008ac1dbf51dc45e8aeb5706d8a94d540d304fa80d7f1e779a7e292c84fa2d2f42f9fd50cdb0305071cd5d6220d9f59475039e7c45180aa4f792f445d7bb1674fa4ad4b5f83e3e4aff6e571469e331d5940f300fdfafe60b966469f96b165ffe8adc46a256511bb3f5469ed9129a1044c715d806cdcc2f26e7c036a9375f2b95e655fd0406c3ae79312622626d889f79ca30fbc5ae88d6e721c0a9f5468101144b1fcea9cc77472bde80390905a1ec205d35fe610efd347ab145873bc6128d11b7b3db72d6ba6df0679ea9ec95e98b40c65c01c79d794f869bfa4f5e8caaca5cbd047ce37a5be9d95032ab854eca5042e4096d60c1d6dc5b44044043f4659cec727563a16050b2a5b5f6e08ede9eacf61293d03090b70f966bd8f14b42c8438750e4ef8eb1204ea2cd89d4de64f98e6661c5de339b168baf2689cf0ad337e68b9cb4836ac7b0f76f0f251ae97abcbcf0a573398e3472dd6cf57cf3c857292cd7eb9cf0407c38f4cac02b932c8cc6109b287bb2651fd0901dd5f0096eb50b82b389eff160da279faf09ac1af54d8ba89b25d035197527c162ddc82460a89cc60ba75e2e97784263dc1966b66b716f98f190ce45e6f233eec70374161730cbe7392509b47342a480dd2cab349456417baffb76fcaebba27614e60aa98bbc19c6f71d757773384fa571b047a4ba9cde04a83aac1dd1e627e60da0c0f39b39a4bf7f314b0c18bac44a2637570b9440a5f595a9bb1192f406ecb6156cf5eede6bdf0dad6eb145c151fcece3947ccb6b118ba336921471bff68021c64400f5f9ed26d654ec65f5753c0a1462c3ddd85afc75f85987d316844e7bbf607607d5651aa1bd7a674f2fabf8d067584c83cb72a47e3a083b44fdc09bb08f49ea581826b9f6529425cc8016502002ea32522a47ab9ff8b7286b3678e5cb9742fef2f2b064ffa3e6f9862e57b471c1d135dd8d44d9725b1ad76e0d475f4ef94082602282d16d22cdd7709c370ee6e40da14e29b1400fae4ffd10824072ca679e62546cf381d76205f97a0372691ba83a086d16135c939027183a26fc0f36c731593deb3b9df34fc70955ea482d53c48ddac9f93c26c51cb42fad1a16ef3ffb6bbe93d1a7ceb6ac48852de84c62f65354be598bd76aaca66aaf364fbe11d797e733f20976356d48a7b2768ecda8d0d15472c94fc04a2f0be0c24d27cc52974f19a307d23ef6e9e86ebd28336736f331b54004e5731210b4504b97e0e7bb8f3b404998c594b62cce1ef7caf61e0e3d7e181dc9bc11b520581873596796a100478bba3d25622d373cad3a9333e66f54dabc5ce76cae6d54a5161f88baa03521663dc4fe35b771b15ef70b18ea463b290e25d4afece9926c969e803c906cc72bbcd4170f043534f4999e405eebaadf21d414b858a2f79c1dfc333b12f02a34ccf9705e6916b2da673aee55b0b3685feb502ee8c5af5ad38e831d0def481d37f45639a4f2f9c4235fea2669a3f0be96cc6ba7a053e913237eb2224534e98bc376dd5efd4a15a59e61c91be2226f9f648287df8bee8fe87adda8f5c5835cb5b3b57191480d03f380c96157ecda08ec1678cea624384777338b93a3804f1d3a53ed099dab2ee3515320be2302905831e3a873d0bd1403d61f596361326989ed9f2f04c21913c2aa388c75447e69cfa3a1b6630b69939722d82591c380511881622fb450c4314c86502ace0c664f33b2719d79b3c09070d935abb9993c08d885f6ca72f87decd6a6dfe401bb6a0052e08dca16ee274156afd52cabc20a77d6d0767763d207aa0906f63f03f6b96969a59cf69d2e4decadef253682125d63f712b6592cd28e0a4880c8f65c5a8da92756031b01f788cda43ad4d2afe737ece46289fe6bcefc0c466bea8583ab9d48a653a66bb1e6cb135e72382e89e155081f7ed62bb4e11c76292cdbc9a5b14aafcc890878434b5b414a29b89d7e910407f1f72b11e48d39f6df162ee0d418d1689c7f31a641c8f636064dfef98a6d59514f6a087b8fa6c2c78b3843670115d8c03732bd7083768c68d40cd9436d3792a535213af0d006123bd18d0bc0944eecb3b94e7593e4f555a9a55f97047a1aa34636ef41acddc24c8524260604c9b1643327e6c375e390c13afe8bc637fc7515d296f4e1d555d02c4da483e711d9e6553d5d46255033c0b97359775b9c56227e74099ec60333612c82a31ea0832e8d2a47a9333cc57e00817af4daed5e95dd961e15ef82bff019078c03d82e6e71f0452297c4845d1324279f03e288e7b9bebd8e73db1fa0dc0f4fe1c638d9731ddf9209717f6a265a9ca7cbd1fdbb5ee6b2a193cd037e5eb2e73e55066e89a3c4e834f4c688c397b985e023090294e003194cbaf35ff60e053e120cdca5afc7146c90c8f1b3ed905a1b9451af0516ec5cc6993575ebe82e02cc84905b54d53a9a5a129a924b990996f43f5ab205199f64149d0aee0c3b7e31902438fbf87f56287caafc771997b57c9bd74f5c43806966fb1bed20c716c737fca484e436183b7c7adee47538ab44e0be63c3707ca978d559376dbec075daa1f7f206faa9a12aa8bc72b2267a3c3fb7f4f29d5cd8c95a1d6a9603cda0feafbefbed5720d3beee1affdde9ffa3b998ae185b5d3cd805da307b671cf30d3be82f1ace31a6fa218cdd722727330fd1bdce29fbfdd1eb6f5c857a42891b28d897f8e8a7ef4c99f318b8745cc8ead11f80563ab5e28fdb40398bfbd418574f862f66b692268ef488178ca161f30e9acaa7f5d152707f14d338a96a75b047c7dfa1727792be7e8bcebc9da77666bf7e642b7a5d0dceba14f254cb9f610391be5d7e96d0eb1e70e0e6edb7357d398a1fb37d4628c72b86f9f109c381cefa668095275b3f626288a0ab817f3ebc521fdd379a3ec4647890be7a85730f201405b0287b4bf3f934517b3c3ec6c20df0bc33545acff7a1976592ae1b444c03a8a168271902037a16c463dc930b819ebde99115e13f8035ebe3e70bbb642fd274dde0780e68da66ffe123e9dfc086b8c563185e6ea9"}, &(0x7f00000000c0)=0x1008) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 03:35:13 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7a6, 0x196, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) 03:35:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffa0008000}) close(r0) close(r1) 03:35:13 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7a6, 0x196, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) [ 539.065170] cgroup: fork rejected by pids controller in /syz3 03:35:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x101, &(0x7f0000000180)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5c00]}, 0x10) shutdown(r0, 0x1) 03:35:13 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x605000, 0x5, 0x0, r1, 0x0}]) 03:35:14 executing program 0: socketpair(0x15, 0x6, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x800000000000}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x100000000000000, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x8002, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}) 03:35:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f00}) close(r0) close(r1) 03:35:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8]}, 0x10) shutdown(r0, 0x1) 03:35:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000140)="153fbb620ecd840390c09879") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:14 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x9300, 0x5, 0x0, r1, 0x0}]) 03:35:14 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xe07000, 0x5, 0x0, r1, 0x0}]) 03:35:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3]}, 0x10) shutdown(r0, 0x1) 03:35:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) close(r0) close(r1) 03:35:14 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7a6, 0x196, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) 03:35:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2202, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:14 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xa0008000, 0x5, 0x0, r1, 0x0}]) 03:35:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb000000]}, 0x10) shutdown(r0, 0x1) 03:35:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000140)=""/4096) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x1) 03:35:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x5, &(0x7f0000000040)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000, 0x0) io_submit(r1, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xd8, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}]}, 0xd8}}, 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_GET_STATUS64(r4, 0x4c02, &(0x7f0000000200)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:14 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x7fa8ae3e3000, 0x5, 0x0, r1, 0x0}]) 03:35:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xff0f]}, 0x10) shutdown(r0, 0x1) 03:35:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1100]}, 0x10) shutdown(r0, 0x1) 03:35:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208002, 0x2) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f00000000c0)={0x2, 0x3f, 0x9, 0x4, 0x1, 0x1f}) 03:35:15 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x20000000, 0x5, 0x0, r1, 0x0}]) 03:35:15 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7a6, 0x196, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) 03:35:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:15 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x705000, 0x5, 0x0, r1, 0x0}]) 03:35:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x200000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101002, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0xffffffffffffbc4f, 0x4, 0x2, 0x2}]}, 0x10) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./file0\x00', 0x20) iopl(0x9b61) 03:35:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0xffff, &(0x7f00000000c0)=0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffff9747, 0x40, 0x2, 0xfffffffffffffffe, 0x3, 0x7fffffff, {0x0, @in6={{0xa, 0x4e24, 0x380000000000000, @local}}, 0x4, 0x2, 0x0, 0x5, 0xb4c}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r2}, &(0x7f0000000200)=0x8) syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x9, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:15 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x303eaea87f0000, 0x5, 0x0, r1, 0x0}]) 03:35:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x570572ac00000000]}, 0x10) shutdown(r0, 0x1) 03:35:15 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x730000000000, 0x5, 0x0, r1, 0x0}]) 03:35:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:16 executing program 3: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000400), 0x2) 03:35:16 executing program 2: r0 = socket$inet6(0xa, 0x100000000801, 0x0) ioctl(r0, 0xfa5, &(0x7f0000000000)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:16 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x60500000000000, 0x5, 0x0, r1, 0x0}]) 03:35:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4002]}, 0x10) shutdown(r0, 0x1) [ 542.130898] misc userio: Can't change port type on an already running userio instance 03:35:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) semget(0x0, 0x0, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7}]}, 0x9c}}, 0x11) socket$inet6(0xa, 0x7, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TIOCMBIC(r2, 0x4008af23, &(0x7f0000000040)) 03:35:16 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0x5, 0x0, r1, 0x0}]) 03:35:16 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x1}}}, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl(r2, 0x7, &(0x7f0000000640)="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") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4]}, 0x10) shutdown(r0, 0x1) 03:35:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@metacopy_on='metacopy=on'}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 03:35:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe000000]}, 0x10) shutdown(r0, 0x1) 03:35:16 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x4, 0x5, 0x0, r1, 0x0}]) 03:35:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = semget(0x3, 0x7, 0x40) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_destroy(r1) 03:35:17 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x80001, 0x0) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x550, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:35:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x5, 0x0, 0x6}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0da38cb6b0b00fd956d7ea988ac7d67dfaddbd1a53b74ea24beb56a4008c92d27b88760b0c1a9abefbf68c24fd2ac4196c0f51affdb4710af4da771961f482bde0ed552e4658b4847e72acc206a4ea61808f666a7fe779344cc7c0779f1ec687c7c85738252232fe39663d7fe047dc74f8df6ce5589cd39ded361bef6eaaa87a17891146bc861717a29f7e594b30ae3a198fdd9dbfc06a0ad87f495d8ee3065f8ddb2a72031b4281e6eda7e8e25e504ecb496479512616dcc02ca6faebb10c2655e23a05205a67bcc3b933e1af3409c5cef802f7e69daf92c73b03d200345766096abdc421046ac050ac69158cd594cad8", @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0]], 0x145) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x80000000, 0x8, 0xfe3b, 0x31, 0x4, 0x100, 0x7, 0x80000001, 0x10001, 0x1, 0x10001, 0x3f}) 03:35:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xff0f0000]}, 0x10) shutdown(r0, 0x1) 03:35:17 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) close(r0) close(r1) 03:35:17 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x930000, 0x5, 0x0, r1, 0x0}]) 03:35:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:17 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000cd, &(0x7f0000000b00)) io_pgetevents(r0, 0x2, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000000c0)={&(0x7f0000000040)={0x3}, 0x8}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:35:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x11) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x80000000, 0x3, 0x5, 0x1, 0x6, [{0x80000000, 0x1f, 0x6}, {0x8, 0x2, 0x100000000, 0x0, 0x0, 0x200}, {0x7f, 0x3, 0x71, 0x0, 0x0, 0x1}, {0x10001, 0x1, 0xffff, 0x0, 0x0, 0x800}, {0x100, 0x7fff, 0xfffffffffffffe01, 0x0, 0x0, 0x2884}, {0x8, 0x1, 0x8, 0x0, 0x0, 0x801}]}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:17 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) close(r0) close(r1) 03:35:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:17 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x400000000000000, 0x5, 0x0, r1, 0x0}]) 03:35:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5000000]}, 0x10) shutdown(r0, 0x1) 03:35:17 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000140)=""/118) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:17 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) close(r0) close(r1) 03:35:18 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xffffffffa0008000, 0x5, 0x0, r1, 0x0}]) 03:35:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xe00]}, 0x10) shutdown(r0, 0x1) 03:35:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:18 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xe0700000000000, 0x5, 0x0, r1, 0x0}]) 03:35:18 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[{0x2, 0x8001}, {0x3, 0x5}, {0x0, 0x87}, {0x0, 0x100000000}], 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x102) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:35:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x6000000]}, 0x10) shutdown(r0, 0x1) 03:35:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:18 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xffffffff00000000, 0x5, 0x0, r1, 0x0}]) 03:35:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0xe7, 0x9, 0x1}) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xffff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 03:35:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc000000]}, 0x10) shutdown(r0, 0x1) 03:35:19 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x506000, 0x5, 0x0, r1, 0x0}]) 03:35:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000006, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5400]}, 0x10) shutdown(r0, 0x1) 03:35:19 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000000000000}) close(r0) close(r1) 03:35:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x11]}, 0x10) shutdown(r0, 0x1) 03:35:19 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0xffefffffff7f0000, 0x5, 0x0, r1, 0x0}]) 03:35:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4002000000000000]}, 0x10) shutdown(r0, 0x1) [ 545.289021] IPVS: ftp: loaded support on port[0] = 21 03:35:19 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x2000000000, 0x5, 0x0, r1, 0x0}]) 03:35:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x5018eba7) r1 = syz_open_pts(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="2695bbeb70f55c32f78cbb81cf8b49cb91d8c73c1a14fb3abfd1df99a68775ebf09a5991fc7e9fd282529b8136bb68346805d35ac386f12989e1156c9208aaab2b1474aa6d746f3bc04078eeb8d73bb264e64c81ddd43062a70cd067c08b550e31791c78ae981f12c80d7901c1f8896a124bf24c3f2b7e3c4c4366bad8d8a3d2a7a3577d5f4f301156b191b2", 0x8c, 0x4000000, &(0x7f0000000900)={0x11, 0xfd, r2, 0x1, 0x9, 0x6, @dev={[], 0x13}}, 0x14) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x400) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000000c0)={0x80000001, 0xc1e9, 0x1, 0x3}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 03:35:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x800000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f0000000000)=0x54) 03:35:20 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x50700000000000, 0x5, 0x0, r1, 0x0}]) 03:35:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb163040000000000]}, 0x10) shutdown(r0, 0x1) [ 547.202135] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.208651] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.215568] device bridge_slave_0 entered promiscuous mode [ 547.350838] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.357247] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.364376] device bridge_slave_1 entered promiscuous mode [ 547.393415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 547.421607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 547.695022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 547.726514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 547.902398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 547.909334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.936883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 547.943797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.062606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 548.070463] team0: Port device team_slave_0 added [ 548.252020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 548.259450] team0: Port device team_slave_1 added [ 548.285795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.340268] device bridge_slave_1 left promiscuous mode [ 548.346258] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.382782] device bridge_slave_0 left promiscuous mode [ 548.388635] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.510369] bond1 (unregistering): Released all slaves [ 550.529125] team0 (unregistering): Port device team_slave_1 removed [ 550.540350] team0 (unregistering): Port device team_slave_0 removed [ 550.552429] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 550.602083] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 550.666710] bond0 (unregistering): Released all slaves [ 550.735864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.759295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 550.766989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.776203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.804088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 550.811391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.820194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.283948] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.290408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.297081] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.303525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.313318] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 551.737975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.704964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.798201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 552.888048] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 552.894185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.902120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.992060] 8021q: adding VLAN 0 to HW filter on device team0 03:35:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000780)=0xfffffffffffffecd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x5, 0x800) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000440)={0x10, 0x2, 0x7}) r3 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_procfs(r3, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) r5 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r5, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r5, &(0x7f0000000000), 0x4000074, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73797a308c", 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r7 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r6, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x8, 0xff0, 0x8e, 0x1}, 'syz1\x00', 0x24}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 03:35:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(r1) 03:35:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x4000000]}, 0x10) shutdown(r0, 0x1) 03:35:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1) bind$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x6, {0xfffffffffffffff8, 0x2, 0x73ab, 0x7ff, 0x975b, 0x2}, 0x2, 0xfffffffffffffff8}, 0xe) 03:35:27 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x7300, 0x5, 0x0, r1, 0x0}]) 03:35:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000780)=0xfffffffffffffecd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x5, 0x800) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000440)={0x10, 0x2, 0x7}) r3 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_procfs(r3, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) r5 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r5, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r5, &(0x7f0000000000), 0x4000074, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6370752f73797a308c", 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r7 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r6, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x8, 0xff0, 0x8e, 0x1}, 'syz1\x00', 0x24}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 03:35:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3f00]}, 0x10) shutdown(r0, 0x1) 03:35:27 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x7fffffffefff, 0x5, 0x0, r1, 0x0}]) 03:35:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x1) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) close(r1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) [ 553.748629] tls_set_device_offload_rx: netdev lo with no TLS offload [ 553.768227] tls_set_device_offload_rx: netdev lo with no TLS offload 03:35:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x11) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 553.849992] binder: 23700:23723 ioctl 405c5503 20000140 returned -22 03:35:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x11256dc5]}, 0x10) shutdown(r0, 0x1) [ 553.896153] binder: 23706:23728 ioctl 405c5503 20000140 returned -22 03:35:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x0, 0x10000000}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa00]}, 0x10) shutdown(r0, 0x1) 03:35:28 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x930000000000, 0x5, 0x0, r1, 0x0}]) 03:35:28 executing program 0: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x730000, 0x0, 0x5, 0x0, r1, 0x0}]) 03:35:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000001c0)="2f6386e3091642a4270f8a8228011c12183938ed4a7b7ec6da2b4900854f6f143be784e349062a36d45489aa3360c7a45ceabdb2eb0d6a3649e44b9810f15291b10d395ea75648d142a97ff620840e1a833c11d9f3b80e95b394384a5b44cf2447e975b00cd858eb26fb542c80850cbba803eff559f1af78321617") io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:28 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x4000, 0x5, 0x0, r1, 0x0}]) 03:35:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x8000, 0x0, 0x7, r2}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 03:35:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x8030015600000000]}, 0x10) shutdown(r0, 0x1) 03:35:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) close(r0) 03:35:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x40, 0xb77a}) close(r0) close(r1) write$UHID_CREATE2(r0, &(0x7f00000000c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x7d, 0x4, 0x81, 0x2, 0x2, 0x1, "6b60c7af20f28db4113b3deadad642e0e8b4cbe8dd560b2988f0c9dbd4e8faf3d247b8260da7249725a2d2ab139cb5aed7c311d9c77d14cb20a7bfbd76a0ded5fa6d4ecd6d58b1c5260996e3e3feb09d83b6ad838833a63bb1462e8526eadc331946775cf0e9419bfad5f50468be3384b88fda492f5df79a22b18a19af"}, 0x195) 03:35:28 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0xffffffffffffff7f}) close(r0) close(r1) 03:35:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x40000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0)=0x3bc, 0x4) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:28 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x4000000, 0x5, 0x0, r1, 0x0}]) 03:35:28 executing program 0 (fault-call:6 fault-nth:0): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x3000000]}, 0x10) shutdown(r0, 0x1) 03:35:28 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0xd3, &(0x7f00000000c0)=0x2, 0x4) r2 = socket(0xa, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x89fa, &(0x7f0000000000)={"7369743000008000000001e400000002", @ifru_ivalue=0x907000}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:28 executing program 2: r0 = socket$inet6(0xa, 0xb, 0x6991) ioctl(r0, 0x8912, &(0x7f0000000700)="df036234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x180, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0xffffffffffff8000) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$apparmor_current(r2, &(0x7f0000000140)=@hat={'permhat ', 0x0, 0x5e, ['/dev/binder#\x00', '/dev/binder#\x00', ':trusted}\x00', 'system-&)/cgroup\x00', '/proc/self/net/pfkey\x00', 'selinux\x00', '/proc/self/net/pfkey\x00']}, 0x82) [ 554.560314] FAULT_INJECTION: forcing a failure. [ 554.560314] name failslab, interval 1, probability 0, space 0, times 0 [ 554.583672] CPU: 0 PID: 23797 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #71 [ 554.591006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.591013] Call Trace: [ 554.591042] dump_stack+0x1c4/0x2b6 [ 554.591067] ? dump_stack_print_info.cold.1+0x20/0x20 [ 554.591083] ? lock_release+0x970/0x970 [ 554.591102] ? arch_local_save_flags+0x40/0x40 [ 554.591130] should_fail.cold.4+0xa/0x17 [ 554.591152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 554.591167] ? get_pid_task+0xd6/0x1a0 [ 554.591183] ? lock_downgrade+0x900/0x900 [ 554.591200] ? check_preemption_disabled+0x48/0x280 [ 554.591219] ? graph_lock+0x170/0x170 [ 554.591243] ? find_held_lock+0x36/0x1c0 [ 554.620600] ? find_held_lock+0x36/0x1c0 [ 554.620648] ? ___might_sleep+0x1ed/0x300 [ 554.620667] ? arch_local_save_flags+0x40/0x40 [ 554.620685] ? kasan_check_write+0x14/0x20 [ 554.620733] __should_failslab+0x124/0x180 [ 554.620754] should_failslab+0x9/0x14 [ 554.676304] kmem_cache_alloc+0x2be/0x730 [ 554.679584] FAULT_INJECTION: forcing a failure. [ 554.679584] name failslab, interval 1, probability 0, space 0, times 0 [ 554.680480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.697198] getname_flags+0xd0/0x5a0 [ 554.701021] user_path_at_empty+0x2d/0x50 [ 554.705254] path_getxattr+0xc3/0x1b0 [ 554.709082] ? getxattr+0x2c0/0x2c0 [ 554.712739] ? __ia32_sys_read+0xb0/0xb0 [ 554.716813] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.722192] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 554.727708] __x64_sys_getxattr+0x9d/0x100 [ 554.731971] do_syscall_64+0x1b9/0x820 [ 554.735873] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 554.741249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 554.746196] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.751054] ? trace_hardirqs_on_caller+0x310/0x310 [ 554.756083] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 554.761111] ? prepare_exit_to_usermode+0x291/0x3b0 [ 554.766147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.771014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.776207] RIP: 0033:0x457569 [ 554.779409] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.798320] RSP: 002b:00007f6f1ba3ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 554.806055] RAX: ffffffffffffffda RBX: 00007f6f1ba3ac90 RCX: 0000000000457569 [ 554.813328] RDX: 0000000020000540 RSI: 0000000020000680 RDI: 00000000200000c0 [ 554.820603] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 554.827879] R10: 0000000000000044 R11: 0000000000000246 R12: 00007f6f1ba3b6d4 [ 554.835157] R13: 00000000004bdd7d R14: 00000000004ce278 R15: 0000000000000004 [ 554.842542] CPU: 1 PID: 23800 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #71 [ 554.849840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.859231] Call Trace: 03:35:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:29 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x5, 0x0, r1, 0x0}]) [ 554.861837] dump_stack+0x1c4/0x2b6 [ 554.865480] ? dump_stack_print_info.cold.1+0x20/0x20 [ 554.870703] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 554.876510] should_fail.cold.4+0xa/0x17 [ 554.880583] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 554.885718] ? __fget+0x4d1/0x740 [ 554.889196] ? graph_lock+0x170/0x170 [ 554.893028] ? mark_held_locks+0x130/0x130 [ 554.897281] ? find_held_lock+0x36/0x1c0 [ 554.901371] ? ___might_sleep+0x1ed/0x300 [ 554.901392] ? arch_local_save_flags+0x40/0x40 [ 554.901410] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 554.901429] ? refcount_add_not_zero_checked+0x330/0x330 [ 554.910159] __should_failslab+0x124/0x180 [ 554.910180] should_failslab+0x9/0x14 [ 554.910197] kmem_cache_alloc_trace+0x2d7/0x750 [ 554.910223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 554.921103] ? fput+0x130/0x1a0 [ 554.921129] kvm_assign_ioeventfd_idx+0x1a2/0xd40 [ 554.921146] ? find_held_lock+0x36/0x1c0 [ 554.921169] ? irqfd_update+0x350/0x350 [ 554.929195] ? lock_downgrade+0x900/0x900 [ 554.929223] ? lock_release+0x970/0x970 [ 554.929240] ? arch_local_save_flags+0x40/0x40 [ 554.929257] ? __lock_acquire+0x7ec/0x4ec0 [ 554.929272] ? lock_downgrade+0x900/0x900 [ 554.929301] kvm_ioeventfd+0x1ca/0x37d [ 554.980554] kvm_vm_ioctl+0xfd5/0x1d40 [ 554.984460] ? dput.part.26+0x26d/0x790 [ 554.988456] ? kvm_set_memory_region+0x50/0x50 [ 554.993055] ? graph_lock+0x170/0x170 [ 554.996884] ? __lock_acquire+0x7ec/0x4ec0 [ 555.001114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.006648] ? _parse_integer+0x134/0x180 03:35:29 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x88000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f00000001c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x4, @remote, 0x4e24, 0x2, 'lblcr\x00', 0x24, 0x278, 0x79}, {@loopback, 0x4e23, 0x1, 0x6, 0x87b2, 0x2}}, 0x44) close(r0) close(r1) [ 555.010792] ? graph_lock+0x170/0x170 [ 555.014600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 555.020124] ? graph_lock+0x170/0x170 [ 555.023933] ? _parse_integer+0x180/0x180 [ 555.028079] ? graph_lock+0x170/0x170 [ 555.031871] ? lock_release+0x970/0x970 [ 555.035836] ? arch_local_save_flags+0x40/0x40 [ 555.040429] ? find_held_lock+0x36/0x1c0 [ 555.044512] ? __fget+0x4aa/0x740 [ 555.048003] ? lock_downgrade+0x900/0x900 [ 555.052167] ? check_preemption_disabled+0x48/0x280 [ 555.057217] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 555.063031] ? kasan_check_read+0x11/0x20 [ 555.063052] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 555.063069] ? rcu_bh_qs+0xc0/0xc0 [ 555.063094] ? __fget+0x4d1/0x740 [ 555.072508] ? ksys_dup3+0x680/0x680 [ 555.072525] ? find_held_lock+0x36/0x1c0 [ 555.072550] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 555.072570] ? kvm_set_memory_region+0x50/0x50 [ 555.096816] do_vfs_ioctl+0x1de/0x1720 [ 555.100732] ? __lock_is_held+0xb5/0x140 [ 555.104815] ? ioctl_preallocate+0x300/0x300 [ 555.109230] ? __fget_light+0x2e9/0x430 [ 555.113214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.118771] ? smack_file_ioctl+0x210/0x3c0 [ 555.123110] ? fget_raw+0x20/0x20 [ 555.126571] ? smack_file_lock+0x2e0/0x2e0 [ 555.130806] ? __sb_end_write+0xd9/0x110 [ 555.134879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 555.140424] ? fput+0x130/0x1a0 [ 555.143710] ? do_syscall_64+0x9a/0x820 [ 555.147675] ? do_syscall_64+0x9a/0x820 [ 555.151666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.157241] ? security_file_ioctl+0x94/0xc0 03:35:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) [ 555.161664] ksys_ioctl+0xa9/0xd0 [ 555.165144] __x64_sys_ioctl+0x73/0xb0 [ 555.169047] do_syscall_64+0x1b9/0x820 [ 555.172949] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 555.178330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 555.178347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.178367] ? trace_hardirqs_on_caller+0x310/0x310 [ 555.178384] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 555.178405] ? prepare_exit_to_usermode+0x291/0x3b0 [ 555.188185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.188217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.188230] RIP: 0033:0x457569 [ 555.188248] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.235447] RSP: 002b:00007f3b8d340c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.243167] RAX: ffffffffffffffda RBX: 00007f3b8d340c90 RCX: 0000000000457569 [ 555.250424] RDX: 0000000020000140 RSI: 000000004040ae79 RDI: 0000000000000004 [ 555.257701] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 555.264972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b8d3416d4 [ 555.272228] R13: 00000000004bff44 R14: 00000000004d0000 R15: 0000000000000007 03:35:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc56d2511]}, 0x10) shutdown(r0, 0x1) 03:35:29 executing program 3 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:29 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x70e000, 0x5, 0x0, r1, 0x0}]) 03:35:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x3b1401, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@reserved}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r4 = gettid() move_pages(r4, 0x9, &(0x7f0000000180)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000200)=[0x4, 0x3, 0xb96, 0xfffffffffffffffa], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x40000000}) 03:35:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000027, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2f706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) [ 555.473273] FAULT_INJECTION: forcing a failure. [ 555.473273] name failslab, interval 1, probability 0, space 0, times 0 [ 555.521673] CPU: 0 PID: 23841 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #71 [ 555.529115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.538481] Call Trace: [ 555.541096] dump_stack+0x1c4/0x2b6 [ 555.544754] ? dump_stack_print_info.cold.1+0x20/0x20 [ 555.549973] should_fail.cold.4+0xa/0x17 [ 555.554059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 555.559273] ? lock_acquire+0x1ed/0x520 [ 555.563259] ? kvm_assign_ioeventfd_idx+0x3d2/0xd40 [ 555.568287] ? graph_lock+0x170/0x170 [ 555.572103] ? lock_release+0x970/0x970 [ 555.576109] ? graph_lock+0x170/0x170 [ 555.576137] ? find_held_lock+0x36/0x1c0 [ 555.576156] ? __lock_is_held+0xb5/0x140 [ 555.584031] ? ___might_sleep+0x1ed/0x300 [ 555.584054] ? arch_local_save_flags+0x40/0x40 [ 555.596821] ? graph_lock+0x170/0x170 [ 555.600639] ? save_stack+0xa9/0xd0 [ 555.604284] ? save_stack+0x43/0xd0 [ 555.607923] ? kasan_kmalloc+0xc7/0xe0 [ 555.611832] __should_failslab+0x124/0x180 [ 555.616088] should_failslab+0x9/0x14 03:35:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1802]}, 0x10) shutdown(r0, 0x1) [ 555.619909] __kmalloc+0x2d4/0x760 [ 555.623463] ? __lock_is_held+0xb5/0x140 [ 555.627541] ? kvm_io_bus_register_dev+0x206/0x960 [ 555.632498] kvm_io_bus_register_dev+0x206/0x960 [ 555.637279] ? check_preemption_disabled+0x48/0x280 [ 555.642314] ? check_preemption_disabled+0x48/0x280 [ 555.647350] ? kvm_io_bus_read+0x820/0x820 [ 555.651593] ? rcu_pm_notify+0xc0/0xc0 [ 555.655518] ? kvm_assign_ioeventfd_idx+0x1a2/0xd40 [ 555.660526] ? rcu_read_lock_sched_held+0x108/0x120 [ 555.665546] ? kmem_cache_alloc_trace+0x353/0x750 03:35:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x54]}, 0x10) shutdown(r0, 0x1) [ 555.670863] kvm_assign_ioeventfd_idx+0x78b/0xd40 [ 555.675739] ? find_held_lock+0x36/0x1c0 [ 555.679822] ? irqfd_update+0x350/0x350 [ 555.683810] ? lock_downgrade+0x900/0x900 [ 555.687976] ? lock_release+0x970/0x970 [ 555.691964] ? arch_local_save_flags+0x40/0x40 [ 555.696559] ? __lock_acquire+0x7ec/0x4ec0 [ 555.700807] ? lock_downgrade+0x900/0x900 [ 555.704978] kvm_ioeventfd+0x1ca/0x37d [ 555.708899] kvm_vm_ioctl+0xfd5/0x1d40 [ 555.712804] ? dput.part.26+0x26d/0x790 [ 555.716792] ? kvm_set_memory_region+0x50/0x50 [ 555.721384] ? graph_lock+0x170/0x170 [ 555.725205] ? __lock_acquire+0x7ec/0x4ec0 [ 555.729462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.735016] ? _parse_integer+0x134/0x180 [ 555.739181] ? graph_lock+0x170/0x170 [ 555.743001] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 555.748554] ? graph_lock+0x170/0x170 [ 555.752374] ? _parse_integer+0x180/0x180 [ 555.756543] ? graph_lock+0x170/0x170 [ 555.760362] ? lock_release+0x970/0x970 [ 555.764351] ? arch_local_save_flags+0x40/0x40 [ 555.768960] ? find_held_lock+0x36/0x1c0 03:35:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xc56d251100000000]}, 0x10) shutdown(r0, 0x1) [ 555.773044] ? __fget+0x4aa/0x740 [ 555.776502] ? lock_downgrade+0x900/0x900 [ 555.780660] ? check_preemption_disabled+0x48/0x280 [ 555.785672] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 555.791487] ? kasan_check_read+0x11/0x20 [ 555.795649] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 555.801134] ? rcu_bh_qs+0xc0/0xc0 [ 555.804720] ? __fget+0x4d1/0x740 [ 555.808193] ? ksys_dup3+0x680/0x680 [ 555.811918] ? find_held_lock+0x36/0x1c0 [ 555.815999] ? __mutex_unlock_slowpath+0x197/0x8c0 03:35:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r0) [ 555.820937] ? kvm_set_memory_region+0x50/0x50 [ 555.825523] do_vfs_ioctl+0x1de/0x1720 [ 555.829421] ? __lock_is_held+0xb5/0x140 [ 555.829442] ? ioctl_preallocate+0x300/0x300 [ 555.829459] ? __fget_light+0x2e9/0x430 [ 555.829476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.829495] ? smack_file_ioctl+0x210/0x3c0 [ 555.829508] ? fget_raw+0x20/0x20 [ 555.829525] ? smack_file_lock+0x2e0/0x2e0 [ 555.829539] ? __sb_end_write+0xd9/0x110 [ 555.829557] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 555.829569] ? fput+0x130/0x1a0 [ 555.829585] ? do_syscall_64+0x9a/0x820 [ 555.829599] ? do_syscall_64+0x9a/0x820 [ 555.829618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.829635] ? security_file_ioctl+0x94/0xc0 [ 555.829654] ksys_ioctl+0xa9/0xd0 [ 555.829676] __x64_sys_ioctl+0x73/0xb0 [ 555.829713] do_syscall_64+0x1b9/0x820 [ 555.829731] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 555.829750] ? syscall_return_slowpath+0x5e0/0x5e0 [ 555.829764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.829782] ? trace_hardirqs_on_caller+0x310/0x310 03:35:30 executing program 3 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) [ 555.829798] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 555.829816] ? prepare_exit_to_usermode+0x291/0x3b0 [ 555.829837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.829857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.829869] RIP: 0033:0x457569 [ 555.829884] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.829892] RSP: 002b:00007f3b8d340c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:35:30 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x730000, 0x5, 0x0, r1, 0x0}]) 03:35:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) [ 555.829908] RAX: ffffffffffffffda RBX: 00007f3b8d340c90 RCX: 0000000000457569 [ 555.829916] RDX: 0000000020000140 RSI: 000000004040ae79 RDI: 0000000000000004 [ 555.829924] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 555.829934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b8d3416d4 [ 555.829943] R13: 00000000004bff44 R14: 00000000004d0000 R15: 0000000000000007 03:35:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffffffffffffffc, @dev={0xfe, 0x80, [], 0x16}, 0x4c9}, @in6={0xa, 0x4e21, 0x8, @local, 0x2}, @in6={0xa, 0x4e20, 0x4, @empty, 0x9d95}, @in6={0xa, 0x4e24, 0x3ff, @ipv4={[], [], @multicast1}, 0x2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @remote}], 0x90) socket$inet6(0xa, 0x7, 0x10001) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x900000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc0045878, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:30 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x507000, 0x5, 0x0, r1, 0x0}]) 03:35:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f64636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:30 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x8000a0, 0x5, 0x0, r1, 0x0}]) 03:35:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x91ffffff]}, 0x10) shutdown(r0, 0x1) 03:35:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = dup3(r0, r0, 0x80000) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x140010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x4, 0x37}], &(0x7f00000001c0)=[0x30]}}, @free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x1}, @release, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000280)=[@flat={0x73682a85, 0x100, r4, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x1, 0x21}], &(0x7f00000002c0)=[0x20]}, 0x506}}, @reply={0x40406301, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x38, 0x30]}}], 0xc7, 0x0, &(0x7f0000000480)="d9f0dde7583fcaa90384e8525a6adffe40a5719f66ce238af0dfdd146de13ace31358662919eab0b38782b7d2927d6d666f8f23671d42babdb24dd7b0ac4c51c39f6bae3af04740120ea0d5586453aaf935c453d690598e2dd44c3ead0b8bbf69eb6a993d8cad95adc9c6c3594f25b0d258cf8b451ee04c53d3530d9a6133785ec10697eb5b5fec60b76b37e0969c8f7968fddaf423fa89fc4a2edaaf5da5cae2f8dd798bfc84aa3fc016e4caf97e0f7600e887e3a43cda07f52804f799658e71cbbb232ce00a2"}) r5 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 03:35:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x8}) close(r0) open_by_handle_at(r1, &(0x7f0000000080)={0x1b, 0xfffffffffffffffa, "15d42c9478c2b73a046c6a75314e42e8e08c0f"}, 0x2) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300), 0x4) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x2, {0x3, 0x1, 0x3, 0xe000000000000000, 0x4, 0x9, {0x6, 0x3f, 0x5, 0x7ff, 0x4, 0xfc, 0xffff, 0x0, 0x7, 0x2, 0x7, r2, r3, 0x800, 0x3}}}, 0x90) close(r1) 03:35:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f646363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xf4010000]}, 0x10) shutdown(r0, 0x1) 03:35:30 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 03:35:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x1, &(0x7f0000000140)={r3, r4+30000000}, &(0x7f0000000180)) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc00caee0, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f744d6f64653d303030303e3e000030303030303030302b3034303030302c757365725f69643d7296400b07f6213cad28fd91c6486b40133169b927d364", @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="0000e60520cb05a41dd4a52034e581a90fc6926cc9284e4e1730c1527b2a86f2f2c7e2fb61fe"]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1195) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) pselect6(0x40, &(0x7f0000000080)={0x401, 0x4ebd, 0x2, 0x10000, 0x8, 0x7, 0x7fffffff, 0x200}, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x10001, 0x8, 0x3, 0x2, 0x9}, &(0x7f0000000240)={0xfffffffffffff431, 0x2, 0xe9, 0x401, 0x2, 0xb3d, 0x1f, 0xffffffffffffff81}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0xa2) 03:35:31 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) 03:35:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x20000]}, 0x10) shutdown(r0, 0x1) 03:35:31 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) ioctl(r0, 0xa2d2, &(0x7f0000000100)="aadebe7bf5a453d399ca433270d9854cc0b020ff48d909d402a852b407564df68648727d53b8bca524180b5260ce3924b812b5bee090505b4bc6e81fc957cecf0ab0f6de1e9172fc04e6d23b187f11e09fb3353cd3e41d1f42354115f8c908856aa5df7d6f8f916609234359f720feb074a7324f1e8463984154692b0d9a55125784d567848bdb87adcbcb6217ccc1521c6d8d63e86434b791b559e368c08d717a14bcf2f81eec") ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x9) sendto$llc(r0, &(0x7f0000000200)="645ce0546051cdf466196bc49e4c0069fc1ef1ea30ec972081123995211f7389c5eeaa19cfdeb085ffc885d3bd872a97ec2270f1296bc9c44daa94fde72c7bcb342c7250bdcf251c93d93aedc4ff0b855fdce67921a62f0a8a57d628f4a49c76bca136", 0x63, 0x1, &(0x7f0000000080)={0x1a, 0x204, 0x6, 0x9, 0x3, 0x0, @random="20f6c8f2ede2"}, 0x10) 03:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc008ae67, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:31 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 03:35:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66643d042384c6f7ab7d7cc619ace61bce3e7080e9b7eea2cf53b9aff5548b516e47a940636bbbc87c009d4bb41334fda48eb030664f60bcc666", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3, 0xa, 0x19c, 0x100000001, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x5}, 0x8) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 03:35:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300bd3]}, 0x10) shutdown(r0, 0x1) 03:35:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) getpeername(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) close(r0) close(r1) 03:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc0189436, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c007f5ab35eec5290ac441d60a6b7129ac14bb2e5ce78d2a1c25308fc72028499b87e00389c55a8c83c7520c780256d6fe44b78a3cb4e31d4c41b6b33ab6547795734febafc67e5c471c26ae5a501a630032e52825cb5674a2bcecf07e71fe5c5598da148296db40d3e497e5c3b6f14d998210dabe761a348ba783e9b86b02741ea4d5624a1c417218aaf79e20e07bbf1a1ec596b"]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x2) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200)) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x2000000000000099, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x4}) 03:35:31 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 03:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020940d, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x218]}, 0x10) shutdown(r0, 0x1) 03:35:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) rt_sigtimedwait(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000680), 0x8) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x1f, 0x7, &(0x7f0000000580)=[{&(0x7f0000000140)="b3fdd8644d34e1c3b976f3dad7057e474c0050c0baf3845944ed3f13486fc004ddedb123c32059bdbc221714eb15b37d7ec4a348b13e8d7509319c6aafbadffc887afbdd0f4fa46a8d3b19237c2e73e4cc66c2c003226b620251ad63e30914bd0789844bd2402e7ec10d819c5abf00af4a6abfff979a73ed6f2b95993df4b316ded778963da47c0c5a2a7939ca8609185c9fda77d8c15950264765ec925c21b67252a7eb886064a738a57ac451397673f014c8f8fff0da385d6a", 0xba, 0x1e}, {&(0x7f0000000b40)="168cccb167abede2355110e9446325e1f0d664b8146095a1c76ea6388e73b5e6045f28aabae7ef2df4fc13175908379e9e907222ca6542dc0b55454ebdfbea49af852e479be2020e59039d9f36ed54db31047fe4548a54a7cc278ff3cef38508502c21a275c8346bc6a029c97c03e43b18f645267deb458cf08883594e092219cefaf5122ac6d10b8d4896131fc6317d7fc561a90f498c7cbf941c9441085657a29e188f4c9cd083e3e9469bb36913c1fd764f69555598747a8e9030d5daf646e4dc12a537b38b648b5320a4b78be0f762a4932bc14609bdd57e08f00fb13e7d1f3ac291120c1de51b962635ec90cc2e4458bef4570246ca06bc068b6477b552fd29d896ee6fe25738d696f545a38f0336c90bd51a2fa3837112005229ed02e983de805a92710fc52e9f066601d917b2e773abd8419adf503b7d7b4e5a26a9b6f01fdfecb9234c5e98bd88144f5ff5b0677a7ffa9fbf7f2f75bcf34ccd52e81462a5f59c15a725d1d85ae0dde3dbd4746d07d53e3056894ae6519bd562cc78e0c2d0cc390a5ee4eeac61b77f36d91543598f0cafcbeb41b5db41e851c61d9f96cbb3a72563853c6653c41264e041581711952271d43adce4cc52aa4a79a01a36841dd00c25786cad5f8f410eaf997e3ef7226988ae6950f51446331c2c3286bd07b248fdb9fd602d3a03f2edbc7674ff8041a6259463ba80c925aae33d7614180085863cb66484e225c6bdb6d6cf37b5e9989cc6061a057b942c8aacd41c1c2640db46173045a8dc4df81c19aec8c87ac24437d080d9d7fb588bc1bdd95381023a47d75210e714a3a174f3ef3e6fefa2b5e0f91849234bb976d84d2ddd471f0b3d342ce6a58ca1b58085a637aff234d9eac75d09fcaa48ec407f936e5099c1d8d396b290251f837e47f968f4de996b167034f3979e4c3bef44f2b0757b2023c4c888d6a891cdfa9ab978e11e3e1bf8d09a4a98fcafb72c098ee3b7e157664aa9443338983a08a5a384f51c264e5ddc332dc9434df86a045d35e2e99017d1b34c39ed35944e8074dd3eab5952e35eaf0583685c574645791fc1579834f513cd169e98d0f2c164e79d6a0fc15e4c5137118f50eedb914ed8ff70b5f69291cd151b92fc3dd379917f90ceb4d04138b4147ecad306075e3a037e5b56e92bcbed45e7b585d649dd9dbff2927ec1ae4da681c65bf83b2f5556b21b5fa8005866f4c1edcb8d77e8882b7a83900cce93d16c4a56d5490a4716490f13c781d8cf24b2dcb8b76b21ef7b0b70768c47e59448684ba84c7e6ff42a0470befbc348c31a874f5b355021acbaebaad4adcc06ffd571d18a3f4882766711fc7057acc4ae71272f5b7590e6ada3d48904636ec09bbc2cdab8b01a7168eec4538bf41fcb7ef3c63e9f03f9034dacdd59b1bfed62206a2c150cdb469c017f9035501e26fc206f82f57bb92a8ebfdc83accce4d4bb79764d2bdfacc10aa42d9e48b3ef145a3aff6687bc2f5f5d1454fefb388fb2c3a62c0f0b0c3efc85ec3dc98793d702d1fd74be711b3113d1c004be673d814d43a5a240edc6285baa6aad971d88183d61ff2462be824be135f194d938d7e11d5ed7279da9aa8567547d028ea70faf1ab9a2afed938b311c613a8dbf255d0be49b8797ec2c9ffdee3ca1c95207c8024e04bee8c96b85f024d17fdb3fa71233efb286320a29043b2f696bd005a420adfafae447f57d0fbe6c2f280208c67df5fde474a0a6001a22d29ae358ebc1c983f6dd11347e04ad4e62aa968871439a855d14a9175eddafd4f690a19ae7cc9da36f62de418ef1de95b2ee2ece7a2aefc8ff453b3b685390c551273e77098c3ab09bb513dfc0f76f12e45945add241cda80b3aa897dc99b48672ac557f585b301a7843db78df5c45f97490d46cb2a7c53e3054b45b24c4f4848d6a18067dde2995198238b970578b5ff84d6ccf94348798d99bae505c734dd339bdc73f6dd8a98cd8afefa43db83ba7c23bcd0e811f76c3805cf156c46c5d5f3823bf75903d81b3f5106675ddd3e125d438193f89459946c3fc5165698fc67e2b5326d68d5b07ba3348187bf3f7f492b317f2964b88352d7b8dcb51914b5358c9b34572111c8efececc08277d5eb88543c215eec8624e10698b25797f27512cbe56d59bf82f3f5dcd202f3167b912fff5a24a8c44bb7a6aaa6f3750121931261828563fcbea819b8daeb6626ac3c920acfeca12010ef0a97037723fb978a789844d4809005e35ec74892e6fd67b9dae89c05833d80a1b1d7d99ae078dec378b96751064a202c6eb3a50c437519f7d1f124d479bb24ac2fe5092f886e54f034c6a9d7b0b1847249bf2139a15d819a2ad304e11c53ba5675c507edbffaf49f7372cae78979614f678947ed0b0c8df9d7030f8287edccdbfcef69bb2a762a4fc3dd03fe5b05d125dd6a8c321b423ecdaa7b31ce7000f643d24190b70b6249e7c5ce63019803e5a384fe71d3db8e41c7d6fb9034005976f27729a5564f5531c5ba7c2e58b68f591659c152873efe4051775fd3d3115420b632e0f5452395b6cf5416960725031656874648eb62ccd21d89d55402b5f0648e07f7f024e5c6385e59cba8f56b6d4cb92e787816bf14467c70a341bd5ba4c9ae492001ea18c4c8550933f2b5a40ff76ad8a805cda3cf96b81ea7ac4438a8e91cac530758c2d8be164cf4650c55128edfa5eb46472b87d5462e7a6af4b4d4ce5f02fd69bab77af8d9f155a86ce6a216cc0e0a02bf6bb5bf4436bc8001b2a3e5b5227cd49d9f474bc642bdb48fea65c0662d9502f5422feee03f58b3d0e79e5e4aa377257137d2771bf14647b5c55d9b9f115d409afad6f60463f97b43f9a9fb41eb9acd9740225427bb5937979d04219231d8300ca42c935412fdfdb2415ae8fd82898678ddd7eaa8342c92414be7049c5977728cf463050fea9595bf7bdd86693e40230e04878217aa1519bb23d7b9447ae4b8829ccbb1c0b295ed07e1f1922dbfb72adfaea189593856109b6cee98bf8b2b32f4f08465f85453689b79ffc7ae158fab8aced552b929913d0030f74102d5874e7d8f7f0540111cd1163c75f18976b9527a32c3125dee634efb94bac82d264b9040a81f34c3b29d6b2b9a7743c8a3e7a4e3384a79380dae0d864bd2d04468d7891812a94f1dc777923e4b1f11e05b36c49b53972013b6e92064827c109809c4a0d6deb96ca1fef63764098fa41154294b0085ff7669872ee104cd5af962cb2377d893ce1c2b2abadbcf7569e02e71ab835a82de6c572126ec48c81270b6581ebba1bb1c95951375fb0242323ad6edfa2e7dff4e5acace5d972dc361811b67a0140e9c464f59033a592a04aaca307e103af7e7ce817c3cd0eea3874b07ebff023e69cdef0300b90c3931ff8d94dba07060669aa743ca1eea6a8d9e90564ee46e7b1e47a0e2dc8e7da3e2f0a57548fad5ac2443c7cd6f0bca024c83892f1001fec0118e893f82f13020aa905e69115d3835a91570743e07a5431f3b91d22c70a9a548b2def297efa9e2463f34ef8ca760304be0c0cf9c123c73f750c9fec7db918de01328ed5e9e21dde54940cb1385737f6841c7936e0797631e06204ba21b66d8a6b63543ad16173093b8a3102bdfafc1171fef946ee8ef4ac62535c01db38490c58a61beabbfd4f7d3e7166d143d7d8ff374223896eb6b2bc06fddc14c343e851944e552beb449a190d7bea36ca635376420e06dfaa23ac1e63e363cfc08ae2cef148b22a47a2a833ffe60389a75757b1c31b897373d4b4d8528f429fe43130d64d99fb73e5fa4a9e66b2509849f176c7f95d9b89ce1a838d7baa9e9f03db35848eff5887004e8c1e44e15a6ded72cce7ec317d267e911db8d89391df43c803d362d8b78c8916040cd0ef33ff7bc2c24642e05881c291caa233d7047b503e5ddbfbaf600d0a8f342b06d425365713e1bb0a33586dbc1dd1d6290017df16f25c42787769b45fb62c2fd8559f8ef89c04a10e13f7d414b139d8c6688f778f358b7d3b05efd5bd68b2d85e547261b54782fe46cba856584e0397a4007ae76d8ee445ebce0d4279d12cf354003ef25657f3f1b18bb5ee9ed955e6efbc1117e901e0ddb224d1b98b58e0a37401e54be978c08afbd80e253cb66735b526f2680a931273628d75daabd284d9fb753db17e86190fca3245a758bf6c26d47fc307124a315f8b5e522bbc73ac23d8284da680078ab40177161b550e39c592f560195e115869c5dc6288b742243cb1b2e04ce64ace6c7ed615587b2fbfdef5d65422456273a7c1510e21699dd0faac8b2c9428ab01a218778651c9aab3fd6398c625554414f9a49d2b8880be287adc10922cb39a4cee997fba492fb3e81fe9f678669993f190cffe3c75cfb3d69ccc156059ee93394a8a47feb1f884a727e4fd40ef1bcd268331d4a09139752c572cb1b2b33fa48469626405eebbef020d5558bb60a8c4e25f5405c6874f11e3907120becf11e51252dbab6ac0487f0543f7d103c1843384193117c2c9228c33a6a61bf73640e29249b58616e3915e8f8ad7d88900f467d8ad5e205d31ecf3d97aa2bfb58d6a66c0746e923dfd4f69920f073bf80d3162d57cfcb3a25ebefe4238ac967e0871b6c21c844f50d55c6c1a76cbf351c47e17201b057949fa53c6ce2590466e9d14bb296d055cdadd3bec2a4ca54b2a2f6f5e2f90a170ff86a055c9f8dfbe06b398222b002b21c4aa199e76010d6defd6f4b66daec6510b435f34c0b80e1cf5f3285bda33702780ff069a550974d091b1984c6f35faea5509402db0aefc0a339803fc8930b789425caf0a4c56584391c8a59be6fce0cb1964a5e71fdb63f4e7b4fdad66f1724cdadb3889eaaaf800984e049d634e57cb812728fa5763976932b8090632cbe4d96d1a172623d8a6210365c425287e18c3c890b5be51e48b16cbe058e7588939130efb0b41d9c936b4d79e8f4a4373983f4bc956300d0611ed87e286f2edd1540ad8df142633f75f9eff889b832925a9fa29fba8e14516ec09a5d04a9726eb4e4b20a2b9bfeda3a5544d81e8461bb5cb57889751e7100274f3f2ab37fa133007b88c5594d91a5ced3fd864c4f18bf1dd8daa7bed3eda27b3edbad620c323eb85dba987731e12b58f633f3a559c039b847f48e99cd7940295a164ba5c99ee87ac803b1fb4f32a1446c22f89dc18f62dcee212c31bd7842867ea6f4463f289807b9b1548188d0608d1db5b8047ee3d35efaec1aa8e0f26b6bf595986e13ee8ed96567c79acd0223c60d8594e862f8a64a0856aa790437e508a58d5420a488e8ae21db18480b8cca73c467774a43a46ad8f009a5e0defd14aeaf584e984a19c1e1e020094495b7304d715ae0c150a0b1ee817d3fb6b47ccda1256d53f6b2ecddfabc0ddbb5a376c1def760999372245840cab7d0d96933a8f625ae2b8e8a9ba89470955d800e3f7183e6c01230d0c760fe4aa164a53d712c7f26b474a1b870d0f402d6207e807b4a61b05b238ed41df2964cfd6fc4d4244a3fcfd0053f67f0a08f75e5c84d6c7233a4ebfd1d3198b2a8ff7ac06db747dec09d24c76c8ab0818214f938d2b6191d8929656c064fbd0a150d187df757dd8461525c7ce84dc2122ae5c6faec844e4189a86510af2d25173e2d8eb5fbca65c7e1f4694715c4b0f6041ede2e219b1dc9ad7931b217bdef1446f56fb82576b9f932f9c24fb74220b2bb9f969dcd3e7f799ca4b82448887e8f0f4e99f29288fa0be0a6e0aceb71347d6f0f75631eb218f2073fb16bc996593ace6a373519279", 0x1000, 0x2}, {&(0x7f0000000200)="8190ac7f981ba7894e705c70443af971022b1c52c993d3ab080de90805c64e8715fadecb1abc892a7087ce7165f1f3e3ce44acb70a6a290ae92d1ea0afc1d6fccf142d2d75857290bc3ae5eaf8497fe9991134d66080f6ad6be7ca972d406a08cd2c", 0x62}, {&(0x7f0000000280)="8fdad949abb13bb936f9f6aff90e7a693bb98c80502de1281ebb262c7b0e53948f8ed57964012421dfbda62ea5594a9fd9e7ae3ceb0b668bc1d82062140a14b0d171c4e1761d4d74413c2e2400a5fdf1360401c2035f856d6871c00a6c449ae472a8650bf8a4426360401b68bb136be20ead5823a40926c76fd5864b6619d6f8b1dd1fe3c75954e69eab767562fdc22fa0dfaaccd058c6e1f31e8f0355f7d14b4554583fab2ffb9cc83d3b7f3379b47820ba4666c8", 0xb5, 0x8}, {&(0x7f0000000340)="c9271c067b12c11db3d364922118c6e2eeb7f4723d61e1c83b315e129c235777e7258342564b0d16b95a0e1f159939d9f2920823f6ca4744da016792539b7cdfb558f69162ff08042e647815443ca0db5ece5672c7", 0x55}, {&(0x7f00000003c0)="c64639231101f6821ee2d59132881b23074820f602785c95d9338ad379b7f8a32be8b5058b293011c213356e0dbf25f2b551d0cd69f07f919cda4411583ec9568d638bc1b22b078fcac89b5783675b550eb84347eae1c1732a88cd2cd97c8164850f9d8b1683584ffba934aa2d97dc773b51ae72ab22c03377d024b35424a46346df9958587bae9fc97772c5ee4b36b72662758a85ac6371de75f17c3a1f5206c88137a55b0661ac11ea06c9aa51aa66039434db7ff2b6bdc58680cbeb6ae6ac6811", 0xfd, 0x6}, {&(0x7f0000000740)="b05cf784d496f2be82c7cac97a9f305e4e7fc96d1bdb9ecb943254817ce07980670e823e4c0493aea66510b36060047a6b05cf53b67973f30f565d65893fdd4038bcbf3874c4116e7d50a44d1cea24a0bf9196672f58305035bda5699335967ac32cd452635009d8014835fb399518db5a4175d9158d51afe79954cf04a50f6c7524efc394f7ff4f841285d02d9543495649", 0x92, 0x7ff}], 0x1082004, &(0x7f0000000640)='[posix_acl_accessmime_typeem1\\\x00') ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = dup2(r0, r2) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000004c0)={0x9, 0x9, 0x1}) 03:35:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x10000000000029, &(0x7f0000000040)={0x1, 0x1400000}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) fcntl$lock(r0, 0x10000000000028, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4000007fffffff, r2}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x400800002, 0x0, 0x0, r3}) close(r0) close(r1) 03:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5452, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:31 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x930000000000, r1, 0x0}]) 03:35:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80800) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000001c0)=0x10001, 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x16) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x408, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004890) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r0, 0x40}, {r2, 0x2165}, {r2, 0x1048}], 0x3, &(0x7f0000000480)={r4, r5+10000000}, &(0x7f00000004c0)={0x1}, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x4000, 0x0) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000600)={0x4}) 03:35:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x5400000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:35:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 03:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5460, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:32 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x7fa8ae3e3000, r1, 0x0}]) 03:35:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x300000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000000)=[@exit_looper, @decrefs={0x40046307, 0x2}], 0xbc, 0x0, &(0x7f0000000140)="60a4ddeafb2f38cf67dc163b88b8a2b8489b8cb9f1451559fb7d3e2200f7f097876135c6f538c9d05f4070aed64bf1754f6dc98a0fb03772b62c60c20706d5baf5a4a554e1fe8df2caf817e45f6fd9512ad28d4fc3f82325776d6639bab5e68f56be4689a72487c7afb3251fe87c74a08798c2312be837b2d24e858bd37be826a1c949d631c96c1572e5456c18f2e0da86d9ee1f291db2fd516e6ce84d0bd89af827492c37b7c505e537ad3f22bcde80c8c7576c2f57c29193bb5ee6"}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:32 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x7fffffffefff, r1, 0x0}]) 03:35:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae6a, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) [ 558.279055] binder: 24077:24078 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 558.333044] binder: 24077:24078 DecRefs 0 refcount change on invalid ref 2 ret -22 03:35:32 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xffefffffff7f0000, r1, 0x0}]) 03:35:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r4, 0x4b, "6f802512ac6f6c2fe206eb399078295022633911c57a21ef8c2d62960774238964b0ad9cd6061feedd8e2d9b1985cc878945e3fc91beb36800bd8eef774367cd141a02fcde902c18eb3793"}, &(0x7f0000000280)=0x53) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x80300e33]}, 0x10) shutdown(r0, 0x1) 03:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) clock_gettime(0x1, &(0x7f00000000c0)) 03:35:32 executing program 0: syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x20, 0x400) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x62, 0x8000) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x400080) ioctl$void(r1, 0xc0045c79) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:32 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xe0700000000000, r1, 0x0}]) 03:35:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x4000, &(0x7f00000006c0)=ANY=[@ANYPTR, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="519fb83b645b1151b8a0c015216fde420173f2088690b554bfa979419ae9424b4ad5d60e1a3b30ad059b52d03b77454bd3f9c477f7a7413eb7b756f2fe7dbf0e1ff4ac8d000d1f16f814cf11eececb5aa2567417ce2fbeb5a275e3a7f38ee90309ad5aeb1f8aa105ba4526f1e68e68106647c0ca7f74e370beb06ff53f8c0096a75f273cabe1bf"]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000340)={{0x3, 0x3, 0x0, 0x3, 0x8}, 0x8, 0x5, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020aea5, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x682500]}, 0x10) shutdown(r0, 0x1) 03:35:33 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x400000000000, r1, 0x0}]) 03:35:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f00000000c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) close(r1) 03:35:33 executing program 2: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000000) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c7264653d302e30303030303030303030359d01da471713da025015ce6630303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000500)={0x5d, &(0x7f0000000480)=""/93}) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000100)=[{r2}, {r3}], 0x2, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = request_key(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f00000006c0)="73797374656d2e706f7369785f61636c5f616363657373fe", 0xfffffffffffffffd) keyctl$clear(0x7, r5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = dup2(r2, r3) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000240)="401a6b3de8063ec4c89b13ac99c70decf92a") getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae03, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1100000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:33 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4000, r1, 0x0}]) 03:35:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$setlease(r1, 0x400, 0x3) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x5, {{0xa, 0x4e22, 0x80, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0x4}}}, 0x88) 03:35:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x40, 0x40) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x16, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e21, 0x3, 'lblcr\x00', 0x19, 0x7, 0x5b}, {@multicast2, 0x4e23, 0x10003, 0x8000, 0x5, 0x6}}, 0x44) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xb00]}, 0x10) shutdown(r0, 0x1) 03:35:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae41, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:33 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x20000000, r1, 0x0}]) 03:35:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x200000000, 0xfffffffffffffffc}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:35:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) shmget(0x1, 0x200000, 0x8, &(0x7f0000e00000/0x200000)=nil) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xac720557]}, 0x10) shutdown(r0, 0x1) 03:35:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40049409, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:33 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x400000000000000, r1, 0x0}]) 03:35:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) 03:35:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa200000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(r1, &(0x7f0000000180)='environ\x00') read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x259) 03:35:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae61, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:34 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x400000) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={r1, 0xfff, 0x1ff, "c45a67a82c59fb24e8da5e5545cdfeb6650e046436559f3c70f9e46248426a5fed19acb9d00c572712cbde"}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") bind$vsock_dgram(r0, &(0x7f00000001c0), 0x10) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e21}}) 03:35:34 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x303eaea87f0000, r1, 0x0}]) 03:35:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x6000000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) close(r0) close(r1) 03:35:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000023, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x4f7, 0x2}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:35:34 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4000000, r1, 0x0}]) 03:35:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x68250000000000]}, 0x10) shutdown(r0, 0x1) 03:35:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:34 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9300, r1, 0x0}]) 03:35:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r1, 0x0, &(0x7f0000000140)={0x3, 0x3, 0x6886, 0x7, r2}) close(r1) 03:35:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f6401003030303030303030303030303030303030300f94eb20302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x0, 0xffffffffffffffc1, 0x9, 0x7}, 0x6, 0x1, 0x0, 0x0, "a0a495bf2ced0425"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0xa000000]}, 0x10) shutdown(r0, 0x1) 03:35:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5451, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:35 executing program 1: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f00000000c0)={0x1, 0xfffffffffffffffe}) fcntl$lock(r0, 0x6, &(0x7f0000000040)) close(r0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000007019a0100004500000011010000a7010000020000000000000000000000720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffa00000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000bf1c6140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040f645d516b69c18aef98ccdce810f0a52ab1fde003f58374b81c9447a926df65ef858e8a462ad0ec881e82ee9a340f7c57525f9b59de878ba7"], 0x421) close(r1) 03:35:35 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x506000, r1, 0x0}]) 03:35:35 executing program 1: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x101000) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0xd723265a86937e47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}) close(r1) close(r1) 03:35:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5450, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0xfffffffffffffdd0, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001, 0xfffffffffffffffc}}, 0xb) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:35 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xffffffffa0008000, r1, 0x0}]) 03:35:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x10, 0xffff, 0x6}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x3c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1de, @empty, 0x1}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000001c0)=0x10) 03:35:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x54000000]}, 0x10) shutdown(r0, 0x1) 03:35:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2ae3000000000000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r3, 0x10001, 0x4, 0xffff}, 0x10) close(r0) close(r1) 03:35:35 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x70e000, r1, 0x0}]) 03:35:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file0\x00', 0x2051, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000540)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/178, 0xb2}], 0x2, &(0x7f0000000400)=""/20, 0x14, 0x3a}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x200200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x178) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000480)={'gretap0\x00', 0xff}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x1) r5 = open(&(0x7f0000000500)='./file0\x00', 0x101000, 0x10) openat$cgroup_type(r5, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) 03:35:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa00]}, 0x10) shutdown(r0, 0x1) 03:35:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae68, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:35 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x730000000000, r1, 0x0}]) 03:35:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xffffff91]}, 0x10) shutdown(r0, 0x1) 03:35:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae76, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:36 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x930000, r1, 0x0}]) 03:35:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="00002b23f7910000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000004c0)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r2, 0x8}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000005c0)={r2, 0x7ffffffe, 0x30, 0x2, 0x5}, &(0x7f0000000600)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)=0x100000001, 0x4) close(r1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3d69, 0x7, 0x6, 0x6}, 0x10) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/237, 0xed}], 0x1, &(0x7f00000003c0)=""/128, 0x80, 0x8}, 0x0) 03:35:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xd30b3080]}, 0x10) shutdown(r0, 0x1) 03:35:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc0045878, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x6000000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = semget$private(0x0, 0x6, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x3) semtimedop(r1, &(0x7f0000000280)=[{0x2, 0x3, 0x800}, {0x2, 0x0, 0x1000}, {0x2, 0x6, 0x800}, {0x2, 0x9, 0x1800}, {0x4, 0x9, 0x800}], 0x5, &(0x7f0000000300)={r2, r3+10000000}) io_setup(0x9e, &(0x7f0000000440)=0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40ebff00", @ANYRES16=r6, @ANYBLOB="00032dbd7000fcdbdb250c00000008cbc465ba80bfff1c000200080009000400000008000400040000000800070080007149fbad4bd35d64e7398ae5ca3853f9ee357e4011688e613d62bf8fb19e5f8b57066e3ed1a5b553239149383ebd8afe5926f5c9f3307fdb642c11b2d91c21751748fc46f60d625e17e3cb28ab8c1aa7b4e2b16befc4d4682cc1b1d3b6948d18cd41467081b2978ede545d0359db293d8b10000000000000008d917e732bd35d1a99bbf3963d9a4b301965ea66edc955d4c09f625958921f6630e44b231fc816b63e9546090000000000000075875f09c9a9eb413bb01f68e3795e2a003246be144c"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) io_submit(r5, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000340)={0x7ff, 0x7e86, 0x3, 0x9, 0x7fffffff, 0x0, 0xffffffffffffff7f, 0x81, 0x1, 0x400}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x28, &(0x7f0000000400)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={r8, 0x8, 0x18}, 0xc) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) 03:35:36 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x60500000000000, r1, 0x0}]) 03:35:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) close(r1) 03:35:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc020660b, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0), 0xfffffffffffffe89) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x1a9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x9e, 0x8b, &(0x7f0000000100)="3eb54d09c14aa6db9a9e4bc51d69251d4d4af69b2a6a66d3facbb79a5712e43387de77721098f2c9286f145db56c6a1a97c8e36aa3150414f6257ba507cce62e98447ac948bddfd83e70e6251598f8a26b05c39b6a11abe9608514fede72b77849360b5da3a69816fa22a1e5a02a1620993e0f0b99f89868e3f04e4ac083308e7066b253f5929c6c38e27812741dd9bf9aeac4c6825a26900cc3156c808f", &(0x7f00000001c0)=""/139, 0x8}, 0x28) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000480)=0x0) r2 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f00000006c0)={0xb0, 0xfffffffffffffffe, 0x6, [{{0x3, 0x1, 0x4, 0xfff, 0xfffffffffffffffd, 0x0, {0x0, 0x862, 0x101, 0x4, 0x401, 0x1c00, 0x24, 0x7, 0x80, 0x1, 0x4, r1, r2, 0x3ff, 0x7f}}, {0x2, 0x8001, 0x8, 0x200, 'rootmode'}}]}, 0xb0) 03:35:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$void(r1, 0x5451) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffffffff, 0x4) r2 = getuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) fchown(r1, r2, r3) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5421, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:36 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x8000a0ffffffff, r1, 0x0}]) 03:35:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x1a6d2511]}, 0x10) shutdown(r0, 0x1) 03:35:37 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f00000000c0)="f3015236741e6eebe1e658be6dddf18ce7eecbd3774faa75b05250d464569b6f472aa8d86f81d4c1ef043b7d", &(0x7f0000000100)=""/116}, 0x18) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x10001, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) close(r0) 03:35:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:37 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x50700000000000, r1, 0x0}]) 03:35:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xe703000000000000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x3b4d5660]}, 0x10) shutdown(r0, 0x1) 03:35:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10f5, &(0x7f0000000140)="153f8dd25d76607063edefdd590d74065f371dd69f3896ea0cdb1b7d67c0e042aeaf794bcdbea00b1b576c42708683bd2f60a2e87e3a05cee0a4bfd5f736c4033d9f54f33563c59a7879fb2094fdc641921c043168374412554757c8a623a751739f56190daeca462c155dec3b347a000000000000000000") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) io_submit(0x0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:35:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x80ffff, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5c000000]}, 0x10) shutdown(r0, 0x1) 03:35:37 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x8000a0, r1, 0x0}]) 03:35:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xe7030000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) 03:35:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x0, 0x6, 0x1000, 0x6, 'syz1\x00', 0xffff}) close(r1) 03:35:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x256800]}, 0x10) shutdown(r0, 0x1) 03:35:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffff80000001, 0x61ac00) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000140)=""/225) prctl$intptr(0x21, 0x5519) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xe703, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x705000, r1, 0x0}]) 03:35:38 executing program 0: socketpair(0xa, 0x80000, 0xec, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) pipe(&(0x7f00000001c0)) sendto$unix(r1, &(0x7f00000000c0)="4604ce7b6c4a6ed12eabe7d47c3f4b15cd4c7484ebc9c4d4fb20303974ca5ad8994a3c9ecf2550c527323438587770b185a9604eb4faaa53b225e85c27ad188d26340e1a92e0964fbc5e0183434c", 0x4e, 0x80, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r0) 03:35:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x80ffff00000000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x730000, r1, 0x0}]) 03:35:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x80) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x101000) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0x0, 0x4, 0x7}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000140)="6fe1622acdf655979b1734c9e000befd3359333a1161ab7c7c617d9627916b3bcfc0b0696d7e1a68c8c974eff2a22c3b2a748856bfa8432c86e0144095d17124959bf3d3499e383f", 0x48) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffffffffffff903e, 0x0, {0x7, 0x7}, {0x7, 0x5}, @ramp={0x5, 0x3, {0x1f, 0xfffffffffffffffd, 0x6, 0x5}}}) 03:35:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) splice(r0, &(0x7f0000000080)=0x9, r0, &(0x7f0000000140), 0x800, 0x3) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x3e7, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:38 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x8000000000000000, r1, 0x0}]) 03:35:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) read$FUSE(r0, &(0x7f00000036c0), 0xfffffffffffffeb1) r1 = open(&(0x7f0000000080)='./file0\x00', 0xa00, 0x1) getdents(r1, &(0x7f0000000140)=""/109, 0x6d) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffdfd, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:39 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x2000000000, r1, 0x0}]) 03:35:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f92746d6f64653d3030303030303030303030303030306f000000000000002c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x1000000000000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:39 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x580, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa200000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0xa2) 03:35:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x132600]}, 0x10) shutdown(r0, 0x1) [ 565.384898] cgroup: fork rejected by pids controller in /syz0 03:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfdfdffff00000000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:39 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x7300, r1, 0x0}]) 03:35:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x4, 0x1, 0x9, 0x6, 0x6, 0x4]}, &(0x7f00000000c0)=0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x4) r3 = gettid() write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x1e, 0x37, 0x1, {0x3, 0x4, 0x6, r3}}, 0x1e) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:39 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x100000000, 0x20, 0x3, 0x6, 0x1f, 0x9, 0xb2, 0x826e, 0xff, 0x1, 0x4, 0x20, 0x6, 0x2, 0x0, 0x7}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) sched_yield() fcntl$lock(r1, 0x7, &(0x7f0000000000)) open_by_handle_at(r1, &(0x7f00000000c0)={0x23, 0x7, "b6572e222b855a739e764b4ffb68027cbd32e57e6996b086a81c3b"}, 0x200000) close(r1) close(r2) 03:35:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfdfdffff, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x10) shutdown(r0, 0x1) 03:35:39 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x100000000000000, r1, 0x0}]) 03:35:39 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000140), 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:40 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xffffffff00000000, r1, 0x0}]) 03:35:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xffff8000, &(0x7f0000000080), 0x1, r3, 0x9}) 03:35:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$void(r2, 0xc0045c78) 03:35:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) fchdir(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) close(r1) 03:35:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x8000020002103, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x8, r3, 0x9}) [ 566.416711] binder: 24726:24737 ioctl c0045c78 0 returned -22 03:35:40 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x605000, r1, 0x0}]) 03:35:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) shutdown(r0, 0x1) 03:35:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000010c0)=""/4096) 03:35:40 executing program 0: socketpair(0x13, 0x8080f, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000480)=""/121) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000016c0), 0x1000) write$UHID_CREATE2(r1, &(0x7f00000006c0)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x30, 0x20, 0x6, 0x1, 0x2, 0x9, "dab6631863b701973af67618e52cffc6925c2804e3405edf981a82e7dc952243c37d6e230005e30cae58c28514674013"}, 0x148) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000380)={0x7, 0xffffffffffffffe1}) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x3c}}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x2) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() tkill(r1, 0x3) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x600, r3, 0x9}) 03:35:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0xa2ef}}, [0x9bf, 0x5e48, 0x3, 0x800, 0x20, 0x2, 0x167, 0x1000, 0x735b, 0x9, 0x9, 0x0, 0x65, 0x0, 0x1000]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x80f, 0x8004, 0xf203, 0xa7d2, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x80, @ipv4={[], [], @multicast2}, 0x2}, @in6={0xa, 0x4e24, 0x1f, @loopback, 0x1}, @in6={0xa, 0x4e20, 0x1ff, @local, 0x2e7}, @in6={0xa, 0x4e20, 0x800, @empty, 0x3}, @in6={0xa, 0x4e21, 0xb52, @dev={0xfe, 0x80, [], 0x1f}, 0x5}, @in6={0xa, 0x4e24, 0x5, @empty, 0xffffffffffffff7f}], 0xa8) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000000000000003) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c756f6f746dc5a4b395c81c098f72deaf131e27fb45c79de654d074868b72303130304761303030303030303030303034303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x84, "18187f1b4e6efe75ccdeb60448d224c14b848af76d9c24c67b02c7e8ea5b2f8e789827d76cf427f85d13ec7c327c3cf6007cdea8da1ae8ed786b995b14df1c12b06d89e26ad63b3eb08700c1e9482db9c86fc1cce5cb86f8058e1103984746fb37b3df37c4a9e4b2ac683cc283b06f931cf835ff937bab3a51d332272eea09e57b4e4236"}, &(0x7f0000000080)=0xa8) read$FUSE(r0, &(0x7f00000016c0), 0x1000) sendfile(r1, r0, &(0x7f0000000240), 0x1) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:40 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xe07000, r1, 0x0}]) 03:35:40 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0x0, 0x1}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x81}) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x20, 0x0, 0x4}}, 0x14) fcntl$lock(r1, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:35:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)={0x9e, 0x4, "81d6ea44c6cb82382c551e80be9f0b288603c3580bf69c88dd1b4e8d4d59e01f944a156645d24a793a98bfb41805430e3d02d80ae1f355548aa9f27534398730cf2a6f7e1a621071a730373c3449c24226ce740909bddbc35ba478a56a3f8571aab87146133f3facd271e954a852dbc215ab277278c8645660a15705d38bdb5baf7aa2f81552d88667a7d5f4fb6b5f150a5fe176a649"}, 0x200000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)={0x29, 0x4, 0x0, {0x6, 0x3, 0x1, 0x0, [0x0]}}, 0x29) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d3ce758642443c95b86a870856c896294ddb75cde54bc312455fdde366b7d4cc3ea6de41755fb37aae1430959f52ab21e6e41ed4a95056a343a8b9c042a962446f7aa6374724d73ec0cb190174bce2942c8cdac1dfcfb5dc94824c4c9aeba269353569be5aadd0fe45ea7de9f540719d1d6aaea69afc55f59e892b89ce5c460ee40cf69ffd47201011ee2aff96953f931ffe6d025e8fe95cc76a2d8dd8e652cfa3fa732da05b78c8effc077636d7044010c766f3248f3a4bb219137a1722e42765841", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fcntl$notify(r2, 0x402, 0x14) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) write$P9_RSYMLINK(r0, &(0x7f0000000480)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14) 03:35:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x80ffff]}) 03:35:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x4000) io_setup(0x100000000007, &(0x7f0000000180)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:41 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x507000, r1, 0x0}]) 03:35:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001200ff09fffefd956fa283b724a6008000001fc41180b598bc593ab6821148a730de335d0f1cbc882b07000000000000000000000000000000000000000000000000000000000000", 0x4c}], 0x1}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8000, 0x0) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x12, 0x3, 0x1}, 0xfff}}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:41 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x1ff, &(0x7f0000000300)={&(0x7f00000000c0)="232556f7607e381c1fcbcac4abedf47e3fb160c5267cf391d865e355ac221f1858c84a48eb25e19c30ded3e9a264eff88beade229731b4425ca9cb3a9f87b36dff4c33333c8bc0b59f58f64e1bb389d7f0a31eb932428e98ca1b1c6c6845", 0x5e}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000240)=""/168) close(r1) 03:35:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) shutdown(r0, 0x1) 03:35:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fallocate(r2, 0x1a, 0xc2, 0x5) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e20, 0x0, @mcast2, 0xffffffffffffffff}, {0xa, 0x4e24, 0x5, @local, 0x7fffffff}, 0x97, [0x80, 0x100000000, 0x0, 0x3f, 0x6, 0x7, 0x8000, 0x62a6a4c6]}, 0x5c) ioctl$int_in(r2, 0x5473, &(0x7f00000000c0)=0x7) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x1}) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0x40}, {0xa, 0x4e21, 0xd32, @loopback, 0x400}, 0x3551, [0x8000, 0x0, 0x10000, 0x1, 0x0, 0x8, 0x6, 0x4]}, 0x5c) 03:35:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xe7030000]}) 03:35:41 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x400000, r1, 0x0}]) 03:35:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) [ 567.245175] binder: 24829:24833 ioctl 5473 200000c0 returned -22 03:35:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) shutdown(r0, 0x1) [ 567.319155] binder: 24829:24844 ioctl 5473 200000c0 returned -22 03:35:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xfdfdffff]}) 03:35:41 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xa0008000, r1, 0x0}]) 03:35:41 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f00000000c0)=[@exit_looper, @exit_looper, @release, @register_looper, @release={0x40046306, 0x4}], 0xb, 0x0, &(0x7f0000000140)="df3b9306a21cff2e16cca2"}) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/34, 0x22) 03:35:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x10000, 0x200202) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) close(r1) close(r2) 03:35:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x900]}, 0x10) shutdown(r0, 0x1) 03:35:41 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x1000000, r1, 0x0}]) [ 567.560320] binder: 24859:24864 Release 1 refcount change on invalid ref 0 ret -22 [ 567.584909] binder: 24859:24864 ERROR: BC_REGISTER_LOOPER called without request [ 567.633029] binder: 24859:24864 Release 1 refcount change on invalid ref 4 ret -22 [ 567.689215] binder: 24859:24874 Release 1 refcount change on invalid ref 0 ret -22 [ 567.697804] binder: 24859:24874 ERROR: BC_REGISTER_LOOPER called without request [ 567.711172] binder: 24859:24874 Release 1 refcount change on invalid ref 4 ret -22 03:35:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) shutdown(r0, 0x1) 03:35:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xe703]}) 03:35:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x1, 0x1}) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000000000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x4) close(r0) close(r1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x8) 03:35:42 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x507000}]) 03:35:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'fuse\x00'}}]}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000140)={0x9, 0x9}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0xffff, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x1, 0x5, 0x9, 0x2, 0x0, 0xfffffffffffffff7, 0x7, 0x4}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x4, 0x7, 0x5, 0x9689, 0x1f, 0x40}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) pipe(&(0x7f0000000280)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/9, 0x9, &(0x7f0000000100)=""/255, 0x2, 0x3}}, 0x68) 03:35:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xffff8000]}) 03:35:42 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x4000000}]) 03:35:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5455010000000000]}, 0x10) shutdown(r0, 0x1) 03:35:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x81}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = dup(r2) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000040)=0x4) 03:35:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x3e}, 0x28, 0x0) 03:35:42 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x8, 0x6}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) close(r1) close(r2) 03:35:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x1000000000000]}) [ 568.414414] binder: 24919:24926 ioctl 127d 20000040 returned -22 03:35:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x10400) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000b40)={0x0, 0x0, 0x2080}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={r4, 0xfffffffffffffff8, 0x1}, 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cd6"]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1088) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:42 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x506000}]) 03:35:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xfdfdffff00000000]}) 03:35:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r0) 03:35:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:42 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x400000000000}]) 03:35:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d8864653d30303030303030303030303030303030303034303030302c757365725f69643d9fea11c659fc8ba69c9a3533fcd8aca7e33ecb3203af347ac02554e4f49ed567c56c00b75a38f21a5e28d43c01cf7b9449a86a4a92364d34b6f611b701c242f38283e25d6ea46028fe6ff812866db4b2a7f2e09eab7c310c4667d62a6bcf0effedb1dc30d6c45dbb6937e94b1390e654eaffdb788859070000864c93fc1e78444f5c37f2c6d67918bfbf707c69c36c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xe703000000000000]}) 03:35:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd243766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000003c0)=@generic={0x3, 0x7, 0x80000}) r5 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1d793dfaa763394e, 0x2010, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x98, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="056304400000000001634040020000000000000001000000000000000000000011000000000000000000000018000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="11634840020000000000000004000000000000000000000011000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a687701010000", @ANYRES64=r5, @ANYBLOB="030000ffffff7f000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000feffffffffffffff852a68770a000000", @ANYRES64=r6, @ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0500000000000000"], 0xd7, 0x0, &(0x7f0000000640)="72e711d4697b13a9bc8e94eea5b7bf89aaddcbbac8a5864d075a2c38aa0e5bd6cee6ca65dc8010ba0f4fa8316c19f01792b8c92ea05c8d34416f2b404f390805519ee979b12057084a9520cb019705a4675c983731bbf19f5fa1b91741b692575646a5d89cfd9854224190714ed87b722671ed5afb0c40f2b8080dab46db5e230c2fb0a7d2720a3bf536d68c83a828943a6a32862cba86952179485d6523079818f8b158f16455468e34bdb2f5f57bfedf00d6893ead7102461c9154759bea1db98e07376ba77c799a87da08e7cd9367f11bc393ff637d"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xa, &(0x7f0000000200)=@raw=[@alu={0x7, 0x443, 0x7, 0x7, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x7fff, 0xb, 0xa, 0xb, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x4a}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x59, &(0x7f0000000280)=""/89, 0x41000, 0x1, [], r4, 0x1}, 0x48) 03:35:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x8055]}, 0x10) shutdown(r0, 0x1) [ 568.958328] binder: 24979:24987 Acquire 1 refcount change on invalid ref 0 ret -22 [ 568.971158] binder: 24979:24987 got reply transaction with no transaction stack [ 568.984869] binder: 24979:24987 transaction failed 29201/-71, size 24-24 line 2762 03:35:43 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x50700000000000}]) 03:35:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x3e7]}) [ 569.061565] binder: 24979:24982 Acquire 1 refcount change on invalid ref 0 ret -22 [ 569.081065] binder: 24979:24982 got reply transaction with no transaction stack [ 569.108413] binder: 24979:24982 transaction failed 29201/-71, size 24-24 line 2762 03:35:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:35:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0xfffffdfd]}) 03:35:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5c]}, 0x10) shutdown(r0, 0x1) 03:35:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:43 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x730000000000}]) 03:35:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x5c, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0x7}}, 0x20) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @rand_addr, @remote}, &(0x7f0000000140)=0xc) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) shutdown(r0, 0x1) 03:35:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x80ffff00000000]}) 03:35:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x81, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000180)="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", 0x1000, 0x1}, {&(0x7f0000001180)="367c0b0b5b8fc401763381f9a3", 0xd, 0x1}, {&(0x7f00000011c0)="e90363db32e89ab404b7e406b43e7fb0eb6847bbf00da17203dd71af114c902a6f77475038919f3601f867cd714ca13352eebd9886a6659c9905388b84b4c6805f9c3b33651878387e2c15d45bedf7de962ddc4a979d40f99968ca7b2412a0ba61c273f1e5f177a64b54ce716773c626da3861bc850f55c290c5b278cf717925039090ca1c4d38636583aee344482544eaa7564bb2deffc6c9fdce83576412946e23db7874693ae14ecd1c4c216f01f3a45d00cbc78264fc3d2b60012d675dec9e9c5f2787fed4e55d46d517d8b244fe5c2a83132b54a36e8cff2cd3e45515fbcbd425597aba51d1696db3", 0xeb, 0xffffffffffffcf2d}], 0x80, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) ioctl$RTC_VL_CLR(r1, 0x7014) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x0) 03:35:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x730000}]) 03:35:44 executing program 2: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000001c0)='/dev/binder#\x00', 0x0) socketpair$inet6(0xa, 0xe, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) r5 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r6 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x100, 0x401) r7 = syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x3, 0x101000) r8 = syz_open_dev$sndmidi(&(0x7f0000000640)='/dev/snd/midiC#D#\x00', 0x9, 0x402) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x84800) r10 = syz_open_dev$midi(&(0x7f0000000800)='/dev/midi#\x00', 0x5, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r12 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r13 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a80)=0x1c, 0x80000) r14 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vhci\x00', 0x800, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/net/tun\x00', 0x420000, 0x0) r16 = syz_open_dev$sndpcmp(&(0x7f0000001d40)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) io_submit(r0, 0x9, &(0x7f0000001dc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xffffffff00000001, r1, &(0x7f00000000c0)="88ea97ef7e7d7c4585562dfcb260cf531d9d2e8a3a0c08b8c755396c8f1ba8fca783579b8b31a569ae8025", 0x2b, 0x1ff, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000200)="d0d2271aed2c1e57553a5bebe5bbddaf1c204f84bde212baabc6b824fcbee6b9afa293faa762cb850364d203e4f384f812bfbb350dac1857476a2c14604775a77fc01f7f05dc7ee2f07b4e63714126f3e6789ec3f9fc795188c575c8166fca4d9b682fe65008b50079b9754ba941349a614c97a4702b6a62c65781021dac535214884b3ce4c7a9beb84ed740768c0dd1123e", 0x92, 0x0, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, r4, &(0x7f0000000340)="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", 0xfe, 0x2, 0x0, 0x3, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x9, 0x2, r6, &(0x7f00000004c0)="1e18d2f176f21c37f272398db62f068e278280e7382a40346b8c5080de62e110d8a2a09f213d8d6a7ce1f55bea5c8855b1661c68a02be0a08450a6c2f605a563bfb1d671018394e6ec53571a4baa9510e56e8bc95a4878a61789a99ad84aa0e47bf57ab332d0a1cdcba3ca14e6fad0c96bdb1f6f0fe3560203929fa4c091890bf7b88bc747c597d8f954526cda2340c3f395424252ccdc47dfb4ea0a36e8d6e691513a4a7b5e5e380145bc620318879e2f65c4577f8ffad57f7d51f653cb55ee4c0e92c7178aefada3a96d7a80740a2fe8a11335065be11bfed389e7f3a435836a578645d8391ab42e24c240b0f8304c28c42758377ef6f74e", 0xf9, 0x0, 0x0, 0x2, r7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x993, r8, &(0x7f0000000b40)="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", 0x1000, 0x3, 0x0, 0x2, r9}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x7a4, r10, &(0x7f0000000840)="643cdf6627f1000e56daea395af49f02c9acc23bf7230c85baac6c7de87c786ea7e49c848f66a67b11a659f6f9bddbc774", 0x31, 0x800, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0xffff, r11, &(0x7f0000000900)="dd94219a2d2db40f430b3911e51f77b978f395b0351692b45fd03bd9a44fecaae45319cdff24e637610d0fa995454327371fdf94a7d0968dbeb78391922043dde446024caec3328cfd400241c94d05c39097d21b6ca1f9e642e753e855615a6026c2dfa869359103964233b90910303d149665b5591daf2e89b97bfcb5b89cc993444f51e5624bff5d195bf5d037a65982aa769436a5f5f7a192eff4c42322c32f4180ea6c05524fb416af00edeb19e030b9a555d4c5c48c6760b09ae1cb956aaec9fbb0ab7024189678c6e6301be4b39c544e44584c10ecced7c8c31b2b54", 0xdf, 0x3ff, 0x0, 0x1, r12}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x5, 0x100000000, r13, &(0x7f0000001b40)="ce3704aa2b081d0b3a5260c2ddc5c3c860b5dc45098835e425124ea7a5cca19b67b1b529ec77f7e03f52b008726ffb140f79f5f427070e7fefc12fa68c8c3b51a68bbae553206701e124e480873aa0b6ca41d66e9683347e21de2ce2078e0ab3e64e884e00510245264ef403640b17e7a6299ef85570cb6f0b2377273cc8e32b82ec3b4d1a51dc42aa93885f6eaa6c0965f95b31076c04de09d9e3ac9f057cb59b23574e257acc5b51fb9ffa693c2d146e4afcc34a55385a7f", 0xb9, 0x1f, 0x0, 0x2, r14}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x2, 0x8, r15, &(0x7f0000001c80)="3e16f920b08e0da92c6adbd8dba1382db6237003b1cffbd7aeba40fe87e5303f4b1e47171447977605849ed57b0a2f28b7b1c2ca78b73adc3b4b6ca764e54442ec859adc3e1c0b0b836c40d5f9f61e8fc467c390906c72ecb02d92e06fdec69f33d31af0d2c5185f346c6acf7341b9e89a6264723bf20a03f740b2934c7a77ed014ae204bafb827bcfb2735ecdb34ead3537b31055d0e439468b4236c63ad16e8ee22e82f29db5986a19ad2a2ece9afe80a74f1c45eb5dd664313a03dc", 0xbd, 0x5, 0x0, 0x0, r16}]) r17 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r17, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r19 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r18, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r19, 0x0}]) ioctl$BINDER_THREAD_EXIT(r19, 0x40046208, 0x0) 03:35:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x800) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x2, 0x100001, 0x0, 0x0, 0x80}}, 0xa) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) [ 569.978479] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:35:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x60500000000000}]) 03:35:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10000, 0x0) close(r1) 03:35:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x80300156]}, 0x10) shutdown(r0, 0x1) 03:35:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xa0008000}]) [ 570.242179] IPVS: ftp: loaded support on port[0] = 21 03:35:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x300]}, 0x10) shutdown(r0, 0x1) 03:35:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x1, 0x1, 0x100000001, 0x6, 0x1, 0xd}) fcntl$notify(r1, 0x402, 0x3d) close(r0) close(r1) 03:35:44 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x9300}]) [ 572.004847] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.011419] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.018653] device bridge_slave_0 entered promiscuous mode [ 572.028007] device bridge_slave_1 left promiscuous mode [ 572.033573] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.078294] device bridge_slave_0 left promiscuous mode [ 572.083794] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.120972] bond1 (unregistering): Released all slaves [ 574.133036] team0 (unregistering): Port device team_slave_1 removed [ 574.143451] team0 (unregistering): Port device team_slave_0 removed [ 574.153790] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 574.191796] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 574.277085] bond0 (unregistering): Released all slaves [ 574.332660] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.339278] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.346206] device bridge_slave_1 entered promiscuous mode [ 574.373892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 574.406603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 574.485034] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 574.519442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 574.725956] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 574.733531] team0: Port device team_slave_0 added [ 574.779332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 574.786826] team0: Port device team_slave_1 added [ 574.829320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.877981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.925016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 574.932291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.949466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.989204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 574.996391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.013799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.478533] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.484938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.491655] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.498085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.506057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 576.387809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 576.618440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.709515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 576.799816] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 576.806042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.813811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 576.903627] 8021q: adding VLAN 0 to HW filter on device team0 03:35:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa2000000]}, 0x10) shutdown(r0, 0x1) 03:35:51 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0xffffffffffffffff) getpriority(0x0, r2) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x3}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3ff) close(r1) close(r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0xc, 0x4) 03:35:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xffffffffa0008000}]) 03:35:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xe703000000000000]}) 03:35:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x80, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000000000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="668000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000140)='syz1\x00') 03:35:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r2, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x4}]) 03:35:51 executing program 0: r0 = creat(&(0x7f0000000140)='\x00', 0x8) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x81, 0x8bf8}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000026c0)={r3, 0x1000, "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"}, &(0x7f00000004c0)=0x1008) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xb1630400]}, 0x10) shutdown(r0, 0x1) 03:35:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xe703]}) 03:35:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x8000) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x800, 0x1) 03:35:51 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x2000000000}]) 03:35:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='JJ=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xffff8000]}) 03:35:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xc000000]}, 0x10) shutdown(r0, 0x1) 03:35:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000002c0)=""/238) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) name_to_handle_at(r3, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="8800000000000000771807981000af31f8dd2a39fcf961da5acb692f1ec53f9263230fe1cb81f6d9e19f9f428d1dd61e4b2d16267400fb6ccea88d3a3069cf9d8ed50a345db7e0705ef618fc74f4d887116fc5cb321fd331a14337a0a395b382e6560078f03336626df88d6aac061014337fbc6d2522142594894647d12e11a1a2e8bda85fd5f289"], &(0x7f0000000380), 0x1000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000200)={r5, 0x1}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="087d47951f93f307550b7a455e99dd060f40affcc972d611e8bd29d6906ffc272e542c9a345c25390778ebe4f0b76e9ec59bb5e7c9bb08134828c08176372f081708a22748704dda0f82dd3b252c18f26206d957a842a051b0bb2ff8759d621e4422434225a66b54b5e8b4ed1fe7a93040296ce41005e70445b3effc7f5e6cd0cb5fd437d311b3128d1e928ddee36f375e820e68bb428ef8ed171cf98a3e", 0x9e) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x7300}]) 03:35:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r1, 0x40049409, r1) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) fcntl$lock(r0, 0x7, &(0x7f0000000000)) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) close(r0) close(r1) 03:35:52 executing program 0: r0 = msgget$private(0x0, 0x100) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/8}, 0x10, 0x3, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0xa2) 03:35:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x90faffff]}, 0x10) shutdown(r0, 0x1) 03:35:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x3e7]}) 03:35:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x605000}]) 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x8, 0x3f, 0x80, 0x80000001}) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:35:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x80300954]}, 0x10) shutdown(r0, 0x1) 03:35:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 03:35:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xfffffdfd]}) 03:35:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153ffd8e6955c3b0116234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) 03:35:52 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x930000}]) 03:35:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x1100]}, 0x10) shutdown(r0, 0x1) 03:35:52 executing program 1: add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={'syz', 0x3}, &(0x7f00000007c0)="d148ffbd796082b5c9c0c410937afc02ac1583f3944f1a3ffe9c21333d4e4bef35621cf4c55078b5030be2b870acae06bb5a701d93f28667e34f5e8f778d351e8597c84335721e11dd96058a53b685cc317b495abd6cb3fe846bab41b04c30dadd755b359c0930bcf760ab4027969f5df0e9670f4e82c4b0b0a8be29a731e748075f54f8a86c1eebdeb54ce850fa8fbd00c803afd1003e3bea6dd9fd", 0x9c, 0xfffffffffffffffd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) restart_syscall() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000880)=0x38a) setresuid(r2, r3, r4) r5 = add_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="c6518dddcd2d488d6f6e47a87d80f7f1dceb87714e3056a076deaba4268f746cf2c95fbcb47b8f46e964626d5ada6ece1d30569866f5b6ea01ee8ff0e55abf2d9336f0bbd1c9a584f9cbd204addedd56104966a944a8fb84628aca3bdea50ba6259c5fd64b0e9aaaa4514dda360602ff2fbecebd519cbbd1b3e018b81d39ce384d23712f11639b4f3cf1f494095c6ddc119072f1dbe4b2d8eabd87da6300d6f6cafa513d2df0b6ffd6f7bd4d0e80730ad2f2760b3f6203076b0c73", 0xbb, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="e2818e0fcf36a2f39e6925577f424f347bc997f2402112249b5942d0b95fc88ee4d4c1a847da0edce0ca492e9eb2208f3ed66b3639a31972c4ac27", 0x3b, r5) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000600)) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x23) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000640)=""/88) close(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x4, 0x4, 0x9, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}]}) [ 578.541751] binder: BINDER_SET_CONTEXT_MGR already set [ 578.556418] binder: 25492:25502 ioctl 40046207 0 returned -16 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='^#=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3e8c4940}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x9}, &(0x7f0000000200)=0x8) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000240)={0x0, 0x1f}, 0x2) 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x80ffff]}) 03:35:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x7fffffffefff}]) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl(r2, 0xb1, &(0x7f0000000140)="c65461a6b2d846144d15222967a95d46744df1479447aaa2af1ceb6cb833b987909b524b74703b80efcce90ed2bcfc5b4c0bcc594decd2c8b8bc8910f7b7d4d4") r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa8880, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)="5940742837d60d78438fbe145b31ccaf1edac1117129db5593d1b0d9713c70b0a986ccfcc79a6d59") 03:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x1802]}, 0x10) shutdown(r0, 0x1) 03:35:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) [ 579.027281] binder: 25519:25522 ioctl b1 20000140 returned -22 [ 579.059772] binder: 25519:25533 ioctl b1 20000140 returned -22 03:35:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xffffffff00000000}]) 03:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x60564d3b]}, 0x10) shutdown(r0, 0x1) 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000000400006user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0xffffffff00000001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r2, 0x9, 0x30, 0x67, 0x9}, &(0x7f0000000280)=0x18) close(r0) close(r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x5, {{0x2, 0x4e20, @multicast1}}}, 0x88) 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xe7030000]}) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) fsetxattr$security_evm(r2, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000b40)=@v2={0x7, 0x3, 0x8, 0x8, 0x1000, "1e32c1289787921997142a841c3acb51260e0ec928de70c2f0bc6429f2adfc63a54d33c25d55eef8b2260ca2618d2f0505f25ea88e45d9a3a46f63f2dfe05611fd27e3de1aa5adf6982b712e97b90f09a1768f45e37187c59b91be91c47718d978712504f4e99f372714ed34d5b21ec8eddc3212e1b82e255639298b7cdd3fd80fc4d6026c89c56cb94323c8ce42c459da27825442168a05760cb4f624e97488a57920f8c9662d819acf6fc6ec45283de4909d439409ad5b7ef2ad1444bad9b186e32cbd6b1f9fbaa380a06cc4828cd873bc627f43bc9a2a0af687bef3c5956f4464315d245f5c9ba9ed58179155d1ed99a26efe60c4210d1fa9edef840842c051858eb68b6cd99271b35f39f659d766fda6fda7365894f51f889b1cb1d34b70587a6497c7b648c686a0cd5354f8b452278bf03a4f492671fedbdddd8b7fd31c7d2c027e7f1bcc8c3fd1f3f7591914738483170b385a19d62d6f38e97127772465d3423f64bd339836c46c14249528f24ab4e2d5ae7bb59cfec2824786f09b05b7ea8541fb6354bf0f5558b5b7efd1e029e94aa887e2aad8d64fcadc28a5eb5cbee50dfa7b2d57505ad7b267cf6afdc19ec8a387a127aca1cf8c16030e96e7d859cffc55774d913df6d13d2184803bc87e70f2fe79677aecc56fdaed58964b4494fccc5937179063a86177da7ffa84b98fc43d6354438d337c052d962fbacb3b68c910e32175fb428c224b05e078e5c6161c67281b230029bc811515353f97af6bfb710bb2ea84f50e0e2e102ec6338c57893a9f31c92cb661fd40dbc2de6a8b724a47cb15ede90a832298208e580c506778637a5a98374c2cf31b7015fe3b32a646abaf93cb73b0eb58f355243d789e32739d6b1ed47f23549bee5ec221f9cd407d773f2b9c7367c30a65e3d4b6f5a0f716921387d407f82f734737960e01ce080cc8644d35d84204487e629637af8dd34d2af16b02f3f2e2186876dfe8437633c4cd9870415fd4b6bcc0ecb62d5fd4b58ce1de0ea673e7771f5cbafec4584a8d55725e873fd4342fe938a82f1cf0256b16510f70c11d066f5d589bc4f3822a32afbc07ca81c42702ebcb1adb58f7b0cb050da4edced07a353a3690c0b92a6caa43d9d347bbdea4aa5cedd998c1180a6bcd7ab5c74d148eeb96cc22d6c43677f188e65eff8e64d6a3b915d13093cc042de048a78f37fb09b370121c29d1185dd6f52eefe7332ba8ff8b2c11c9ed6438d8a3ede10727c193398775a4286faed119960b6422669b06c422ee43577673205931b8c689520e7243a1e8f163a8d372cdf995122f536047ca226aa150aa8185511f1800bf670b06b13d32ef890d5c1461158d8fae9e9b29b74e2d8d0c07db8e2b159a7c1325de5e96380347dc513217bf3acedd416265833dcfd513a9cfa58234d8fdfa413217ab84fac6614e1b79ae0b7910cc3dc71278de22c42806c1b521f2d5365e2f762393b319efdab1c230507fc85a84f27e0cc74b725bbb10fb82a8dc9d41533bc1a7a414854a4570e405ac073827b2cd57b0bcef62714c1c5a7dc53c2feb3ba18cc1e1dbd14f448cfccf34cd3dc46a1d8b7a882bff76f3950f982f793e1e4913e85de72a15a16251619dd0334aaf9fcb8b1dcfa16898a46b5bfc055a53363c2e4e1cfc0305fdb122c101e66aa1fcceb3725c9295dbc177496ff83aea3074efaa66a08d3ae593809f8bdd28ccfdceaccc3318f75fa592562d01ac8e87fe81ab632ec2efc5a6adefaf05d41b0ba254c519878ca169fc1cd8fdd2f22a2d524e55b2485b95f685066b22ab9ead8ffd3d4b2f19751bf3025c5c99fda84cfc366a7ccf30baf4914798a3104a37e8e5c06da69f8e4ada4f7405a6071097e5dd61a6692b656684e7a82d5a80694610fe4efcc9920ff5d78e4d2d7962610a70c359489873ea5e201947fd353f9f84b074f837b6bd66b3c3cda7eb2a9c83ac9b39dbe2b139ee05afc2628f37adbf7b427353116504f18c084317ee3a23696c099eaeff76ecdf1a08666e8b6e68a1d3ed8d40b235ca9224c0b518d72e44eec62fc7b3498c05ae7c1003a7f7eb4862cdce30191f5b23d60ea01966f75d6e04c3b6ccb9ded6d48dc7527ed549bac5dbd2c5259263a311fe348612b4e9046623262e4dc369de1827f9cf4251ed7f80d145c023c2647da9128f25b760265716a330f0cda8fefdb33b20275825f1e56af511096289c5181a6a5a7143bed5a5abecd862fd7f3c81cc7dece11253bbe2f83a275720ab3fe8cb91e8a353bcbbd72a26ec7be8fc483dfba9bb7ad154ae7c95db1015ead426855f85623c42de6f03f7f4c17786ab57662ce1f967dcbc829dedcdd32c649460d43046b551221e1ea0332f6857e0b4a64c27ac96a18d8e5d5f1e29167442c560ccce9d9c096ad7baa8c8e667101d797c54c18c740092055d632a1422946d8b1d66188037a70f799b8dfae092460d4e63324481bd38b5bbc949be0cd5f7007b59aa61f15d68ba1679b516c1e12c195bcf91f22efb378b0f650cc6680991cf4a911d5175ba8eaa04c937ee790b30f098b10fe34aa0ca0b4be1c6e2f4ccfdee9c54ca30cb337fcceb7b1ee717849808e3352947dc5a1f17f1ad84aa7f08e30552455508581f55de2e2cb9b4ea6455a96e00f1312626df285a28dd82c9d47b792547785670c5af7c2eb147793e280c4b5450f5b61a7af484db81804e2fdda637f352f6f477bb49dbe26389ad84b2b18d0bfe8b3a96ca9cf94f789e09793f66a6dc7d385c1d8324eebb07c0c0289adace8a5ed3b72cbeb551680cf9474c96dc09542f39ba755041a77e2ffae6d6af5c6f4f3d56541e30f9099eb1484c7623059a1eb46824d1890150a4f5ecb32b1573a500f1468a7bf9c3d74684e157eaaf6f6dcb919a2417efb050623daafa8d97d14418d697cbcd85bd36a2f0119abb483c4a10f4d5e5f2eaba3003a84fcba6ab98b6cd722857f71db15416a541fabadca92b6b8646287b636cd301f614a7d1ad55a76e305d7d022762a7cbadac8afaab88170eecaa04c14cde404fb13f81b3baa1247722fab477981dd46d141c3d8a478a96106d6b60108bbdb259802c6c2692da2674751e74e159cd9d96c45bc4d5dcd25ccdf3c91c233a1e59b526a3c5f5f52863ef1978e2189755799c389d9bd03e84aef40fbe5919690194c16c03ee09c41c8760ba5c1ab4dd2dfe291b1dc7ba0214f1cf246d9c0a6f5317283fe478b5cd03ba406bdb14bb72178fae041415ca9f583906ccbfe42785639a91ee4cc8befacce9ea1f5326981781b5adc667be1d21045c627eef1703759437d12febf12d02558bad433856a32aa075f94c665ba09eac131077d419b560d8c7cecbbc02dce7f605fafc787523b3ef7c390dbc7cb1627d9f388b82d23791d26770039c26962a9b20c91ed0f4a48b5729211594334eb0a83e784153c6e7f76408508cfc33c123506dcb3ab448ba30a3ae60dd2bac750a972c6bca7e76943637fcc9507946282a85415dbe25f0430263788293a96c99716e4eaa6870e9a7c713842be4b1dbc3dd89d8ffeac5d8d30eeddc1541ba32cbaffc10da57afd4d5feb80f61b3c8a27a6b901fef5b5f0467a769a390c7485eb81c74e03779c8f898df60d3976ec53dafa46de297d983eca2ddd7cca78b36995e9b03211823dac876d9bfffe5a7ac3e6e7a91549ab9d30d48fc7f33e81a7c6115329d743f156809e0a47b456be60091711343ac045602501278381e4cb023a6b14b55c19694219064d40352b9e3084a1482a79576d0574f57f4c77558829d586ed274ac149e03c2de5fbc5ad171e03bdee66775b1a0994be3994b7aae9187b6106b4fbbf4126230ac2704a4a47485fc5acab1065dc947809ef7de03a976da73f1b042942d07c2e63d2143b32ac1155c263b95e571a51de781c59c819847213c234e749a466b4ad66391c0465d42aee0c4a6d67085f8cb902da39b4fd3bd779e7e4cc75d13b978833f85001eca338c3e53e07f63f9b05be08fee59fc0b340a957b345362f255339d55a3719838ab7a3f5e7b2364dc753e8ea5a3d7e81a036e6641826b61790755dd7d9b14a772cc92312f18eddde01a2a237bf83329497ffcca31c94c4979c43a29d67613ca0d9978e2a17e343fe1e9bbb9a7e689b01821a1256c19df091465e85ac4ec2c99a54373ca5bc35d22f04df5a7ed7fd5b6a738cd81da8bf977ec85ba4eacbc601a466b94639e067049b86d8785e39ba33db261f1375fd76aea91df9c7f11715f4f06469c709e8dd00cb2fefb6771944b64c9bff5630ccf7a0e27c46b04dee6ceed0d947be36073bb3fd4fab40506063f202488ef24ea5cd2413a046f60c7659f649f4d039fc8048e251b38aabb86a2fd82b173a026b0c22e2acc6a9a03a8a27285e1bd0fce73040d534cb82d07ab428087daf2dd46ef5a8bfdbb8b49148c5eb3389ce3a5e8d2d2a15bbcd90cbd84e63ea46eba2a4a4ea3f92457a813c203dccccb980ebcac6e9eace423fdb0dd06ad43ba564433d77da59f4d63bcb2319266e56f57c5600f9ffd6d79c2e7733057431f14b421a489fdf8389d375856d54b68c4409ca7c93f941d37feceefd6cdc6e4dbacca691146aef3c806ded9fdec59e6ed5d20baab05ba066de0bae92ef374d9e7b7d1a39e0a43133ae5abb6c1dac62eee1cd6aafbd44973442bafc0104f9d2a607d7f954b8b4eaf2fb051372b602c0aabe495aa854aee9b622f0b82840e57a66849db79c0f5500b98bc2cde1fe7ddc9562844c7cfc76246a89fcfe9511cc845230bcc03fa321ce79f53bf978e91986c89ddc989d3a2ecc5cb11f5871c77b828ad86f6148123359a2fb514355c4b42850408d8fbf97e2bce07f2d5b389a2b05dd9d8ffa2a437e0c2009e39579b068077457b65d0839152a0097bc2a14b57d56a4f0072c62ca1920b5fe78118c4f0cb6beb91e04653d3a2ead618b8627cd2ce7f920ec09972fa08e167b1c20818ac43daaee945424bb3c4e332aaef9993a5d2e397067fc2df181e990f8146a244f3e0a0738cfa456ef9cea1352a32a05dae599be49554a32bd55f43ea30b1690fbc0cfe44a6e813f8ea91bef8e71dd9bc0efbcf485d4586e2e4215885f40fa7019680b7f56e8f77ea5f8221174aba2745917b282e1fe7392adb96dc54d0643bed3002963231a048e65aa5d827744e739c9598d78dae66b9adbeffbe07061565e7e3dc578d4cd4f9b34a28c4bf4bedbef0e3ee3f07b67b7921a9405af8d35c6fb6324523e2ba950f70183cee154d57675e474800fe206e431672ecde9dc5070cb6d7b588a3ece418affe7433661bc18ed549d60a0f594c0b91a1779b0f2dc1cb247fae9a4a2a1d7c45e199b5c58bae73e51e598694042d7819c95964309566a1cb250cb753eecbdfd27f158c13d268b9d29b37ffb427ad9fce6cf1063e6d838976a9171edc813d1ee2bff39641b8208736d6a0e7ab0e10fa5aa7dd5ac4d6c11bc516f5e92c6917f18c9ceb8f3940dd3e9b7570676ec6122d822d72bd07c2017b020cbf6a4404c9e30d734eda080391748b8b5b6314b1c6ebd33509d58878ab79d3c9a043bb2258eb039c5a61ee12899a733f8945a068c694ef0456c080ec2a0da6ceac44684c7d4b4184f0e9f9c8bcae8c7e77692eaebd8f418dffdc41d4e5e5f9f6b3d2ddc8a941e60338b8ef934c23846e00630f9900653ce498a3e97a501eda17cedb13e8544689bd707f8de5e04a6ed5dc87724accc2b426a39a54ffe3497966969f02fad5b00a6c6962e0f337b1f9a08f5cb8c5b5f781648b7574"}, 0x100a, 0x3) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="4704c138337ab04fd0f1515cad1e8b1004b46f54c097f98cefab2bf709aa36fb1080e221317b16e3f3690c812750cea8e739635e2a5ba8a30099a8f4b86cb7390bb96ca031978aa009fcc5bfd665f302bca6526788cf98e8a101a9", 0x5b, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r5, 0x6bc5) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000800)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r1}}, {@euid_lt={'euid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'fuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fowner_gt={'fowner>', r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) clone(0x4000400, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x8000a0}]) 03:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x11256d1a]}, 0x10) shutdown(r0, 0x1) 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xfdfdffff]}) 03:35:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x7fa8ae3e3000}]) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000140)=""/68) 03:35:53 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/44) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030415e5f69643d00b43d955be1fd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000140)) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, r2}) r3 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) close(r0) close(r1) 03:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xc56d251100000000]}, 0x10) shutdown(r0, 0x1) 03:35:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x1000000000000]}) 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) read$FUSE(r0, &(0x7f00000006c0), 0x1000) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:53 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x8000000000000000}]) 03:35:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000280)=0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0xc2) mq_timedsend(r2, &(0x7f0000000180)="b4f8be4208593ddaf114b9e7ab674190c26795bf703deb23f64a0728e700ee89af2932489cde64f6f598f1903523bf7680a8167bdda0ffa3eb0b66f5e0c2f47f0bdf73d44a196090b3a167e7f677a7578c004454fd6a6b250783bba66a553b7acd4f4c7abb8bfe771f364acd7839b4bd687aca0aa009daed18570d156a", 0x7d, 0x5, &(0x7f0000000200)={0x77359400}) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000240)=0x7ff) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:53 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000, 0x0) fcntl$dupfd(r0, 0x406, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000000)) close(r2) close(r3) 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x60000000]}, 0x10) shutdown(r0, 0x1) 03:35:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0xfdfdffff00000000]}) 03:35:54 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xe0700000000000}]) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x501200, 0x0) timerfd_gettime(r2, &(0x7f0000000400)) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7da, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f00000000c0)=0x2) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x4}, @map={0x18, 0x6, 0x1, 0x0, r4}, @exit, @call={0x85, 0x0, 0x0, 0x10}, @alu={0x7, 0x7f, 0x3, 0x7, 0x5, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xd, 0x7, 0x8, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000001c0)='GPL\x00', 0x1f, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x0, [], r5, 0x5}, 0x48) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20044011}, 0x8000) 03:35:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x5, 0x200) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0xc9}) close(r0) close(r1) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/91) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)=0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) r7 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000002100)=ANY=[@ANYBLOB="840100002200020026bd7000fddbdf25140037000000000000000000000000000000000158010b00015920d1ad8556e0c3412a5ce333e92a6d8feef19372f49cdc476981b18d6cb2bc57c813c4d0e2f8a29091d79106d8502c15603e9af9ca201a44d79b5b654ce83517b75b3b6757c865d3956aa8a6150249c8a50e0230f085434d80a4ad39d2a8f316f8dd0c07644dbae0ce108f6fc522b27e6b67f34e419c3cab84e0017d578dbe08007800", @ANYRES32=r3, @ANYBLOB="cce12c32c488cb0d27f1ba6af6c7334836210d85fb94cf1a484c5fd3836f5b6b72bff939db6eb37825039b3297fec8706f2b85bfd1f0b0bcaa2be561ef556047139ec0b48fba581c85bad780ef417718b72b08da769f7ad54ac4a64dc9abfb161828d500ad2db1aacc08008f0004000000001f2223cbd9ce92a5c69bbd2d5b3c389e7067695aaeeb1fc5ddfaf1dd5b91c4d7fe7a12a5e9b1d26bd567a6f4bafdff2cde90382bef5be6997cab48b4da01079f09a0307e2351d1b43c421ee960204b6fae93cf5abbc2988dc6cc5c94001a571610004e00a3f565c4f2ef440180", @ANYRES32=r4], 0x184}, {&(0x7f0000000680)={0x580, 0x17, 0x102, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x154, 0x73, [@typed={0x8, 0x80, @pid=r5}, @typed={0x8, 0x59, @fd=r0}, @typed={0x8, 0x94, @u32=0x2}, @typed={0xc, 0x1d, @u64=0x7}, @typed={0x10, 0x2b, @str='/dev/adsp#\x00'}, @generic="37e2d28604e1c38677f3d0093fd215b706ebaecd892dce604d5b3da80bf82bbf8a428927738d9c3162e1b736212bc526f259178dbb1f22cc3ccc292607ec8b0de7de856bd4e08b3d0f9eca72046866f45514ae123bdcddd85fb0137badaee450c580af92f4c47489c38f20ec2e41867037da1149a67b15ecb1640a3e", @typed={0xc, 0x11, @u64=0x80000000}, @typed={0x8, 0x37, @uid=r6}, @typed={0x8, 0x75, @fd=r0}, @typed={0x84, 0x19, @binary="3f1c5c6fddec452b7d0b3684a049c869d1ced86c08654ab55577ddb55fc2521b283696e95365e2cf9eb0096ef53f8181ccdcfbc252a207944b3cc66e00a9e2e8bb3132bdfc57715e9e03d55b0291d4d5f94bcb8388785966307eba242cb4d370e19eb359ef578299b0decec453a38daf2d812ac6e5e8a8f8e0478650f76f400a"}]}, @nested={0xc, 0x41, [@typed={0x8, 0x70, @u32=0x4}]}, @nested={0x10, 0x58, [@typed={0x4, 0x54}, @typed={0x8, 0x64, @u32=0x6326}]}, @nested={0x4, 0x88}, @nested={0xa0, 0x25, [@generic="fc696c5910dd8fc09b028b9d90c791d84e640b8470d9992f749e65613cac257ae8020ca9b00923c76d429f4d1c7c2a3891a0cdadd52e4cf29d2554d756eb7bb975cf48b275868646adecbdce95aae29bf5af3af180dfd906f48e13a6d00fe43c510ad71e405c9abfe18c107d3c48bfb32213d3b87cf903726931a208c3b7569e543f11ed7d8f1cda", @typed={0x14, 0x69, @ipv6}]}, @generic="0bd48330e42cfac38dcb81de272312af0eec93560402b7a1913091ceaf03bdd1f0a2748a6eb0ef7bab51a1e0200f682f646219ffc214a588f8ec7878f417057d9cf18f145251cee7152d388e61447280550ec60b4e3288190d083538485833e84b9da3d5f7fa6d5849fdb8cd0cc0ccedf0fd280c88ebf2a447f11f431b8c3896dc07b5c7878e98856f4cfcac2eef49940fa40b33dc045ab6515a37b6c4e0e508601d9e741b26ef129d2cbc", @typed={0x8, 0x70, @fd=r0}, @generic="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", @nested={0x124, 0x7a, [@generic="4fac5fed91989fa1b8f92fcc4bf512f3992bc785ea936e610e1cbb5718f7707997123bd0af68624f9561c604d2b6ad24b04dbedd2f565940dd10458de430698405a04d01c1c7aae0eb0b132c3232a3a949dd525fdb230c653e62c10f9823844d675f", @typed={0x40, 0x1a, @binary="cc0730b7dde6b725550d27721706e66b1b763987b25b7df97aed9a79d7fce8242c3da25a6509b1817ff1c41c9671b3fe75d0a19525f98a8f7ff7"}, @typed={0xc, 0x89, @u64=0xf1d}, @typed={0x8, 0x72, @pid=r7}, @typed={0x8, 0x5b, @fd=r0}, @generic="59f68186ff5b74dcbce353d1d95cfd03e81fd6216f862fc20bb7a69517e66e5a8d0933bb5339be1abd471be3a6ff14678f4176605bc5b6a293ce149b8a5b344ae036e091c0fc14bb04e1d119a961b3551e7002bb5ebb4baba0ad061485cbef3f2a66"]}, @generic="4b25a7e9da16cac32569e5cc42f486fc0a665ae45695b8bd2680f9c6d0f7a7a54bfdf861960c336e432a5506ac58dabc8af748a6778b23ebd2ad519f1df8ec38e15c41deccf110331bc9f0036ab2a617d63d41a654893caf5e45efb8df1f30bdbb7ca642503fd2c007173fe30194312e6b1856a3e9310b2bfb4698f20fa35e7e259173b156df36"]}, 0x580}, {&(0x7f0000000c00)={0x144c, 0x33, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x83, @fd=r0}, @typed={0x4, 0x76}, @generic="a72aae42e54dfc4e466ba0ea0d40ea25ac316ae7ba77805ef08adfcdfe2b4f87a60df700bb3c49ccb2d90fa2d279bdc21286b37a72e42b19c45a7beb1612a7fb88dc5483fc28fee134add0df66dd85ba3349d585772fdd40e7304753132fe6eb30ded1477e82b8e5641c1411926671b0a0d51848ed738aa55f35c914e8740e67f778e20f3f17f0233526a25db9016c8d4dffe52ef78bf1a25ef2f8f9475daa90b65c6322720fd98edcfd6006b662c00b3bd0e8aed8e5fa88b01267f262f067d294ef7bb17a2737996b50e4387665848d91b95f5e7be20dbc1c10", @typed={0xf0, 0xb, @binary="dd25fcb995136a45e57ee75d63763269edb0030a8787e798749ed0b06a1312ab1601cb60286fb822be5408e804177bd44dfcc2120852245be64c1359e24bd32d2a6d1fae013f18ff780dcd91793847de838c3b69995400bc1e87636f5ec6b60475c25d640aed341782b89f603aa2bd16c7a2075ee99999d9f3f16392cd93128340fc98d6958a9042b1e6806515931e43409967f44772f732adb5901d2abe8d3307138be885ea2f6d22432383bd462c75ee2566ccc473bef4d973a6cf090e56b4c7c7d8c43b3be3a79b1cb6487807c796b55cf726d7ae0a665739c84945e51968ccda686d9fbbca245d8b3721"}, @nested={0x1a8, 0x29, [@typed={0xc, 0x2, @u64=0x8}, @typed={0x8, 0x3c, @str='GPL\x00'}, @typed={0x4, 0x29}, @typed={0x8, 0x33, @ipv4}, @generic="15038df5739a9c1f3ea65d99be70ccce36474fc8ba3ee44ed5c12383f7378a7bda650ae635cc1dce7b31691498a06e29aec1a933a1697d1c465f0e22fe339b56eb8d5820d6ede3e32c4156f350cf6bc8db4130fa85ad37f00481688d159ed3bf460b5ed91e094ef1020e1fc99601e511364fa8e63ba15f5fd01c503c3a6d043509b96030030155d7528e82fea2fa2ce6b84976c61fabbb286122bf04ccaa4a2df23daff81efee64f3de40e1bebf4222713866d6335ca31ec", @generic="6e898d495eab3b6f81b5bdcf8a799d96ef50e1ad22c29c3f9b7739192980490d765b85c2fc9ebc531df2c91c0e5034d0de497341d7b90bd48f502b6c2874a7ac29cb1759c07ff8e910fd0ea72bf905d9f752d774ef4d047e3e6f9bd1358a8e8b950f23f5595fefa7ae439c4ca16ae6d44f1854cf24a977db49f690c60aaba02d23a9ab0bb30f2da80796179be709f66319aa851a33ca8a5d088aeaff8efa2e0cb61cc0878d862f4a18ff9d290b3e00447a9567c22ea6931eb8bb6add7b1c702ecdcad61ae48a441d3a"]}, @typed={0x74, 0x23, @binary="c153901dd08ecab7594d14ebe7098f2f436870e9d600c168d1ef042a1ded66442421e3a141c5b1106a8f3a7ce5b0758464d8fa06d279c8e8742dc61bbdb5fb857b0c60cc8cab744b03928c297e743b111a4505bfc258bd668f18a5b0da3bce44b7d611622226011fd0d5180c95"}, @nested={0x1044, 0x88, [@typed={0x8, 0x7a, @u32=0x7}, @typed={0x4, 0x31}, @typed={0x34, 0x93, @binary="0feb7e75b2c74eeae5d9af8e8e784fe7eae65f577e941655f7dd90286f55ceb5e2bc5eef33b57051d2b439608e590ee6"}, @generic="3e2f375780d1a227093d3557c7cb27e98ebdd4d6f70457e3ebfecd62843bb21fe29d94b0795484d93858ad8585c66d39ffc8a63477bea4de90309df17f56ed70e4594fabb1f4be72aee49ba3083cb674570a85986b6f8437b26c5357913fbcc0258b2f7fbdc04b13a31378af0313e79687bbb381e14274d828b9907e02552bba308e356d91d08e004c9d91148acb78a021c964bbcbde6d14e5c7b2d7aa7c8585fc36f4850a80210d505db5e433f8893cab6a6fe039f7e73a4420b7a73f27604ad8ccfa873a76f0256da1ad8ec2bd29443164348b75b2da809f663eae1a8b94ae7b146f1b6bddaff5bddfc2492e315e2737108969a6a5234ab89c1702f881f9161f6e2b9e814fe15c645993320638219ab58b34b595ef6c745c94ccc1edd7ef1c43eead7c843ba1a38455e4a2b19c8f81438c1470fa70e44ae3e4f8daa92e7178ed0ef54e3b0ed640c59927000b29db07a4aee4adb43cdebd01a912a85a25fc3d01de3acfb16a0cad43f06d97d226a77fefcb1e4e37792a288fc083a67ccee9017a12ffd0bb41b65e150b16e837d8e3997c831f523e1f9b465a99b27cfc945aa7e4893a4e91cc9fd6e5d5ccdcf598e3c9aa1d1a95c7d0323178e09731c9e46e0ea0836576b2b2c0d0ae72e6d265f523e5c5e52dc713e5ea3b28ff2ed60c36f93a5f7669f44ece70400fb70cee89555ad8655126d13e92decfc593f7cede48b5b511aae74c86affd174e976db5d5f9fa1bd53727ebd1d732096c5d2c00799d46c33301656f56fc655269fd37fdd0d95564ce0b3c98615dea3031fda5cc8d98fce7ffd8a36968d7010dba39b3aebc658d60aca27f4721f04736ce1ea80d4a32ef1a37db06647e5763e8fb3601da73810e8afad6b432d4084ef7ac1152f2d284468a1c847c97a2bb5263803c46086cea08e8ca2046778f6020468eb3fd963f2448c8f2cb2fd146fc91492af53cbbb9b208b2b26a22a5bd15045142382d5d1cb1590955d99cd75613e4d645f08f9b44b17af5ca540447b8268be8893ff0e82891b05474fb52bf97a1e637d9b914b9a285d71a04c43135d2bce25608c18fb76b0edb560f59d730525f9f2f2c7a772bc768846020808a20446de94237063eaddd3543d3e7d0be6162c2fc9fab1aebefbea2e27828688dda22307d04b9a8ac51896587d1783d26a7751153a80ff446d4fdebbf33f88942490f8b22b9a9d13bac2fb67badcfd7410197024dac906151af456ccca5a66b919c54ebccbf7cc7f8efb1629e5279a852396d75acd34d91b3048f62058a1731f47608870635487917ef37de63f5f7c06f818565a0e5e0b5b309bf1b2ced76d778e40d25b992f33d9d97e0b5ef0a90ec3ad310cac34742afcfff84c33048d57328d450813b7496c8970c692eb2f508c925c0886e85a1f4a02828c00c2a2cd8944e90de32e741d08b36104dfc2dbca43e12c2017292c72cd49e844f4fd8857329ef9e0085911710c4ac410f357625e485f63cd3043d97b41dd9a4a2011b09b81597d1474cfd259fd9f1f826b7dd42ee925cdba893718dbcc69636a7e33eed229e0f643954e0183b07c3251cb3a0d0dddfd5c8f80ca27150178710a52ad151e4f6c312d8c90bba09bd61cb4d8c3000a60bdbe899b93e36bdb4c4c9c807c76c5db540b49758a5ded1f35d409c8b490463ba9a5c4e0994c06efb28d454c53f0f9877079072cd9c6f0488c2fe3baf3564c97d3bf73b700db5c9f4181119ef40eae0451f0fdc5fc16f5894a2a283cb4e4ccc510bca8fa2e4bcb0ddd104f771167d164e41b521a9b41354f236684c09d41df70865948c707c12370d46efc356aee027c7e3d0d805c4d5005932bb35a8582d5e100145b1e55cd608a05ff1f3892b407ae9ccaf635eedc7d7a406013552558f040ad42f732d83d7deb393937efed2e1061fc72e988ae97a4f4b7d0244823a4e47f9cf62c4d9840d93b3328a8da114c15167ff1936e24eda778fc56445e9fdb921a25725d4d568b7d5f5ac206d2f04586834e5fd1916bef7de69064d2f50d83faa835db6c5ea00b5d218c75b2c5cbf418ea504aae870c33e92a9a8588ad0720ee7d9789e93bf7a2cd05638086b0754dbd05a1990e20830897cc2e4c973b741b992327e8c8488320f000c9931058955657ec1c7135296d82d36c8cc09e25b670e3d86d0c71ac18e94c808fbf68379f74af470ec72ba46037050d5a427a4b2603fcd629af49a9b4d0684d058b67e66f12da187e452c7ed59f39fa0adc91fa57f330a9faa551de800e26800ccc70d5f7e2d23529bb3625b6f546215c4e090abba761f19e2c9a12a52154eeed0cc511d07ae773797d0e855f195d140f541c003c7f84648a4d31e737903f75034676661f3b5ceb9749f71d2fa0890c6edd2d74b71f3ebc4108e908aa47abd75a0ad316d3dfbdebae8970aa5033cbc953de40fcd2d9c20636efdb68be1145519b94e825b215705aaeb51679e7983e9322185959b08fbe6ab43b249213eee3e418bacd03b249f6fd3e715e52a6604035e4d35bc4e8eb81f191e151de65646295f9c21cf226bff8645164294b730931d8b0636a5b9dec0c7306828e3c7fbcd6468e6bd17e59d4084ec7177535c0aa69b2773dc81cdb3be7fac5174f4abaa0ad071a4a43b362395814c54cbfed2fc54d49e6819d0e17d763589e72724de6da661a90487373f8ce23d03e9bacf65ff536f81a90675a94b66be797d49b5442bfa353132e8cbeb4441e213f708320b3b51a7fe526ababbf0f8c0a3e9e8ccf5aad9bb245a6bd0a92c7812b3f3a8187a05f3c63b77e4306bbb84f4ad1dac718fb297f0ee20ca86238e7e04207ca4df056559a41a7eff377f1443fa5dcfc026d0554e7996528fb49af4702fcca95cc808191d58448fbafca97bce22cd89ac00e6df381ccaba79927b901c5e24c30686e024e8efd1b726f2413052d8ffe3aa010fe401ea5594723ef994ae1be1c04b301451789048315a75599e30730379f6ff866b0bb234587866d732317f47c0a30accd8e1d29d7a8700a245601b51136f8c8d66c55ccf94eb93c82c71e722fba16e284ebd7c06d1a93a977e5944d8f783551c6c8423c838286c66d7eceda3cb44360e37cb9ae2fb528e4a1f4fe18c6914f132eda35174c560c939e9144b5b574b433c4a0def8005eb178b204b91f57c94d26b9054e19708c902381a33bc8c7e0502622484d7e62fe0ce4d1cd5c7a9f49b1859085da9d882e4602b35e3fc6ffc419321d8e61567692ada268ddf353f5a39e76c83d792f8f2c0283aa459890b65945103229bcd5aafc947bf18b17fcc217a9168f57a01a91f3982139935fdc4504b487b93ce340bdb290e46f47b5a5e930a6c6f028fba1cf5029599f80e035a185e20658a6e6a006a15c7f490524a9d5ddd8a601302406fbe49a96ba2cba53294a827bd21845063053aa47188f4a14f4adf696af5b32662c4e88fd8d80345b5504adf60c307ab97a5baf5202457983f17c0f0e118083c3e873689b1dfa19b365768e7ed87c142b98e964247b01f9d33837b2ab1e3abb6f4083c2aa46e5e4f7ab04bfad2beffd58a9d7d734e9ed9ac39d6334a2e5c5ab609cffbcc138ffee8beb126a653aab05bfc423d9f5123f586e657c9373dfb940b6fd33ad3079ea09229e773b4ec6049120add222ce4bf9807a6b8d623049b1389ee2435edd53e1dd2fc71007ff7c1999480a957b996579393cc85771c9ec90c64879a90c302b7244803ba5b12858c5ad449d6f2ac10671bdc8d071944ff9ea739247afd905810ef760da3e3beae4903d3f796b08bdabe7aca89dc95b70bbf0bdae4d543343920a3d5619a7bf4bae286fc57bd39412e084c06beab4fd04b6c753c030f0b912751a49e59e3228dc8c2eaa5b7c588d9ce12fbf3afa6e4f54db2e390d7a4225e6eb8974199d5f1a3786f5fb2889d42d4a9fdb23746fd06686657e2c70db30ae44a3a8c7c787d0c4182f9f73db15c5d45eb62708a52d3a35994f6fc24205c0c7689666f51dd319b05814aea15105aeac6f35330950fbebade444042e11ad3df5b46177b2585acba39488972f9b9cef38209ab05c7c697895a87546a7217640a82ee7a53028f0e1898f585df73ceb175b651e2ec63a23da1c8955c1f53c60aff2c506af1264121581d679b6c01e8eec1bca90990bc9887354bb3284badf23118c42510bb3f1bd425104ad9f316b50de48928b47a01686b06eaf6499ca2f15a52d23a3c0ca71f1cccb55abad676a718d7ff227a9b41fb366d83a0cb025a64016ef47b9ab72d8757cda217d2034796114993e6635ae78c793e5b992c95c176712d1aacac42688790dd662b6e02796cc8a82a08a1d3cc94386dee598a3635c5e8e50f258dfea7e2baba90e05538b5b3b69e5326a803a2d4595b4de82d01de1d4c858e3451a2aa455bb88d9d4416cd7e98462df91fc4b4fbb8f7e896a33f7cc9b49a06110894c479ec3edc0437b067b554035ba6e4003a5a5845569389914f4608847c55f175154b16f18d29df6e2930e936e3ece97197de17455db87a245a251ddb97fbc7db8d2d98072c0c4dbdcb5649eaaf1bb8a388c492f1c4da563e7ab145d1e6414cfd7dbcc47e8c77511de679e406633a55189aae3860cb5301f4fbf0a4a92f1011f0a9e5def51ccca39efaf0148d49b2f66541091d0fd96122ade71dd94582b48a39bc81076df83e1f29ed7eb0b35b23f9b20114d66129d3a1aa06887859d07cac3f2cb0b6c536b04430edfb4dc2b4222180ad4ec6af0842c4e6105ad5140d0cbeea9d77c6fcd4bd47df8a7c5f212e8ce788e8a84bc41fe47f0b2380897c9168869c3c3208fa79e28de0f1d826fa86688293e6971c46d2d3005cd0c3c2cb8dc11535de6bf65ec6a17e9ea1aa31ce78cf858785d406f536ce6bc089fc10447dfb670ef74499518ee72b74dd2818a0e542018ea125b6f38e8177c0d52f60ccd8296fbb3296dd2be649baca0c2c27fc22c92db0a0bb5d8d13e896a5e4f0781157cd2b7b59bb0756c867bf02dce9b2615338a1cd88311b2aa9451850902b08d9b2596e3680162f2e59b2553962f501636e372e8ca12888f26442dbc11b48d182ed9730a0d11ee08bbbe3a917521f5f787c4a18ee3b631e396601b39f94ee6a423e4eda4e08051b69c7db450c7c21a369fb7066a57716b5229600530956fba97acddbcf4f107885b2f08de6f878eb28b385333c5230749ff6540418c2a6d9be362013672a75a052ac27280cb610876216f136c5b80937c64447f3a35cbcee2fc002ca722fcde08c93927ae4383f21433e3e9dbf1c0ab03b82e83126a73d92c31eb2edd6c5088e6393f7c631de762a33bc73bd2aa9168bdb34bf70db091014b0a451133e43fbb6adebb6f357bfd5ce275cfd403fc35a7101640e428b1928fac5495c1a142efb21384836f603e3a7da15b8f46afcf6fb1307f309b0f1d0eba8c7e8a4bb34ac4866a61469b65fc13aff4f35bd42b0ca4e0a7facdebdd7a508f7c98f888d3bc1d319583a060a9fad8fa97bb3f435b41b582514f5cae9882d295667261d86a922277f84ae60b529408806ae049ec78dd064e6d9ae859138ed81f145f93032736903e73ad5a7993505bef39c7258419415783c505aefeb0e1c10e59c6f22b0216230d0349a018ed32dd81b0f5e4ce9535ad819a4ab77128608b8c89ed4a6c539fc4e13aab56475121880648c49873580bc5d24d53567f82302a238f5c07e89f208140ce9a2d53d0f7cb341e32973d79bc31701abe3ba22b3e0bce512a557654f3708f4c38f4b39b76941419aaa8c5da9b6"]}, @typed={0x4, 0x93}]}, 0x144c}], 0x3, 0x0, 0x0, 0x40000}, 0x40000) 03:35:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) shutdown(r0, 0x1) 03:35:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x80ffff00000000]}) 03:35:54 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x1000000}]) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r3) 03:35:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x1}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x10) shutdown(r0, 0x1) 03:35:54 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x400000}]) 03:35:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x80ffff00000000]}) 03:35:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x10400) write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 03:35:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x700]}, 0x10) shutdown(r0, 0x1) 03:35:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x1b3, 0x0) r3 = accept4(r2, &(0x7f0000000000)=@generic, &(0x7f0000000100)=0x80, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x7, &(0x7f0000000140)='vmnet0\x00', 0xffffffffffffffff}, 0x30) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000200)=""/84, &(0x7f0000000280)=0x54) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0xfffffffffffffffb, 0x8, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x71, "ee0affba7c38b8f23e9bad5cef5ff55dafd1fc5d74af3389044ee7f74341fc40db503196789acb6ae302e5f3e50768a4a4953d5d9e5af202ff24514317815ae74476abc172e1f5fb04604c976223b144b7460c8efb8c2d0347c41aac0c0d3cbb680dfd5e18cd8b12adb6f6fdf016678b14"}, &(0x7f00000001c0)=0x79) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x1000000000000]}) 03:35:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fdD', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034757365720169643d0000000000bd85f21a9565cddb6c03623fa385f9c16f61112dbb215acfa0f1eeca77e2f3c47d0916234b0920deecbea31a6ec36a5996d865fa5e38797085a749c877f77c18a87f31fabe5d793c6619dbff0171357891e573b47d2dfb24902f79aa6c50f43575311770a47c61", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x4000}]) 03:35:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa200]}, 0x10) shutdown(r0, 0x1) 03:35:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'bridge_slave_1\x00', 0x7}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x200}, @exit_looper], 0xa, 0x0, &(0x7f0000000100)="ef50779809596648397b"}) close(r1) 03:35:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = open(&(0x7f0000000880)='./file0\x00', 0x100, 0x80) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl(r1, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r3, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:35:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x80ffff]}) 03:35:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000340)=0x1, 0x4) getxattr(&(0x7f0000000080)='.\x00', &(0x7f0000000140)=@random={'osx.', '#\'\x00'}, &(0x7f0000000180)=""/174, 0xae) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x4a) 03:35:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xe07000}]) 03:35:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xac720557]}, 0x10) shutdown(r0, 0x1) 03:35:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x2, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="95202fd78634a4c7eb9d4aad0d5126714b8cf039daac557b4c1b51abc4b198ef82f6ac8eb1f4eef104d732ad0ac1e86c91bf192673709718a671cc747551bf69a672e77a414ecf4740df8149500c4fe4a613bba1d4cb167d14d06d92f9db21d38b625a884ee882171f80d61aedad05b1fd2e65f80842a39e152249a50ae33b6d9480cdf5d62ace98b42e6936f84ccd60357b17258066723679b50e3f1705a84108f92a49ff9013e192ac08faf20129b05c160ab1dd32dbbf39e63f8727b8209a96ec2138", 0xc4}, {&(0x7f0000000240)="fc686002a6abc2dafa94b064547e91309d571f0acbb406ef141e646ddaf2381caa43fce30c27dc4605a7e160f59ee78d7a", 0x31}, {&(0x7f0000000280)="159e319024a9864d9c7a39b831d4f72d89e6848ff6091e7ab87223030b27dae3bc429f81d0fc586e59fb1ef47629193c724c9b0bd0b8771ee16872267e8d1e6cd7c540f7e0f8cf7467be53f9edb01f57be3e11a65892cef57d577b6a09ab133d4dde896a5ae39af538c5dcae2ee785be", 0x70}], 0x3, &(0x7f0000000340)=[{0x48, 0x11d, 0x5, "b4dfff85e49b56fd99d6a15cd538ff64cfdbca10d50159d2fe7456eb2853387a3b76c37ef49061fa85ebd8788a3604fe8b96"}, {0x90, 0x10e, 0x0, "fcb6dd605dcecc893fe8fbf44f4c8585d0ed26a999d82fd1b64763f375955058169a2ba78b736165d4ddb6d3a7c43a3ea5a6fecdb971902a1574002a281a8720604908b2d0b06c36f1e7e1f4b8eb72beca81333c7161fb0bcdb08d86e8f26485d58da84df608ff51709cc19247d50d960956827e2edf4b4a9efe6af23f9899f7"}, {0x60, 0x3a, 0xfffffffffffffbff, "4ef548c6fe5a02db7550d3dcdca56ac81dec11bed53b78c2a57cb2fc4356a6f5c04a9f04fab6e7d4d4d0e51b57fb493931822829a3db50370c52e9249cdbb93f2b3969feb7b374feada62476172c56"}, {0xc0, 0x10b, 0x40, "1150b583a2220bc43a923c0fd94e068d4092c4fdf3f4600cab03ec908d4c7318ae13b669f151fc0c32fae4435865116f28550a44995a2fc1f2656ef49e7002fd6a6b75cd2a6ee21eb94c1542cc0bdad49b4e93c413becae37fae9f2916b802a30ca72108251a1bb0d0bd5f1264ade347f52ace207bdfa39359616d547545272d073511902c94b53f7f6a3e0ca1759a2feec7bccb5dfcdbfcab28bbef59211867f5e2fb4efe6775e0fcb9"}, {0x108, 0x111, 0x5, "d764ec26d9eba8e14f77f08a8b0eb19d98510371a0b5df59f27b189fb6086a308ab203ea21d5f70e562ed0efd991811586ab7d1e34fa5c526e1974c510a229fa2517f07a60deb083e9666bf91e64c84cae26098491ee9dd13d9ed22188b3bd64f2d080ac751e1e2c31479e2bb4bc2818837585a8b96537818d86c2f74af9bb90e612079c1ec1178117f737659754c3ab08de6ffb8b962b65d3c4793a13d36cc448cb9ec4cd460d84907e43ce59c82baf8d49fe97436db6b39eb4ac4ff6d99f7e85572c9b1866ae1dbce13037232ff11e1e6d016574807f0a072ca517de756b2987257dedccd9ab11c98002db6f0da49a6390973a"}, {0x98, 0x117, 0x70ed, "87d529056bc5a98cbcd382d488adc3d7abf15a1ee553b173fb573c9b38868bb688462d5d2c50fb7a6a0f52c9fc785fbf9af47757753d36791a8ed8fc73541e457430489288396826ecae850a78481a5fb779bbe08bf9393a48d6c4cf91699a37c85acd665f77ba50ce65df5ab2243d6f85a72c06f301022cb982b0056149069daf4c94b66e"}, {0xd0, 0x113, 0x5, "207b0653d235152fbe1cae7dc3aa2b757bca05058ede4bdf79e2244c6388ef666bd663ff5f821c5edf84d10fec8d29a381aa0a4347594740ea27c5fe0990096fd65339cd124bf27522f29f60783a36b8789dc258daef74a9772fa28249eb3854f5079ba718efeeddd55bd777bda069ae225b7aba2f43d20b2d638c58d5feff313e853658938817cf738cd3b1fd51f4048d676a0452c8735a98d8a1038d4e2b651a40f508b06b6acdc696aa58d70e955a743abc451c3346ce5f4fe1"}], 0x468, 0x40000}, 0x0) 03:35:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x705000}]) 03:35:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xfdfdffff]}) 03:35:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x9]}, 0x10) shutdown(r0, 0x1) 03:35:55 executing program 2: r0 = socket$inet(0x2, 0x803, 0x20) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000acc000)={@multicast2, @local, 0x2}, 0xc) 03:35:55 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x400000000000000}]) 03:35:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x3e7]}) 03:35:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:56 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:35:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x930000000000}]) 03:35:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x463b1]}, 0x10) shutdown(r0, 0x1) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xfffffdfd]}) 03:35:56 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r1, 0x10000000000024, &(0x7f0000000040)={0x800000000000001, 0x0, 0x0, 0x0, r2}) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r3) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:35:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xffefffffff7f0000}]) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xfdfdffff00000000]}) 03:35:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x20000]}, 0x10) shutdown(r0, 0x1) 03:35:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="05d87631237af37a5d65dce3849e141a4e3cf38a1c6276c4c9198df66417f412a9e553e076c021350b29c62cd578ed4af4b854bc5017624a16b78ce7e37c3703b0b8f91d2ed78b057b52fd83382ba2775be7b5ec08f7dcc402ce5fa1526784ca9427044d804fcc44e6c19967e5c0eb6a001d21d85bb6cd3169dc68907ddb6be897c04ab6e1324f6aecb6ad84dfb7f664ada3bc9f24b02a61adb5ee9a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) dup3(r0, r0, 0x80000) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x5, 0x40000) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0x80000000, 0x4) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r2) 03:35:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x8000a0ffffffff}]) 03:35:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x80800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x51, 0x73) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) close(r0) close(r1) 03:35:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xe703000000000000]}) 03:35:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0xfd8a) 03:35:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x70e000}]) 03:35:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) r2 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x40000000000, 0x0, 0x0, 0x0, r2}) close(r0) close(r1) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000100)=0xffffffffffffffff) 03:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xe7030000]}) 03:35:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:56 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x20000000}]) 03:35:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5400]}, 0x10) shutdown(r0, 0x1) 03:35:57 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40080, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80, 0x400000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x3, r1, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000000)) close(r2) fanotify_init(0x0, 0x40000) close(r3) 03:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xe703]}) 03:35:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x100000000000000}]) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x6000]}, 0x10) shutdown(r0, 0x1) [ 583.052873] QAT: Invalid ioctl [ 583.130553] QAT: Invalid ioctl 03:35:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000200)=0x400) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x165800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0x1, 0xe8}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0xffff8000]}) 03:35:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) close(r1) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delrule={0x28, 0x21, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x80000001, 0x1ff, 0x0, 0x0, 0x5, 0x10002}, [@FRA_FLOW={0x8, 0xb, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:35:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x303eaea87f0000}]) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x570572ac]}, 0x10) shutdown(r0, 0x1) 03:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) close(r1) close(r2) 03:35:57 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x400000000000000}]) 03:35:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:35:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0f7f726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB="2e02330f2d73fb1b2f57f030ac2cd9dfbb2d43a1118c01602bc8925730bc958e3fdf06d824d9dc434177b3512d7a64409fd8be46dc358e3d4025ca4c0c38831b1d59440623bf7f9b366bc1cb7e482b4847e1eeec909796ae47babdc549f7c2afd36e756843634c7e6a2c6e949367c8efc138cbe691d1a28336486d73e52f0805b87f4c48d799f9f3816847000eb9f9c40166f4bfd63bc8539bad55d40a28ba1d0aa74edff887e68e42fe265cd4dd5cb96968eefe68567b3fdd238105cdf21e8dc9592ebeb78ed9d3d277557e4e7bd1e943eda1cdca8ec18251c66610356da3e8f01a3caed7e1d33eb7"]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x1d, &(0x7f0000000140)='ppp1-self:md5sumnodevtrusted\x00'}, 0x30) r2 = gettid() setpgid(r1, r2) clone(0x2000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:35:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:35:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xe0700000000000}]) 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x80ffff]}) 03:35:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, r3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r0) close(r1) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0x77, 0x4) 03:35:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x4}]) 03:35:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xfdfdffff]}) 03:35:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @remote, 0x41776b9a}, {0xa, 0x4e24, 0x7, @empty, 0x4}, 0x401, [0xffff, 0x200, 0x80000001, 0x9, 0x6062, 0x100000001, 0xa1, 0x1]}, 0x5c) 03:35:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140)=""/44, &(0x7f0000000180)=0x2c) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) gettid() getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) 03:35:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x400000}]) 03:35:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x200020ff, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) 03:35:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) shutdown(r0, 0x1) 03:35:58 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ptrace$pokeuser(0x6, r2, 0x4, 0xdbb) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000021000080000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x88) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x20000000, 0xfffffffffffffffd}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000880)={0x3f, @multicast2, 0x4e24, 0x3, 'fo\x00', 0x4, 0xfffffffffffffff9, 0xd}, 0x2c) ptrace$peek(0x3, r2, &(0x7f0000000840)) syz_mount_image$hfs(&(0x7f0000000280)='hfs\x00', &(0x7f00000002c0)='./file0\x00', 0xf3cd, 0x4, &(0x7f0000000700)=[{&(0x7f0000000300)="f69d3029fa1218200e34acfd852e6064c13d10c1affa47bc30861acd4e2054dbcc8449d65264aafca5405b0d11d6cca2ad1c872520710cd037030bd5a8e80a69e22cd56038712e585f2670090b3f5db3c4a63003dff0b750b3db5c18ac3941f74be3a19a835f39026dac45e01aa8c624935afc0e5af5b28262a91ac87f663ec83a25d60a1e377f2dd7493c52db5166a1fac70832619a9bf79de25b45d6fdc97a712c78ce4b28754a08cac9f7518f2abe5000d81f47c1c5066b203e3965440b265aeaa82d4268425021d4ea2a611a", 0xce, 0xffff}, {&(0x7f0000000400)="51c55a33ccc876a060e94ecec4aef6151283f254a71150ba4f6005f1c50e26b6afeb5303b5b79460c487076fea30f4c1317fe540cc2bd5e1599e16d94b70f9b917fd82d487533e63c535bc9c01b3629b7488403679844b069794ef50f754cec7a1fe689a05a5b986b59bd48473c42b9a4aa90cea0b9df49ee461e974a5026a722f006af1c988bb641b5664b177aaf8b310b7d370dd851624e4b969b9acde87b1f5081ce37e0fb6a49db3b8d0bd178710472b315f27e764eb9afd9bae902208e0d04cfd4c6fe1da54d7e72d05f332b3db", 0xd0, 0x7}, {&(0x7f0000000500)="36057354045a4a471829dcf1a1086fffcc828629e0b08f1658467b80be72e46c78401bed24c5a97c7ea499dbbae98a27aeb330fc555c35a8a82b68e66f148c90d455451dad775bb187c53129088fb6936f9a9ad25d5e84805b6efab3553328185ffb14fe66492d9f3f1d2721feff064df2f8ad58e7b1d18f0227929ade8baf2b1624dd69b4052d334e40b2f37a103badc3b5c11b14ff169104c50e1ca168213946ca027ea874e7575be6cb970a4634bec3958292126eb81b8b8064ac6777f7e91f255966266072f2b5e397d2a1befddaf2f16902400b11898356366429f5", 0xde, 0xfffffffffffffff7}, {&(0x7f0000000600)="2f2457484a3607080ff1cecec6d2fce70250603ff6bc0657ae3e8d197d1830e5e3e9038edf8add8b1368d681e915ef87b9844a86d622d2bcb0362460dd82383ba54199baef96493ed92235b365f1f842fd28aa56edd62e953af1c8a87a382fb6f6d1a0460dc32b4612550b4682beebf89fd1fb9090fb21591ee051c09b73f2a5204987c78e39ecbb78343fbae6bd2ca8b16fef61f1124b5f1a69c912e6d94c3989a2e0c782c566a702508b0072ac2e63fc4246d233079b8b61f6fc23bab2e12225cd41ef1811d159fd81fecdd27269d869a989dbcc0c63351b151761ab5bdd8267713388033834bbb55bae54e2f568da", 0xf0, 0xc4}], 0x80000, &(0x7f0000000780)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@creator={'creator', 0x3d, "82bed069"}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}], [{@obj_role={'obj_role', 0x3d, '@trustedsecurity)vmnet0#{+em0'}}, {@fsname={'fsname', 0x3d, '@'}}, {@fsname={'fsname'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'selinux('}}]}) close(r0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x3, 0x4) close(r1) 03:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xfffffdfd]}) 03:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xffffffff00000000}]) 03:35:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x91ffffff00000000]}, 0x10) shutdown(r0, 0x1) 03:35:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) sendfile(r1, r0, &(0x7f00000000c0)=0x46, 0x8d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="6d60b459e978b0bbfbca44948a0ed2ba8a3fd1fa53eeb4c77d4b405a22b6cac355327f99908c85f35da4d94ca04d80fecf86005f6a4235c74f7197323df12c538278db0cd938ec49431c", 0x4a, r3) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f0000000440)={0x0, 0x4}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) close(r0) write$P9_RMKNOD(r0, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x46, 0x2, 0x4}}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r1) 03:35:58 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x730000000000}]) 03:35:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xffff8000]}) 03:35:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x6000000]}, 0x10) shutdown(r0, 0x1) 03:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xe703000000000000]}) 03:35:59 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x7fa8ae3e3000}]) 03:35:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x5, 0xffff, 0x2}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x70, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x0, @local, 0xce0}, @in6={0xa, 0x4e23, 0x8001, @empty, 0x71}, @in6={0xa, 0x4e21, 0x7, @empty, 0x2}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x6}, 0x8) close(r0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) 03:35:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x2400, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0xffffffffffffffe6) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x2}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) 03:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xe7030000]}) 03:35:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x18020000]}, 0x10) shutdown(r0, 0x1) 03:35:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xc]}, 0x10) shutdown(r0, 0x1) 03:35:59 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x7fffffffefff}]) 03:35:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=@random={'security.', '\'procGPLppp0&/\x00'}, &(0x7f0000000540)=""/162, 0xa2) 03:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0xe703]}) 03:35:59 executing program 1: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x20) timer_create(0x7, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={&(0x7f0000000240)="0f7ce0ccdfbeb61e48110d66e68bf6e9bb611aa371248f6b2a93891a8eb1c2721fc506345146526517a59b41db82c24f5f7a3a1389dbe225b5e258b245b2a44a8b655e4e023c3e5ffce522e1bfff2b9ce6674cbbb5dfbbaca65177e2319c80589233e81db3b484b5fb13bf53641568ae652aeed11ada39", &(0x7f00000002c0)="3f5b2cc90559b1d61fd6b6c712278ab011c01ce1942ab0b0ffe595af3a91f22bb12a685a8b09e7937f1f16112524e4a1df34953fe85426437ce77833cb98c7af6cd5c74f7c6ce9c95fdeaa6e405ae858ffe85641bc7bfae3bc28e2e9b92d766becd5a29e5ff92dcfdcbdc620a3a652ad527c585fbad4ced5251a4fb1a6f4e5ff6088786c2201dc3141fb48b74650c706b901d4f42a20d320917940fd536c50b8a23971cf492798e6a9e418004d4c9adcaaebeb8891307886cebff79970783962c590e0e14f58a152aa569e1366a85a28af49ea32ac"}}, &(0x7f00000001c0)=0x0) timer_gettime(r1, &(0x7f0000000200)) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000000)) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x1, 0x25, r3, 0x81}, 0x2c) close(r3) 03:35:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:35:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x3e7]}) 03:35:59 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x8000a0}]) 03:35:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x8]}, 0x10) shutdown(r0, 0x1) 03:36:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) close(r0) close(r1) 03:36:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80002, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000140)={0x0, 0xc, [0x8000, 0x5, 0x8e1]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0xff, 0x10000, {0x7, 0x1}, {0x9, 0x8}, @const={0x6, {0x100, 0x7, 0x1d4, 0x633}}}) read$FUSE(r1, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xe07000}]) 03:36:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x500]}, 0x10) shutdown(r0, 0x1) 03:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60, 0x0, 0x1, {{0x5, 0x2, 0x2, 0x100000001, 0x81, 0x8, 0x7, 0x80}}}, 0x60) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000140)={0xe, 0x3, 0x7}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x50, 0x0, &(0x7f0000000180)=ANY=[], 0xffffff24, 0x0, &(0x7f00000001c0)="0b7eff0582c5c3f2e3a3856bc870af7d34839d2a082743b9ac410ce5001de1a038c3d1d71339fc39609efa3de768583f5797ce91771524b5b720672aa8f4c1b46afd20c18e886403902845336d9a5b47aabc1a03ac299e25ecae8fe931bc21bd2dd26d96f1a7279492c38541c7a2a0ab7f63619e4ad8abb71460c1ddb70f32ca53c2f38bc618c3d1815d31e838a10ca99d2ebec834aafb74eeec0fb31b8c1a5d45878523ee7b5d2162f2e9d9221b1a778285792ae86389ad0aa58d5f70a8415cc1ef5f3ce4691ef943dfcabe5b5079e39632050000"}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 03:36:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x303eaea87f0000}]) 03:36:00 executing program 0: socketpair$inet(0x2, 0x800, 0x1, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="57b23ca86e4150cfa59701650003ed59fa16159432d4a4e5a908e427593ff38821751bd70245e2efd51587de50ac71bbb6e24b04ef58aefee67c0faa352ce80e07013e084602a991ef85c751c7dec35fbea6ccf17160581384b7ab14fec097147f69453fac92691c5a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)=0x0) write$FUSE_ATTR(r0, &(0x7f0000000480)={0x78, 0xfffffffffffffff7, 0x5, {0x19, 0x6, 0x0, {0x0, 0x9, 0x200, 0x9, 0x3, 0x4, 0x1000, 0xdd, 0xfff, 0x7ae, 0x8001, r1, r2, 0x9, 0x7e}}}, 0x78) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x1000000000000]}) 03:36:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xb163040000000000]}, 0x10) shutdown(r0, 0x1) 03:36:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xffffffffa0008000}]) 03:36:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:00 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x70e000}]) 03:36:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xb000000]}, 0x10) shutdown(r0, 0x1) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) 03:36:01 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) close(r0) close(r1) 03:36:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xe1, "726730252a689fea03141bbd2f41addfdd7ad4236591ab9c8a450901db427725898dcc8eb38b81e793b5164c552ef243ff0dab15069bcd940a5656e30184642c112fc9624c067830c4b55ea2a9f3630f4f52ffc403cff15924e2a95b0dfd78bbd87dc9fa4caa73a466f3e5230ff751e7d67aa74c3c8f81d7fa3f1a18b51a0f74d472636ba440afe0d3c3577dcd879b9abde86fbf54ff2a7fa33a2fd56555fa9486dc7b8aa8b0cf5c668d60e030c31e052b9abec1a4036646b729181b655fb7b16ad5e67932e2f7e23d006094955fa0f0ad510c4d7f5a5e6dda4577c1a5f6f0f45c"}, &(0x7f0000000240)=0xe9) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2}, 0x8) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x730000}]) 03:36:01 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x8000000000000000}]) 03:36:01 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x1, 0xffffffffffffffe1}}, 0x28) close(r0) close(r1) 03:36:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xfffffa90]}, 0x10) shutdown(r0, 0x1) 03:36:01 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x2000000000}]) 03:36:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xe7030000]}) 03:36:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:36:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000e040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x9300}]) 03:36:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x8030015600000000]}, 0x10) shutdown(r0, 0x1) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:36:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r2, 0x5, &(0x7f00000000c0)) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:36:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:36:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x605000}]) 03:36:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fLtd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x40}) close(r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x1, 0x7ff}, &(0x7f0000000100)=0x18) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{r3, r4/1000+10000}, {0x77359400}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x10000, @ipv4, 0x1000}}, 0x9, 0x100000001}, &(0x7f0000000200)=0x90) close(r1) 03:36:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) shutdown(r0, 0x1) 03:36:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd9', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002103, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x705000}]) 03:36:02 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @rand_addr}, &(0x7f00000002c0)=0x10, 0x800) close(r0) close(r1) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[0x8, 0x3f, 0x19080000000000, 0x8]}) getpeername$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10) accept4$nfc_llcp(r0, &(0x7f00000001c0), &(0x7f0000000280)=0x60, 0x2000000800) 03:36:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xe00]}, 0x10) shutdown(r0, 0x1) 03:36:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, "73797374656d2e706f7369785f61636c5f616363657373fe"}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x17}}, {@uid_lt={'uid<', r1}}, {@smackfshat={'smackfshat', 0x3d, "73797374656d2e706f7369785f61636c5f616363657373fe"}}]}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:36:02 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:36:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:02 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x60500000000000}]) 03:36:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 03:36:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x80300bd300000000]}, 0x10) shutdown(r0, 0x1) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xe703]}) 03:36:03 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:36:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x930000000000}]) 03:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x3e7]}) 03:36:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x142800]}, 0x10) shutdown(r0, 0x1) 03:36:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x8000a0ffffffff}]) 03:36:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:03 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) close(r1) 03:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) 03:36:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001, 0x81}}, 0x50) fcntl$dupfd(r0, 0x406, r0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="443f86c2656d2e6664"], &(0x7f0000000340)=""/162, 0x415) 03:36:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xe803]}, 0x10) shutdown(r0, 0x1) 03:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:03 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x7300}]) 03:36:03 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1, 0x3, 0x40f03}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0}) epoll_create1(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r2, 0x0, r1}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r3, 0x3ff, 0x2a, "6f54a0614ea2f17f15217d36bbabb096c1f9616c8baf8b2c6b137e74e0c0efbf1142f8912a38ad777b51"}, 0x32) close(r0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) getgroups(0x5, &(0x7f0000000380)=[0x0, 0xee00, 0xee00, 0xee00, 0xee00]) mount$9p_tcp(&(0x7f00000002c0)='127.0.0.1\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x42, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, "e873797374656d"}}, {@privport='privport'}, {@cache_fscache='cache=fscache'}, {@posixacl='posixacl'}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) close(r1) 03:36:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:36:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x20000000}]) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) shutdown(r0, 0x1) 03:36:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB="66863d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x6e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r3, @empty, @rand_addr=0x7}, 0xc) socket(0x0, 0xe, 0x7) ioctl$sock_bt(r2, 0xdd1f, &(0x7f0000000400)="4214e816cbdb80c748f96dcd288cb3d32eb12b65fa2f2f967f4e8812bcc585ef3a37f22a98fa090d0d91efd69946047ab8a96ced2cf8f4b939633bb2d522e994b57648156b381bfe8d") write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x30, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000006c0)={r4, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0x400}}, [0x2, 0x1, 0x0, 0x5, 0x200000004000000, 0x1, 0x1, 0x80000, 0x0, 0x1, 0x9, 0x5, 0x10000, 0x4, 0x773]}, &(0x7f0000000340)=0x100) 03:36:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7, 0x81, 0x7f, 0x2}, {0x0, 0x0, 0x800, 0x10001}]}, 0x10) close(r0) close(r1) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x50700000000000}]) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="79813d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x103000, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1b) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)={0x3f, 0x4, [0x100000001]}) 03:36:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5580]}, 0x10) shutdown(r0, 0x1) 03:36:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) ioctl$TIOCSCTTY(r1, 0x540e, 0x401) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) close(r1) 03:36:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce7726f75705f69643d47a252d7d9f7159b92fcc61ae0ec09c05e00418835cbf15ca0e6b716c17ad73caa8efc74086adf226897d102", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xffefffffff7f0000}]) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0xfffffffffffffffe, 0x4}) close(r0) close(r1) 03:36:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x261300]}, 0x10) shutdown(r0, 0x1) 03:36:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',`ootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643ddf81bd3a2148ed2974c4773e9091d3df8fd3d3db9a1af7dd2ccc2913e842", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000036c0), 0xffffffffffffff5b) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x800000000000000, 0x6608845c556eb7bb, 0x0, 0x2, 0x9, 0x200000000}}, 0x3f35e8ed7a4c563a) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x581100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7f) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000700)={0x1, 0x10, 0xfa00, {&(0x7f0000000640), r1}}, 0x18) mount$9p_rdma(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x8000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq'}}, {@rq={'rq', 0x3d, 0x9}}, {@common=@version_L='version=9p2000.L'}, {@timeout={'timeout', 0x3d, 0x8}}, {@common=@afid={'afid', 0x3d, 0x3}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'fuse\x00'}}]}}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0xa2) utime(&(0x7f00000006c0)='./file0\x00', &(0x7f00000007c0)={0x8000, 0xfffffffffffffffa}) 03:36:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xa0008000}]) 03:36:04 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:36:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:36:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x15554]}, 0x10) shutdown(r0, 0x1) 03:36:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) creat(&(0x7f0000001140)='./file0\x00', 0x3) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) 03:36:04 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x400000000000}]) 03:36:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r1) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) 03:36:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5c00000000000000]}, 0x10) shutdown(r0, 0x1) 03:36:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="cba0", 0x2, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) 03:36:05 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x4000}]) 03:36:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:36:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ptrace$cont(0x9, 0x0, 0x30, 0x0) close(r0) 03:36:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x3000000]}, 0x10) shutdown(r0, 0x1) 03:36:05 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x4000000}]) 03:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) 03:36:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system/posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) 03:36:06 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x1000000}]) 03:36:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x9000000]}, 0x10) shutdown(r0, 0x1) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="32fa"]) clone(0x20002101, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x501080) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) r2 = getpgrp(0x0) capset(&(0x7f0000000200)={0x20080522, r2}, &(0x7f0000000240)={0x1, 0x20, 0xfff, 0x4, 0xc00000000, 0x8}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) write$FUSE_INIT(r1, &(0x7f0000000480)={0x50, 0xffffffffffffffff, 0x5, {0x7, 0x1b, 0x7, 0x80, 0x0, 0x3, 0x400, 0x7fffffff}}, 0x50) read$FUSE(r0, &(0x7f00000016c0), 0x1000) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000380)) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) r3 = semget(0x0, 0x4, 0xc0) semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000100)=""/7) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) 03:36:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x54550100]}, 0x10) shutdown(r0, 0x1) 03:36:06 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x506000}]) 03:36:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = semget(0x3, 0x3, 0x200) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000006c0)=""/224) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) 03:36:06 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x930000}]) 03:36:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x330e3080]}, 0x10) shutdown(r0, 0x1) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:07 executing program 1: socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000c80)="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", 0x171, 0x404, &(0x7f0000000000)=@abs, 0x8) 03:36:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xffffff8d]}, 0x10) shutdown(r0, 0x1) 03:36:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x100000000000000}]) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) 03:36:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x404001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xac, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x3, @local, 0xff}, @in6={0xa, 0x4e21, 0x3, @remote, 0x8}, @in6={0xa, 0x4e20, 0x13a, @ipv4={[], [], @broadcast}, 0x3b}, @in6={0xa, 0x4e20, 0x9, @remote, 0x6}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0xed0000000}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x7, 0x8001, 0x5, 0x1, 0x5, 0x6e38, 0x0, r2}, &(0x7f0000000380)=0x20) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) write$binfmt_misc(r1, &(0x7f0000000480)={'syz0', "de16e815e1bd0e9a6a425695a5b009cf2424b5153b87e126a388ecb77147dfb1b0578bb5d2a179bf9de456107fc60945596f8e1eee71888cb73a5a26ed8e1e0e448b8d3139f1a61c0c70e11795ccf189e050cdecb1aa4b48de65d73bc3f954f49382d95a03d1b7fef163a580e5d21e086b76cc19e7f916405f89742178d4cc7700b571824926da49cb5ee1e4bdab9a6eae10cdc347f92c00004c589ff891fdf130501001e73333bf0cdb57a3b1d9efcba6"}, 0xb5) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:36:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x15f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x507000}]) 03:36:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x9]}, 0x10) shutdown(r0, 0x1) 03:36:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xb]}, 0x10) shutdown(r0, 0x1) 03:36:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='f?=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000480)={0x0, 0x3, 0x3}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() r3 = semget$private(0x0, 0x0, 0x500) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000340)={{0x0, r1, r2, r1, r2, 0x0, 0x2}, 0x70, 0x1000}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000003c0)={0x9, 0x6, 0xffff}) setresgid(r4, r4, r2) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) 03:36:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000080)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) readahead(r0, 0x3, 0x1ff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) setpgid(r2, r3) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x400000000000}]) 03:36:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) read$FUSE(r0, &(0x7f00000006c0), 0x1000) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000700)="153f6234488dd25d766070") io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x81}]) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = dup(r2) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000040)=0x4) 03:36:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030302c757365725f69643d5e4c6b198cd39722f100e6f08a4fa2cb8c7a853aa091feb0ea2f41736979f68a09ec0f5d517ca2b64224cade77015884458c8ea6868925413105169d36cd6dca33302c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) dup(r0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000036c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) shutdown(r0, 0x1) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:07 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0xffefffffff7f0000}]) [ 593.766600] binder: 26820:26821 ioctl 127d 20000040 returned -22 03:36:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0xa200000000000000]}, 0x10) shutdown(r0, 0x1) 03:36:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x6, 0x100001}}, 0xfffffffffffffdd9) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) 03:36:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x570572ac00000000]}, 0x10) shutdown(r0, 0x1) 03:36:08 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x8000a0ffffffff}]) 03:36:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) shutdown(r0, 0x1) 03:36:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) read$FUSE(r0, &(0x7f00000006c0), 0x1000) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f61636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) 03:36:08 executing program 4: io_setup(0x1000000000005, &(0x7f0000000100)=0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_submit(r0, 0x20000000000000ae, &(0x7f0000000b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x507000}]) 03:36:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000016c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known="73797374656d2e706f7369785f64636c5f616363657373fe", &(0x7f0000000540)=""/162, 0x44) 03:36:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x0, 0x5000000]}, 0x10) shutdown(r0, 0x1) 03:36:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838f906f37f08a2db600000000000000000000000000", 0x1d) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x0, 0x0, 0x1802]}, 0x10) shutdown(r0, 0x1) 03:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x1, r3, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 739.987665] INFO: task syz-executor0:25624 blocked for more than 140 seconds. [ 739.995048] Not tainted 4.19.0-rc8+ #71 [ 739.999673] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 740.007683] syz-executor0 D25144 25624 25071 0x00000004 [ 740.013312] Call Trace: [ 740.015896] __schedule+0x86c/0x1ed0 [ 740.019676] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 740.024799] ? __sched_text_start+0x8/0x8 [ 740.029026] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 740.034491] ? kasan_check_write+0x14/0x20 [ 740.038806] ? do_raw_spin_lock+0xc1/0x230 [ 740.043092] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 740.048263] ? prepare_to_wait_event+0x39f/0xa10 [ 740.053115] ? prepare_to_wait_exclusive+0x480/0x480 [ 740.058295] ? find_held_lock+0x36/0x1c0 [ 740.062375] schedule+0xfe/0x460 [ 740.065742] ? __schedule+0x1ed0/0x1ed0 [ 740.069775] ? ___might_sleep+0x1ed/0x300 [ 740.073953] ? arch_local_save_flags+0x40/0x40 [ 740.078584] ? do_raw_spin_unlock+0xa7/0x330 [ 740.083004] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 740.087644] ? replenish_dl_entity.cold.55+0x36/0x36 [ 740.092825] ? __might_sleep+0x95/0x190 [ 740.096862] request_wait_answer+0x4a6/0x900 [ 740.101344] ? fuse_read_forget.isra.24+0xda0/0xda0 [ 740.106368] ? find_held_lock+0x36/0x1c0 [ 740.110480] ? finish_wait+0x430/0x430 [ 740.114378] ? __fuse_request_send+0x11f/0x1d0 [ 740.119035] ? finish_wait+0x430/0x430 [ 740.122938] ? preempt_schedule+0x4d/0x60 [ 740.127081] ? finish_wait+0x430/0x430 [ 740.131040] ? preempt_schedule_common+0x1f/0xe0 [ 740.135828] ? preempt_schedule+0x4d/0x60 [ 740.140038] ? ___preempt_schedule+0x16/0x18 [ 740.144475] __fuse_request_send+0x12a/0x1d0 [ 740.148957] fuse_request_send+0x62/0xa0 [ 740.153030] fuse_simple_request+0x33d/0x730 [ 740.157485] fuse_getxattr+0x42f/0x760 [ 740.161448] ? fuse_setxattr+0x650/0x650 [ 740.165496] ? smack_privileged+0xd0/0xd0 [ 740.169738] ? kasan_kmalloc+0xc7/0xe0 [ 740.173626] ? kvmalloc_node+0x65/0xf0 [ 740.177569] ? getxattr+0x109/0x2c0 [ 740.181200] ? path_getxattr+0x103/0x1b0 [ 740.185247] ? __x64_sys_getxattr+0x9d/0x100 [ 740.189698] ? do_syscall_64+0x1b9/0x820 [ 740.193767] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.199210] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 740.204308] ? xattr_resolve_name+0x330/0x430 [ 740.208882] fuse_xattr_get+0x2d/0x40 [ 740.212964] ? fuse_getxattr+0x760/0x760 [ 740.217030] __vfs_getxattr+0xee/0x150 [ 740.220988] ? __vfs_setxattr+0x180/0x180 [ 740.225197] ? __kmalloc_node+0x33/0x70 [ 740.229291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.234849] vfs_getxattr+0x275/0x390 [ 740.238713] ? xattr_permission+0x310/0x310 [ 740.243040] ? __kmalloc_node+0x47/0x70 [ 740.247152] getxattr+0x139/0x2c0 [ 740.250680] ? path_listxattr+0x1a0/0x1a0 [ 740.254842] ? digsig_verify+0x1530/0x1530 [ 740.259255] ? kmem_cache_alloc+0x33a/0x730 [ 740.263598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.269249] ? getname_flags+0x26e/0x5a0 [ 740.273326] path_getxattr+0x103/0x1b0 [ 740.277203] ? getxattr+0x2c0/0x2c0 [ 740.280913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.286459] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 740.291980] __x64_sys_getxattr+0x9d/0x100 [ 740.296236] do_syscall_64+0x1b9/0x820 [ 740.300200] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 740.305576] ? syscall_return_slowpath+0x5e0/0x5e0 [ 740.310557] ? trace_hardirqs_on_caller+0x310/0x310 [ 740.315588] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 740.320651] ? recalc_sigpending_tsk+0x180/0x180 [ 740.325515] ? kasan_check_write+0x14/0x20 [ 740.329830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.334685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.339934] RIP: 0033:0x457569 [ 740.343133] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 2a 60 09 <01> 87 01 8b 05 22 60 09 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00 [ 740.362100] RSP: 002b:00007f43539dec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 740.369959] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 740.377390] RDX: 0000000020000540 RSI: 0000000020000680 RDI: 00000000200000c0 [ 740.384732] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 740.392075] R10: 0000000000000044 R11: 0000000000000246 R12: 00007f43539df6d4 [ 740.399481] R13: 00000000004bdd7d R14: 00000000004ce278 R15: 00000000ffffffff [ 740.406772] [ 740.406772] Showing all locks held in the system: [ 740.413184] 1 lock held by khungtaskd/983: [ 740.417426] #0: 00000000f14175a6 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 740.426116] 1 lock held by rsyslogd/5245: [ 740.430295] #0: 000000009fd839e3 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 740.438344] 2 locks held by getty/5335: [ 740.442319] #0: 00000000fbc7e5f5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.450630] #1: 00000000616f1275 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.459666] 2 locks held by getty/5336: [ 740.463626] #0: 00000000dc9fa4b8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.471919] #1: 000000004d61bd50 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.480841] 2 locks held by getty/5337: [ 740.484797] #0: 000000004d5d9d3d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.493103] #1: 00000000ace66ac0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.502071] 2 locks held by getty/5338: [ 740.506039] #0: 00000000cffbd4e5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.514356] #1: 00000000f32501d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.523272] 2 locks held by getty/5339: [ 740.527277] #0: 00000000953739a1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.535588] #1: 000000008fea708e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.544505] 2 locks held by getty/5340: [ 740.548632] #0: 00000000c4250a7e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.556916] #1: 00000000e5eaf1ad (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.565890] 2 locks held by getty/5341: [ 740.569896] #0: 00000000c4c4c471 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 740.578199] #1: 0000000050984b5c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 740.587108] [ 740.588774] ============================================= [ 740.588774] [ 740.595801] NMI backtrace for cpu 1 [ 740.599488] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #71 [ 740.606323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.615663] Call Trace: [ 740.618243] dump_stack+0x1c4/0x2b6 [ 740.621860] ? dump_stack_print_info.cold.1+0x20/0x20 [ 740.627035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.632568] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 740.637279] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 740.642457] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 740.647729] arch_trigger_cpumask_backtrace+0x14/0x20 [ 740.652907] watchdog+0xb3e/0x1050 [ 740.656436] ? reset_hung_task_detector+0xd0/0xd0 [ 740.661268] ? __kthread_parkme+0xce/0x1a0 [ 740.665490] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 740.670574] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 740.675661] ? lockdep_hardirqs_on+0x421/0x5c0 [ 740.680229] ? trace_hardirqs_on+0xbd/0x310 [ 740.684536] ? kasan_check_read+0x11/0x20 [ 740.688673] ? __kthread_parkme+0xce/0x1a0 [ 740.692893] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 740.698385] ? kasan_check_write+0x14/0x20 [ 740.702689] ? do_raw_spin_lock+0xc1/0x230 [ 740.706918] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 740.712017] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 740.717542] ? __kthread_parkme+0xfb/0x1a0 [ 740.721770] kthread+0x35a/0x420 [ 740.725130] ? reset_hung_task_detector+0xd0/0xd0 [ 740.729956] ? kthread_bind+0x40/0x40 [ 740.733743] ret_from_fork+0x3a/0x50 [ 740.737579] Sending NMI from CPU 1 to CPUs 0: [ 740.742159] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 740.743095] Kernel panic - not syncing: hung_task: blocked tasks [ 740.755865] CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #71 [ 740.762691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.772028] Call Trace: [ 740.774624] dump_stack+0x1c4/0x2b6 [ 740.778248] ? dump_stack_print_info.cold.1+0x20/0x20 [ 740.783483] ? printk_safe_log_store+0x2f0/0x2f0 [ 740.788250] panic+0x238/0x4e7 [ 740.791426] ? add_taint.cold.5+0x16/0x16 [ 740.795562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.801086] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 740.806525] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 740.811961] watchdog+0xb4f/0x1050 [ 740.815492] ? reset_hung_task_detector+0xd0/0xd0 [ 740.820321] ? __kthread_parkme+0xce/0x1a0 [ 740.824542] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 740.829709] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 740.834813] ? lockdep_hardirqs_on+0x421/0x5c0 [ 740.839391] ? trace_hardirqs_on+0xbd/0x310 [ 740.843703] ? kasan_check_read+0x11/0x20 [ 740.847837] ? __kthread_parkme+0xce/0x1a0 [ 740.852056] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 740.857492] ? kasan_check_write+0x14/0x20 [ 740.861712] ? do_raw_spin_lock+0xc1/0x230 [ 740.865933] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 740.871020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 740.876539] ? __kthread_parkme+0xfb/0x1a0 [ 740.880768] kthread+0x35a/0x420 [ 740.884132] ? reset_hung_task_detector+0xd0/0xd0 [ 740.888955] ? kthread_bind+0x40/0x40 [ 740.892745] ret_from_fork+0x3a/0x50 [ 740.897403] Kernel Offset: disabled [ 740.901035] Rebooting in 86400 seconds..