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", 0x1000}, {&(0x7f0000004340)="2d644f76df303f765320588c308424fe16670a7ff9540ea57b5109150bfb42087ddfbeda148678e519376ca7278af07e74ceeac510a46ce8dd2b8a02e288ba3e5ca3e5a61a350b01463b2f5900a19d4fcc27a19afba5e60e7c76b5609a51fe64bb4358dd8ccbf736434f1ae10aa7cfe24034d83b2b61e8d3c79dc48240ed979a9948b8c3c8a16fd23ae12d22ade8d55e2c85b17b2d8d5412c2b64b989575525440b4f031bfe8becb997c7ba2d167006261e6947a32d90cfbaee6691828", 0xbd}], 0x7, &(0x7f0000004600)=ANY=[@ANYBLOB="180000000000000084000000050000001000000097000000f959ad244bfc79e729418c5c656b8fbf5e279d2140ab82a85bbceb056feb75c0766f626bfddf6c2daf5ccb38eab264582c143f"], 0x18, 0x24000000}], 0x5, 0x4) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) r3 = eventfd(0x80000002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(r3, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) [ 436.248504] binder: 9743:9745 ioctl 40046207 0 returned -16 03:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x48000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 436.296135] FAT-fs (loop1): bogus number of reserved sectors [ 436.302017] FAT-fs (loop1): Can't find a valid FAT filesystem [ 436.348040] binder: BINDER_SET_CONTEXT_MGR already set 03:33:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10002, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000001c0)=""/4096) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x3d}) 03:33:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010200000000000000000c92549191a80a682a"], 0x14}}, 0x0) 03:33:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) mq_timedsend(r1, &(0x7f0000000040)="0e5efa840401d4332385038ff9410bb82c7cc8c15ee5b71aed53fc224145dd86e95c70fa2629ad3afc3ee4322c328c76d354b37c4f32ad3a2bcb6e648f3d1b6e95961e3de694e38ff4357d07825420475284ddb7a7b9f38bc11b93ed9d30f9246573018a9a54dd570cbdbf80afd37f61dca4908e57a699034cf27f9743196de68658045aadda097bb65acd944507290d607c1f73d8f64ba9ed1bd71e605dd8dc8df387abd36744eb3d8f9b8602857c02e4424f9d67f3ce8f4b2db1773ae1dedc1efe050bafa8f26a64c1a9877f847bf10247b31fe9c096b816e5eed2aeb7f04eab8c", 0xe2, 0x2, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r2, 0x4008744b, &(0x7f0000d1df52)=""/174) 03:33:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1802000000000000, @remote}, 0x1c) 03:33:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0xffff, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") get_robust_list(0x0, &(0x7f0000000240)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f00000002c0)=0x18) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x1) [ 436.413361] binder: 9764:9766 ioctl 40046207 0 returned -16 03:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6800, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 436.483776] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000003ff8)=0x3) finit_module(r0, &(0x7f00000000c0)='/dev/audio\x00', 0x1) write$vnet(r3, &(0x7f00000001c0)={0x1, {&(0x7f0000000000)=""/53, 0x35, &(0x7f0000000040)=""/82, 0x3}}, 0x68) close(r3) [ 436.528360] binder: BINDER_SET_CONTEXT_MGR already set [ 436.540318] binder: 9794:9795 ioctl 40046207 0 returned -16 03:33:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7a, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 436.573383] device lo entered promiscuous mode [ 436.600125] device lo left promiscuous mode [ 436.643892] binder: BINDER_SET_CONTEXT_MGR already set [ 436.656787] binder: 9807:9808 ioctl 40046207 0 returned -16 03:33:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00c88a0300", 0x101}) 03:33:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe803000000000000, @remote}, 0x1c) 03:33:27 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = getpid() ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e20, @remote}}) sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000200)={0xfff, 0x3, 'client0\x00', 0x4, "ca6b71cf93e45e3b", "6620ab79730e0719f7498028f2977f56e419b8f298099c6e536266ea4a21d350", 0x9, 0x2}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r1, 0x4, 0x46c00) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1) dup2(r3, r3) 03:33:27 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x200000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) 03:33:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000140)=""/240, &(0x7f0000000240)=0xf0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000002c0)={'ip6gretap0\x00', 0x2}) recvmsg$kcm(r1, &(0x7f0000005740)={&(0x7f0000001140)=@pppol2tpin6, 0x80, &(0x7f0000005680)=[{&(0x7f00000011c0)=""/1, 0x1}, {&(0x7f0000001200)=""/234, 0xea}], 0x2, &(0x7f0000005700)=""/17, 0x11}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc000, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000100)={0xffffffffffff0000, 0x0, 0x1f}) [ 436.761586] binder: BINDER_SET_CONTEXT_MGR already set [ 436.774703] binder: 9813:9814 ioctl 40046207 0 returned -16 [ 436.791931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:27 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x2000000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4040, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x65, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=""/101}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'team_slave_0\x00', 0x4}, 0x18) prctl$intptr(0x17, 0x98e3) [ 436.810304] device lo entered promiscuous mode [ 436.810437] QAT: Invalid ioctl [ 436.819405] device lo left promiscuous mode 03:33:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x2, @remote}, 0x1c) 03:33:27 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, r0) [ 436.875118] binder: BINDER_SET_CONTEXT_MGR already set [ 436.880852] binder: 9840:9842 ioctl 40046207 0 returned -16 03:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x68000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "958aad", 0x10, 0x32, 0x0, @mcast2, @remote, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, "a6db7a", 0x0, "434e11"}}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x66c, 0x40a, 0x3d]}) clock_settime(0x7, &(0x7f0000000080)={0x0, 0x1c9c380}) [ 436.963921] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 436.976977] binder: BINDER_SET_CONTEXT_MGR already set [ 436.991948] binder: 9856:9859 ioctl 40046207 0 returned -16 [ 437.047815] QAT: Invalid ioctl 03:33:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff0, @remote}, 0x1c) 03:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7a00, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00|\x00', 0x101}) [ 437.154580] device lo entered promiscuous mode [ 437.163606] device lo left promiscuous mode [ 437.168603] binder: BINDER_SET_CONTEXT_MGR already set [ 437.174886] binder: 9878:9883 ioctl 40046207 0 returned -16 [ 437.180945] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:27 executing program 2: pipe2(&(0x7f0000000040), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x22000000000006, 0x0, 0x0, 0x400000000005067a}]}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000100)) 03:33:27 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=[{0xd0, 0x19f, 0x9, "fc90f6b32e1a610b8d8b00c7cdf5d2354286c6d46858890c651bbb1f5be1e9978e63258449285528bb2d90346f7080eda3e263f3a40de7ce09d52c43a94f54f6570b1816ec63e8061412a28ab6e5e72fe1598f58e712a6b45e7e90bff40378f57f9e44cf6c619f739251f4f260971170a5750608fb5258a2c88ff287c0bd39a9e0a2cbd3dd08faa982f61b112a5bf7a6b5d336b987334fa49854638c4ddce77984841eb6ad22fe489a87b860bfa7cf2c089c3d3520fecab82070b2459569f2"}, {0x100, 0x1ff, 0x658000, "97d4d8383cc7a5911082d3133ea7c41b321953e8f17214ae3538fe95f3193a496c46efaa0fa989e3f115f2713128fd0ebc5af9e43095f85f4660f9875ed77b954b074396a2a4816f2fb482b672571af42c69e65390435f0ebf5d1fc256b34895199ab24e3d81baab9d75a85ab6df54e65cbef82a520d1b6e9bbc763a288ffd3380ebc7c3cbb94231816c9790c67c48bd42fdc3823ddfaba75eb86064667cd6b8e8b4db2be0f9cb277bdc45f1b6a219978beb61981e6d26a7b8e16c0424699cbbf203754911c18db57ef19e9496a0fd6ca3305cf5ee8385f473c1ac45097f0d8fad2d977e7b50c3197a"}, {0x108, 0x101, 0x100000001, "67c006280e3b86d6049ec7d400e1bc17bb3bfd59bd0752b1bdf0a802b2ac0219eb7332de53a87f65c1d050ce835d6c7844f680db694c4433fd937a6bdf49239dcb5b31ddba0a803723862c67b8488ac3e0deb5ec4bfb49d390ab98e9b9109fb3d4d87a50e0a9912092988d90b2d8ad2f97eea9d04a037d5024643bf613975e500f1bee8f2b281929e228108b9570a28a4c77c668b5e248ad77664ffac3779ef5de2dc4d0bc8134648598b28b4408d12cdbc7ec10c319d7bb454f13641b0e392453352286550b11b462378fbd7aefdf05a6063c2f7de5241554785ff4c60a1962acfac8a1c7207b54797ecfdec6328844079537e472"}, {0x108, 0x114, 0x9, "fc03e01ac3556a6f23f788b6e1ba68ad7b5847c062ceb701c247933e47a776ccb59a1fb6e47f4fd9187c0db5965dd5e866894d3a17cb32b734cd41a949d553a114199a433f1b6322ad04dbcdc083081c7f439b9514524d6d5016a1157f49643703393222c42ae5b4aca62702942fbe9249db7b7a698ad2b4bcd0c856b3bfaa06c09fa1ab9ddf084899706a5faea83d02426df998fedfa51e994a52df36cde68f54d22044d60cc8ae6aa684f3fc9a01060e419a609cf4843e38a7bb9f8ddef42a5c62703bd5ab6de2db2e6e8ee52dfece5c76a60de0bffcfd66c793b71dec7c72193112c174d7ecf4204da551abe0df8dcde5"}, {0x50, 0x103, 0x7, "11dc8ab5c623b33c959cd368e81c1f3a5e41091ddcfdac413f31af60d999a24d6da6c94599c66d681bb02405e6b030fa39aaec15c75cac6b6271ed"}, {0xa0, 0x114, 0xffffffffffff65ac, "8ddefc3e4d4e38f602ea208f6a5d5cba4bfa135275f0c067f66511e603a1be238dd44354b468ea802b214ebf75307c823238656996d00446dcc0ab344eae58bd3351197da01925371d167e05962287062c4d7c9704e4ca8df1619f0dc92a75b8ea2655bcd17e47ef15705334b1d53122081282fa511cddb5aba0bae21914b07d9d165fca3f483040b6a159"}, {0x1010, 0x114, 0x3, "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"}, {0x28, 0x10d, 0xffffffff, "f71bb9af368acfd070773cd4c40e677080a533f248d6c6"}], 0x1508, 0x4}, 0x8804) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='9p\x00', 0x1000000, &(0x7f0000001840)={'trans=unix,', {[{@uname={'uname', 0x3d, '/proc/self/net/pfkey\x00'}}]}}) bind$inet(r0, &(0x7f0000001880)={0x2, 0x4e21, @multicast1}, 0x10) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000001980)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000000000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x400000000000000, 0x1}) unshare(0x40600) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x10) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000018c0)={{0x7, 0x5}, 'port0\x00', 0x4, 0x1000, 0x8, 0x3, 0x8000000000000, 0x8, 0x6, 0x0, 0x4, 0xbc39}) 03:33:27 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x177d, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8000) 03:33:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) syz_emit_ethernet(0x312, &(0x7f00000001c0)={@local, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=0x1c00000, {[@rr={0x7, 0x3, 0x276c}, @rr={0x7, 0x3}]}}, @gre}}}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)="7d6e6f6465762373656c661f7070703100"}, 0x10) ioctl$void(r1, 0xc0045c7f) 03:33:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x700, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:27 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xff00000000000000, @remote}, 0x1c) 03:33:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0002b200", 0x101}) 03:33:27 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50f6c}]}) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/77) 03:33:27 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 437.623913] device lo entered promiscuous mode [ 437.631211] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 437.642020] device lo left promiscuous mode [ 437.644981] binder: BINDER_SET_CONTEXT_MGR already set [ 437.656050] binder: 9900:9909 ioctl 40046207 0 returned -16 [ 437.664029] 9pnet: p9_fd_create_unix (9911): problem connecting socket: ./file0: -111 03:33:27 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x0, 0x7, 0x1}, {0x1f, 0x2, 0x8}, {0xffff, 0xfffffffffffffffa, 0x0, 0xfffffffffffffc00}, {0x0, 0x0, 0x0, 0xb5}]}) seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50ba3}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040), 0x4) 03:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xfffffdfd, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 437.724378] 9pnet: p9_fd_create_unix (9919): problem connecting socket: ./file0: -111 03:33:28 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x100050e69}]}) modify_ldt$read(0x0, &(0x7f00000000c0)=""/14, 0x1b115367aca96568) 03:33:28 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x8030100000000000, @remote}, 0x1c) 03:33:28 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x400000000006, 0x0, 0x0, 0x400000050d77}]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000080), 0x4) [ 437.788754] binder: BINDER_SET_CONTEXT_MGR already set [ 437.804739] binder: 9932:9934 ioctl 40046207 0 returned -16 03:33:28 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x40000000006, 0x0, 0x0, 0x50fd1}]}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 03:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:28 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x100050e69}]}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) [ 437.867490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:28 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x4000000050373}]}) gettid() 03:33:28 executing program 4: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x22000000000006, 0x0, 0x0, 0x400000000005067a}]}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) 03:33:28 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 437.933788] binder: BINDER_SET_CONTEXT_MGR already set [ 437.953846] binder: 9954:9956 ioctl 40046207 0 returned -16 03:33:28 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xf0ffffff, @remote}, 0x1c) 03:33:28 executing program 0: r0 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) [ 438.076027] device lo entered promiscuous mode 03:33:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000001600", 0x101}) 03:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x20000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:28 executing program 1: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x81806) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) 03:33:28 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:28 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) [ 438.136338] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:28 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') 03:33:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) 03:33:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) dup3(r1, 0xffffffffffffffff, 0x80000) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="b398beff86dfdc5cb4ad8b9301218012b9d30755e18f3a53c88846b5b9", 0x1d}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 03:33:28 executing program 1: r0 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) [ 438.183369] device lo left promiscuous mode [ 438.195296] binder: BINDER_SET_CONTEXT_MGR already set [ 438.210414] binder: 9988:9993 ioctl 40046207 0 returned -16 03:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f, 0xffffff7f00000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xf0ffffff00000000}}]}]}, 0x2c}}, 0x0) 03:33:28 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x53, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 438.324069] netlink: zone id is out of range [ 438.328672] netlink: del zone limit has 4 unknown bytes [ 438.345051] binder: BINDER_SET_CONTEXT_MGR already set [ 438.362180] binder: 10016:10021 ioctl 40046207 0 returned -16 03:33:28 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48010, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 03:33:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x5000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 438.474034] binder: BINDER_SET_CONTEXT_MGR already set [ 438.482521] device lo entered promiscuous mode [ 438.488506] binder: 10035:10036 ioctl 40046207 0 returned -16 [ 438.508377] device lo left promiscuous mode [ 438.599202] device lo entered promiscuous mode 03:33:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x700, @remote}, 0x1c) 03:33:29 executing program 2: r0 = socket$inet6(0xa, 0x400000000002, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x0) 03:33:29 executing program 1: r0 = socket$inet6(0x10, 0x4000000000802, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)="5500000018007f1dfd0000b2a4a280930a06000000a84308910000000e0008000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) 03:33:29 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x5, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000aacfe4), 0x1c) 03:33:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f000000000200", 0x101}) 03:33:29 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 03:33:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0xd}, {0x1}]}) [ 438.989620] binder: 10052:10058 unknown command 67108864 [ 438.995402] netlink: 41 bytes leftover after parsing attributes in process `syz-executor1'. [ 439.005322] binder: 10052:10058 ioctl c0306201 20000280 returned -22 [ 439.006180] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 439.022981] device lo left promiscuous mode 03:33:29 executing program 4: 03:33:29 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:29 executing program 2: [ 439.038033] binder: BINDER_SET_CONTEXT_MGR already set [ 439.050270] binder: 10052:10070 unknown command 67108864 [ 439.058685] binder: 10052:10058 ioctl 40046207 0 returned -16 [ 439.083031] binder: 10052:10070 ioctl c0306201 20000280 returned -22 03:33:29 executing program 2: 03:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4c00000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:29 executing program 4: 03:33:29 executing program 0: 03:33:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xffffffe0, @remote}, 0x1c) 03:33:29 executing program 2: [ 439.228903] binder: BINDER_SET_CONTEXT_MGR already set [ 439.266338] binder: 10088:10093 ioctl 40046207 0 returned -16 [ 439.285935] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:29 executing program 1: 03:33:29 executing program 4: 03:33:29 executing program 0: 03:33:29 executing program 2: [ 439.347578] netlink: 41 bytes leftover after parsing attributes in process `syz-executor1'. [ 439.357678] device lo entered promiscuous mode [ 439.368611] device lo left promiscuous mode 03:33:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000005d300", 0x101}) 03:33:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x3000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:29 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:29 executing program 2: 03:33:29 executing program 0: 03:33:29 executing program 4: 03:33:29 executing program 1: [ 439.510595] device lo entered promiscuous mode 03:33:29 executing program 2: 03:33:29 executing program 0: 03:33:29 executing program 4: [ 439.555497] binder: BINDER_SET_CONTEXT_MGR already set [ 439.564005] device lo left promiscuous mode [ 439.589543] binder: 10120:10126 ioctl 40046207 0 returned -16 [ 439.748984] device lo entered promiscuous mode [ 439.755658] device lo left promiscuous mode [ 439.817011] device lo entered promiscuous mode 03:33:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x11, @remote}, 0x1c) 03:33:30 executing program 1: 03:33:30 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:30 executing program 0: 03:33:30 executing program 4: 03:33:30 executing program 2: 03:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6800000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0080fe00", 0x101}) 03:33:30 executing program 2: 03:33:30 executing program 0: 03:33:30 executing program 1: 03:33:30 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x50f2e}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) [ 440.159566] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.167523] binder: BINDER_SET_CONTEXT_MGR already set [ 440.175395] device lo left promiscuous mode 03:33:30 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x4000000050373}]}) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000580)={0xfffffffffffffc81}, 0x18760b0ad1964b32) [ 440.215722] binder: 10148:10152 ioctl 40046207 0 returned -16 03:33:30 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x4000000050373}]}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 03:33:30 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x4000000050373}]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000001c0)={'irlan0\x00', {0x2, 0x0, @local}}) 03:33:30 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x4000000050373}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 03:33:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xf401, @remote}, 0x1c) 03:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6c00000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 440.368348] binder: BINDER_SET_CONTEXT_MGR already set [ 440.376175] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.422145] binder: 10187:10191 ioctl 40046207 0 returned -16 03:33:30 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:30 executing program 2: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x22000000000006, 0x0, 0x0, 0x400000000005067a}]}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)) 03:33:30 executing program 1: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x22000000000006, 0x0, 0x0, 0x400000000005067a}]}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000001200)=""/204) 03:33:30 executing program 4: r0 = socket$inet(0x2, 0x7, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000380)={0x5, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x1000000000000000, @remote}, 0x2c0, 0x9, 0x0, 0x3ff, 0x7fff, &(0x7f0000000340)='dummy0\x00', 0x6, 0x0, 0x400}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000880)='/dev/snd/pcmC#D#p\x00', 0x10, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000008c0)=0x4, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x22e00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000440)=""/176) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000580)) getsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000500), &(0x7f0000000540)=0x2) dup2(r0, r2) socketpair(0x5, 0x80000, 0x8, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xf, 0x13, 0x7286d34f7e19fa93, "7ffc93c66118cf96aab274c25266cfa2ff73cefb116830ae17d3f2255050f95b07a1aa230ef6d166e56324b2e5870e319ac71744807e17e0137c33d4df38b994", "b51c65f39a634e4cbe887b511dfe0e88f6e1476329b1f92df9a6c6b023f399c35381fb9f367a50e4611d679423ee87ee223a4ce2b069353ac6b300e595c13d6e", "beb24e722eee7f20e38e9db9f4c428116891f981d8894839e37b17b3a78a252a", [0x7fff, 0x2e]}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, {0x1, @dev={[], 0x1c}}, 0x1a, {0x2, 0x4e23, @multicast1}, 'sit0\x00'}) r4 = socket$inet(0x2, 0x3, 0xffffffff) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="f4c91acddd61849827d5903807f6c3bb237b12f3553d04062ae843327b96779eb11467b26ec47c3dbaf009bd6f956507a23811134ce16da8b5e2b1d220e0028b3324993478cd3cb85529eb917aa0693ba5099c90c1", 0x55}, {&(0x7f0000000100)="9c91aad7356bacbf6ebdf0a85520d7b56970ce507d47e82346", 0x19}, {&(0x7f0000000140)="c3b9a96336aef8ee8d50edcaff6a4052f51db3820e0f08312d31d90fbbf86b72e66f2a8d5f07e2948f24e98d0e868ddb3a4a902bb7d34ae95124622bee422cca3ffc0eb44e888e96784639ff0efa2ac62a8c2b90b687dda7399b9e52d7b0cb9ca95dbb2575de03395a", 0x69}, {&(0x7f00000001c0)="9b9fa60df308ffbce2289cc135eb778633841f631863d617c9ae741a727a922561af6f873daa8c8cc9aeb446c029d7f3a6112dc7e9fca624eee9ab5c8b9aff6c1c8dd6fd289cdaccf4ac45450edd3a05577fd2", 0x53}, {&(0x7f0000000240)="6e38cd0586e78eb2b68413605f", 0xd}, {&(0x7f0000000280)="31a9f1e0986e1abf73", 0x9}], 0x6) 03:33:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x800008912, &(0x7f0000000280)="6f33bc153035cab9764070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0x3a000000, @dev, @local}}}}, &(0x7f0000000040)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) [ 440.508088] device lo entered promiscuous mode [ 440.539729] device lo left promiscuous mode [ 440.618220] 9pnet_virtio: no channels available for device ./file0 03:33:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00 \x00', 0x101}) 03:33:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4800, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4002, @remote}, 0x1c) 03:33:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc40c, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x44}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:33:30 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) sched_setaffinity(0x0, 0xfffffffffffffc5b, &(0x7f00000000c0)=0x9) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x80, 0x80, 0x5, 0xff}) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x2, [0xab, 0x7f]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x9e, "99d17336fedbefad2138e839e4c383a2b36465169fe5223f7ad6c711e19b28fa76bb1de210bf6fa06aeb962ff052fe839431595eef6acc704e46b885a6c60b3568b324e3830f79edbc466ad5f3acb5cfc576681eee6846d31e53d013f1fcadf939f2cff101ed7179d606c899fbd5f3c92dc3b8133009bf169baa0c5fbe1d05652cc777244e6c3087deb389ff9356f42be16d2827d3817ccad6ecdc1b4b05"}, &(0x7f00000001c0)=0xa6) 03:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x91) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000040)="a3a09678b5bc1188998de21bd512921fed28910110a67c9ef084065d8d38", 0x1e, 0x401, 0x0, 0x1, r3}, &(0x7f0000000140)) dup3(r1, r0, 0x0) 03:33:31 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 440.727280] 9pnet_virtio: no channels available for device ./file0 03:33:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8db, 0x77e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x982, 0x1, 0x4, 0x100000001, 0x80, 0x3, 0x4cf0, 0x0, r2}, 0x20) [ 440.774090] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 440.775709] binder: BINDER_SET_CONTEXT_MGR already set [ 440.797575] tls_set_device_offload_rx: netdev lo with no TLS offload [ 440.808558] device lo entered promiscuous mode 03:33:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x20000) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x80000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000cd8ff4)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r5, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 440.830044] device lo left promiscuous mode 03:33:31 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0), 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 440.851583] binder: 10232:10243 ioctl 40046207 0 returned -16 03:33:31 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote}, 0x1c) 03:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6c00, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:31 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0xe4f313fff0431dea, 0x70, 0x80000000, 0x7fffffff, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x1, 0x100, 0xfffffffffffffe00, 0x0, 0x3f, 0x3, 0xffffffffffffff45, 0xb914, 0x1, 0x1f, 0x2, 0x3, 0x5, 0x0, 0xfff, 0x8, 0x1, 0x1, 0x401, 0x8000, 0x3, 0x5, 0x20, 0x3, 0x1, 0x0, 0x9, 0x7, 0x0, 0x5, 0x4, @perf_config_ext={0x2}, 0x200, 0xd, 0x2a, 0x1, 0x6, 0x7, 0x81}, 0xffffffffffffff9c, 0xc, 0xffffffffffffffff, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000580)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) sendfile(r0, r1, &(0x7f0000000180), 0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x6, 0xb, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) [ 440.968538] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 441.003781] tls_set_device_offload_rx: netdev lo with no TLS offload [ 441.013656] binder: BINDER_SET_CONTEXT_MGR already set 03:33:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000500)) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) pwrite64(r1, &(0x7f0000000000), 0xffffff0c, 0x3) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c463f0395de07ea00000000000003003e008800000040030000000000004000000000000000a5010000000000000500000003003800020008000100f2008bf880b0010000000900000000000000040000000000000000020000000000000700000000000000040000000000000005000000000000006eac4ec7dde6671b29601a2a89b354ab3eacfc70eb254a29a9157768450567fc000629be7e9a0bf37ec460406ee385a9b5ba2fb8fa3014e688cfcdc37dcce10731b1419cee2ae9e49c41e05cd03fa052808c9ac2404589114c4032ce75800f8d287a9a4f0c807a7669279daf941338fc687b9b7797e76f596b6d4a671e07404a"], 0xd7) [ 441.032413] binder: 10281:10284 ioctl 40046207 0 returned -16 03:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x2, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 441.142038] binder: 10293:10295 unknown command 278532 [ 441.160983] binder: 10293:10295 ioctl c0306201 20000280 returned -22 [ 441.185799] binder: BINDER_SET_CONTEXT_MGR already set 03:33:31 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 441.185839] device lo entered promiscuous mode [ 441.197344] binder: 10293:10297 unknown command 278532 [ 441.211109] binder: 10293:10295 ioctl 40046207 0 returned -16 [ 441.224186] binder: 10293:10297 ioctl c0306201 20000280 returned -22 03:33:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00r\x00', 0x101}) 03:33:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x91) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000040)="a3a09678b5bc1188998de21bd512921fed28910110a67c9ef084065d8d38", 0x1e, 0x401, 0x0, 0x1, r3}, &(0x7f0000000140)) dup3(r1, r0, 0x0) 03:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xfdfdffff00000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 441.313461] tls_set_device_offload_rx: netdev lo with no TLS offload [ 441.357558] device lo left promiscuous mode 03:33:31 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x0, 0xe805, 0x0, 0x0) [ 441.387240] binder: BINDER_SET_CONTEXT_MGR already set [ 441.405408] binder: 10320:10324 ioctl 40046207 0 returned -16 [ 441.526812] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:31 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) sched_setaffinity(0x0, 0xfffffffffffffc5b, &(0x7f00000000c0)=0x9) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x80, 0x80, 0x5, 0xff}) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, 0x0, 0x7fffff29) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x2, [0xab, 0x7f]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x9e, "99d17336fedbefad2138e839e4c383a2b36465169fe5223f7ad6c711e19b28fa76bb1de210bf6fa06aeb962ff052fe839431595eef6acc704e46b885a6c60b3568b324e3830f79edbc466ad5f3acb5cfc576681eee6846d31e53d013f1fcadf939f2cff101ed7179d606c899fbd5f3c92dc3b8133009bf169baa0c5fbe1d05652cc777244e6c3087deb389ff9356f42be16d2827d3817ccad6ecdc1b4b05"}, &(0x7f00000001c0)=0xa6) [ 441.640481] device lo entered promiscuous mode [ 441.650289] binder: BINDER_SET_CONTEXT_MGR already set 03:33:31 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x0, 0xe805, 0x0, 0x0) 03:33:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x91) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000040)="a3a09678b5bc1188998de21bd512921fed28910110a67c9ef084065d8d38", 0x1e, 0x401, 0x0, 0x1, r3}, &(0x7f0000000140)) dup3(r1, r0, 0x0) [ 441.683344] binder: 10339:10340 ioctl 40046207 0 returned -16 [ 441.760416] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x60, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00fdfdffff00", 0x101}) 03:33:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x91) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000040)="a3a09678b5bc1188998de21bd512921fed28910110a67c9ef084065d8d38", 0x1e, 0x401, 0x0, 0x1, r3}, &(0x7f0000000140)) dup3(r1, r0, 0x0) 03:33:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffdfffffffff3, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/106, 0x6a}], 0x2, 0x0, 0x0, 0x6}, 0x9}, {{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/178, 0xb2}, {&(0x7f0000001540)=""/125, 0x7d}, {&(0x7f00000015c0)=""/69, 0x45}, {&(0x7f0000001640)=""/108, 0x6c}, {&(0x7f00000016c0)=""/182, 0xb6}, {&(0x7f0000001780)=""/84, 0x54}], 0x9, &(0x7f00000018c0)=""/173, 0xad, 0x7}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/138, 0x8a}, {&(0x7f0000001a80)=""/182, 0xb6}, {&(0x7f0000001b40)=""/126, 0x7e}, {&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/162, 0xa2}, {&(0x7f0000001d80)=""/140, 0x8c}], 0x7, &(0x7f0000001ec0)=""/201, 0xc9, 0x7}, 0x10001}, {{&(0x7f0000001fc0)=@rc, 0x80, &(0x7f0000002180)=[{&(0x7f0000002040)=""/130, 0x82}, {&(0x7f0000002100)=""/73, 0x49}], 0x2, &(0x7f00000021c0)=""/117, 0x75, 0x5}, 0x3}, {{&(0x7f0000002240)=@un=@abs, 0x80, &(0x7f0000002580)=[{&(0x7f00000022c0)=""/42, 0x2a}, {&(0x7f0000002300)=""/147, 0x93}, {&(0x7f00000023c0)=""/170, 0xaa}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f0000002540)=""/63, 0x3f}], 0x5, 0x0, 0x0, 0x7}, 0x7ff}, {{&(0x7f0000002600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002680)}, {&(0x7f00000026c0)=""/90, 0x5a}, {&(0x7f0000002740)=""/151, 0x97}, {&(0x7f0000002800)=""/101, 0x65}, {&(0x7f0000002880)=""/131, 0x83}], 0x5, &(0x7f00000029c0)=""/248, 0xf8, 0xed3}, 0x40}], 0x6, 0x10100, &(0x7f0000002c40)) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000002c80)=0xff, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002680)={0x0, @local, @broadcast}, &(0x7f0000002cc0)=0xc) 03:33:34 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x0, 0xe805, 0x0, 0x0) 03:33:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1100000000000000, @remote}, 0x1c) 03:33:34 executing program 2: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000200)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)="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", 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) mq_open(&(0x7f0000000140)='GPL\x00', 0x0, 0x0, &(0x7f0000000300)={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x49c}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000240)={0x200, 0x4}) open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000005c0)="6367726f75702e70726f6373006ea07af1f7f8fe08af5e6ea40ff2ab942a81977165ff75789c2a15836c617ffee19242b78a3fdc37aea65bce02077269044c29e8a3a6b03b44014efb4fa7f647c8e8dfbb4def851d6eecc8696be6620cd107cf0bf3d4e588f7325817448f239e05402f14c87b7a10bc1861e722b9af61315cfeccdea7856293d2e6", 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f93746174000000000000000000000000000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40286608, 0x20000000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) 03:33:34 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) clone(0x8000000800200, &(0x7f0000000380), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000180)) mknod(&(0x7f00000002c0)='./file0\x00', 0x1040, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x81, 0x7, 0x846, 0x6, 0x6}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') writev(r2, &(0x7f0000001540)=[{&(0x7f0000000280)="ad", 0x1}], 0x1) write$P9_RREMOVE(r2, &(0x7f00000000c0)={0xc8}, 0x5) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 443.892798] device lo left promiscuous mode [ 443.908425] binder: BINDER_SET_CONTEXT_MGR already set [ 443.912250] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 443.930155] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1869768495 (only 16 groups) 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:34 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x0) lseek(r0, 0x0, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x5, &(0x7f0000000080)="3e3367f560481ff4182c65fd9cf8eda06ece6cd1e16fe3b85f398f2819f98d9e4f6060bb79aebe64d3a85004ff7284ff1023b3ee087ae10a4b37971163d7a2133f749eba6e2f") ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") [ 443.940821] binder: 10392:10396 ioctl 40046207 0 returned -16 [ 443.960085] tls_set_device_offload_rx: netdev lo with no TLS offload [ 443.997243] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1869768495 (only 16 groups) 03:33:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x200000000000000, @remote}, 0x1c) 03:33:34 executing program 2: getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0xfffffffffffffff9, {{0xa, 0x4e21, 0x3d8280000000000, @loopback, 0x1e1}}}, 0x88) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200000, 0x21) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x80, 0x1, 0x2ab, 0x992e, 0x0}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000580)=r2, 0x4) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x850000, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x7ff}}, {@rq={'rq', 0x3d, 0x8b}}, {@common=@noextend='noextend'}, {@sq={'sq', 0x3d, 0x1}}, {@sq={'sq', 0x3d, 0x8001}}, {@sq={'sq', 0x3d, 0x6}}, {@common=@afid={'afid', 0x3d, 0xffff}}, {@common=@privport='privport'}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0x162}}]}}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/64, 0x7c1b}], 0x1) dup3(0xffffffffffffffff, r0, 0x0) write(r0, &(0x7f0000c34fff), 0x1000002c1) [ 444.048336] binder: 10414:10419 unknown command 73597952 [ 444.064334] binder: 10414:10419 ioctl c0306201 20000280 returned -22 03:33:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwrite64(r2, &(0x7f0000000100)="1efe1bfece02c30e1ecc3d62acd1a10c9b00683cd3557255792a8052ad85b88d2639d1a3fd5a44efe16d4a7839b8d586bcaec2227ec6ad5eeb78626316270d0c296320c867c9835e3604a242ed7d425f171943aaf6736fc4f5395f07dc990d961adc2eae5d06", 0x66, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x28a140, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x1, 0x800}) [ 444.088985] binder: BINDER_SET_CONTEXT_MGR already set [ 444.099463] binder: 10414:10423 unknown command 73597952 [ 444.114926] binder: 10414:10419 ioctl 40046207 0 returned -16 [ 444.125246] binder: 10414:10423 ioctl c0306201 20000280 returned -22 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x500000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 444.133526] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 444.188211] device lo entered promiscuous mode 03:33:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000009fee)='/dev/input/event#\x00', 0x2, 0x101002) write(r0, &(0x7f0000000040)="270000001400f1070e0e0000150f0a001100e700f609ffff", 0x18) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x8000000305000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={r1, 0x1f, 0x4, "0ad3c788fc4a622bb4ea23bdb9d22b1577cb84c2367cefb6d2a9187eef3e08674dafce0741473ded78ac87d09724df713952b9d2af3c72bd6bb7d2311a203487aecaee3543be13d4dcb49487df963124be73a743a42df2f3321abbc2b380cfc912ac53dcf6"}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r2}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x2e, 0xe358, 0x4}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r3, 0xd, 0x401}, 0xc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8, 0x30, 0x3, 0x401}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, 0x4) 03:33:34 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) [ 444.217752] binder: BINDER_SET_CONTEXT_MGR already set [ 444.232760] binder: 10437:10440 ioctl 40046207 0 returned -16 [ 444.238785] device lo left promiscuous mode 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x400000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 444.342405] binder: BINDER_SET_CONTEXT_MGR already set [ 444.369219] binder: 10460:10464 ioctl 40046207 0 returned -16 [ 444.387698] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x101}) 03:33:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xf0ffffff00000000, @remote}, 0x1c) 03:33:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x91) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000040)="a3a09678b5bc1188998de21bd512921fed28910110a67c9ef084065d8d38", 0x1e, 0x401, 0x0, 0x1, r3}, &(0x7f0000000140)) dup3(r1, r0, 0x0) 03:33:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x200082) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0x1000, &(0x7f0000000040), 0x2, r3, 0x1}) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x6, 0x8, r4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) sendto(r0, &(0x7f00000001c0)="a2", 0x1, 0x0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x2) 03:33:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000240)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'irlan0\x00', 0x102}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="510600000000000000001b0000000000"], 0x28}}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x7}]) 03:33:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7a00000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:34 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) [ 444.508927] device lo entered promiscuous mode [ 444.556495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 444.566227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 444.578926] binder: BINDER_SET_CONTEXT_MGR already set [ 444.593032] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:34 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) 03:33:34 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) 03:33:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) close(r1) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)) [ 444.601093] binder: 10481:10488 ioctl 40046207 0 returned -16 [ 444.620405] device lo left promiscuous mode [ 444.756258] tls_set_device_offload_rx: netdev lo with no TLS offload [ 444.859819] device lo entered promiscuous mode [ 444.878618] device lo left promiscuous mode 03:33:35 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) 03:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x74000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:33:35 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x1f, &(0x7f0000000180)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfcc8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x6, {0x7, 0x1b, 0x9, 0x0, 0x4, 0x8001, 0x1000, 0x8}}, 0x50) dup2(r0, r1) 03:33:35 executing program 6 (fault-call:6 fault-nth:0): r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:35 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) [ 444.961569] binder: BINDER_SET_CONTEXT_MGR already set [ 444.972487] binder: 10524:10525 ioctl 40046207 0 returned -16 [ 445.000280] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000000200", 0x101}) [ 445.101869] device lo entered promiscuous mode [ 445.108482] FAULT_INJECTION: forcing a failure. [ 445.108482] name failslab, interval 1, probability 0, space 0, times 0 [ 445.119790] CPU: 0 PID: 10547 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 445.128290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.137644] Call Trace: [ 445.140246] dump_stack+0x1c9/0x2b4 [ 445.143886] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.149086] ? lock_acquire+0x1e4/0x540 [ 445.153068] should_fail.cold.4+0xa/0x11 [ 445.157117] ? cpuacct_css_alloc+0x160/0x160 [ 445.161520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.166619] ? __account_cfs_rq_runtime+0x770/0x770 [ 445.171648] ? __wake_up_common_lock+0x1d0/0x330 [ 445.176402] ? trace_hardirqs_on+0x10/0x10 [ 445.180628] ? reweight_entity+0x1100/0x1100 [ 445.185034] ? lock_acquire+0x1e4/0x540 [ 445.188996] ? fs_reclaim_acquire+0x20/0x20 [ 445.193306] ? lock_downgrade+0x8f0/0x8f0 [ 445.197442] ? check_same_owner+0x340/0x340 [ 445.201769] ? reweight_task+0x130/0x130 [ 445.205824] ? rcu_note_context_switch+0x730/0x730 [ 445.210755] __should_failslab+0x124/0x180 [ 445.214986] should_failslab+0x9/0x14 [ 445.218783] kmem_cache_alloc_node+0x272/0x780 [ 445.223361] ? lock_downgrade+0x8f0/0x8f0 [ 445.227497] __alloc_skb+0x119/0x770 [ 445.231201] ? skb_scrub_packet+0x490/0x490 [ 445.235515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.241038] ? tcp_established_options+0x36b/0x5c0 [ 445.245955] ? tcp_select_initial_window+0x3b0/0x3b0 [ 445.251045] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.256046] ? tcp_current_mss+0x2ac/0x410 [ 445.260269] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 445.264403] sk_stream_alloc_skb+0x141/0x970 [ 445.268795] ? tcp_init_transfer+0x470/0x470 [ 445.273188] ? tcp_rate_check_app_limited+0x121/0x460 [ 445.278359] ? tcp_fastopen_reset_cipher.cold.14+0x47/0x47 [ 445.283992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.289538] tcp_sendmsg_locked+0xee8/0x3f20 [ 445.293957] ? trace_hardirqs_on+0x10/0x10 [ 445.298186] ? __schedule+0x884/0x1ec0 [ 445.302059] ? do_raw_spin_lock+0xc1/0x200 [ 445.306278] ? tcp_sendpage+0x60/0x60 [ 445.310060] ? kasan_check_read+0x11/0x20 [ 445.314188] ? do_raw_spin_unlock+0xa7/0x2f0 [ 445.318580] ? kasan_check_write+0x14/0x20 [ 445.322814] ? lock_acquire+0x1e4/0x540 [ 445.326784] ? tcp_sendmsg+0x21/0x50 [ 445.330489] ? lock_release+0xa30/0xa30 [ 445.334457] ? kasan_check_read+0x11/0x20 [ 445.338585] ? do_raw_spin_unlock+0xa7/0x2f0 [ 445.342988] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 445.347566] ? kasan_check_write+0x14/0x20 [ 445.351794] ? lock_sock_nested+0x9f/0x120 [ 445.356047] ? trace_hardirqs_on+0xd/0x10 [ 445.360190] ? __local_bh_enable_ip+0x161/0x230 [ 445.364855] tcp_sendmsg+0x2f/0x50 [ 445.368392] inet_sendmsg+0x1a1/0x690 [ 445.372190] ? ipip_gro_receive+0x100/0x100 [ 445.376495] ? trace_hardirqs_on+0xd/0x10 [ 445.380634] ? __local_bh_enable_ip+0x161/0x230 [ 445.385310] smc_sendmsg+0x2a2/0x3c0 [ 445.389026] ? smc_sendpage+0x1a0/0x1a0 [ 445.392987] sock_sendmsg+0xd5/0x120 [ 445.396696] __sys_sendto+0x3d7/0x670 03:33:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xff00, @remote}, 0x1c) 03:33:35 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x7, {0x1000}}, 0x18) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00084000998681ff130200001200100000030100000200000001000084811f4ce10000001e001e0000feffffff10ec0302008100526549734572324673", 0x3d, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fd"]) 03:33:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x300, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 445.400508] ? __ia32_sys_getpeername+0xb0/0xb0 [ 445.405178] ? vfs_write+0x2f3/0x560 [ 445.408898] ? wait_for_completion+0x8d0/0x8d0 [ 445.413484] ? lock_release+0xa30/0xa30 [ 445.417473] ? fsnotify_first_mark+0x350/0x350 [ 445.422061] ? __fsnotify_parent+0xcc/0x420 [ 445.422807] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 445.426394] ? fsnotify+0x14e0/0x14e0 [ 445.426416] ? __sb_end_write+0xac/0xe0 [ 445.426434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.426452] ? fput+0x130/0x1a0 [ 445.453363] ? ksys_write+0x1ae/0x260 [ 445.457163] ? __ia32_sys_read+0xb0/0xb0 [ 445.461225] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.466764] __x64_sys_sendto+0xe1/0x1a0 [ 445.470825] do_syscall_64+0x1b9/0x820 [ 445.474710] ? finish_task_switch+0x1d3/0x870 [ 445.479205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.484137] ? syscall_return_slowpath+0x31d/0x5e0 [ 445.489067] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 445.494079] ? __switch_to_asm+0x34/0x70 [ 445.498139] ? __switch_to_asm+0x34/0x70 [ 445.502196] ? __switch_to_asm+0x40/0x70 [ 445.506255] ? __switch_to_asm+0x34/0x70 [ 445.510309] ? __switch_to_asm+0x40/0x70 [ 445.514366] ? __switch_to_asm+0x34/0x70 [ 445.518421] ? __switch_to_asm+0x40/0x70 [ 445.522484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.527326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.532506] RIP: 0033:0x456cb9 [ 445.535695] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.554589] RSP: 002b:00007f53c261dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.562307] RAX: ffffffffffffffda RBX: 00007f53c261e6d4 RCX: 0000000000456cb9 [ 445.569569] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 [ 445.576836] RBP: 0000000000930320 R08: 0000000000000000 R09: 0000000000000000 [ 445.584109] R10: 000000000000e805 R11: 0000000000000246 R12: 0000000000000014 [ 445.591373] R13: 00000000004d3888 R14: 00000000004c8523 R15: 0000000000000000 [ 445.602655] device lo left promiscuous mode [ 445.614042] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ý" [ 445.635930] binder: BINDER_SET_CONTEXT_MGR already set [ 445.641345] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ý" [ 445.641430] binder: 10569:10571 ioctl 40046207 0 returned -16 [ 445.770897] device lo entered promiscuous mode [ 445.779158] device lo left promiscuous mode 03:33:36 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x19e, 0x0, 0x4, {0x7, 0x1b, 0x0, 0x4}}, 0x47) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="900000000000000002000000000000000000000000000005d5be6100000000000b00000000000000656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73797374656dcc637075736d746367726f7570246367726f75701500000000"], 0x90) 03:33:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x121400) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="1b0000006097007b2101000000000000233494f9b3979269cf58fbe262cf98"], &(0x7f0000000240)=0x23) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r2, 0x4}, 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fcntl$setsig(r3, 0xa, 0x5) r4 = dup2(r0, r3) read(r4, &(0x7f00000000c0)=""/85, 0x55) 03:33:36 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x2000000, &(0x7f0000000200)="e68725f58a6facdcf506c5e04fea789f7def86cf5101771ed58d2b43be90e1208d7798df1824a5677726e9f143845464c040f32f21ecc5bd021e30c09e51ab8b39c4e2fd30f97f359b4796c3ecec4609521afe582c29b74c") r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x80021, &(0x7f0000000140)={[{@umask={'umask'}}]}) 03:33:36 executing program 6 (fault-call:6 fault-nth:1): r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x600, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:36 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) r1 = socket(0x15, 0x80005, 0xfffffffffffffffe) getsockopt(r1, 0x1000200100000114, 0x2713, &(0x7f0000000180)=""/1, &(0x7f0000000140)=0xffffffffffffffaf) socketpair$inet(0x2, 0x8080f, 0x0, &(0x7f0000000100)) 03:33:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1802, @remote}, 0x1c) 03:33:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00|\x00', 0x101}) [ 445.838082] device lo entered promiscuous mode [ 445.895292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 445.898375] binder: BINDER_SET_CONTEXT_MGR already set [ 445.911216] device lo left promiscuous mode 03:33:36 executing program 1: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) r3 = epoll_create1(0x0) keyctl$revoke(0x3, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) close(r3) r4 = memfd_create(&(0x7f0000000100)='bdev$-\x00', 0x0) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) write(r3, &(0x7f0000000040), 0x0) close(r2) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000040)) 03:33:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="420000008a3a0000c50300006e7958afd08318a2"]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) dup2(r0, r1) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0xffffffffffffffe5, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21}, {0x2, 0x4e24, @broadcast}, 0x0, 0x1, 0x3, 0x1, 0x0, &(0x7f00000000c0)='teql0\x00', 0x400, 0x5, 0xfffffffffffff000}) [ 445.936682] binder: 10583:10596 ioctl 40046207 0 returned -16 03:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4c, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 445.978273] tls_set_device_offload_rx: 1 callbacks suppressed [ 445.978282] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe, @remote}, 0x1c) 03:33:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="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", 0x22b, 0xfffc}], 0x0, &(0x7f0000000240)) [ 446.027570] binder: BINDER_SET_CONTEXT_MGR already set 03:33:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 446.070966] binder: 10620:10623 ioctl 40046207 0 returned -16 [ 446.094861] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 446.145293] binder: 10642:10643 unknown command 4 [ 446.150486] binder: 10642:10643 ioctl c0306201 20000280 returned -22 [ 446.157956] binder: BINDER_SET_CONTEXT_MGR already set [ 446.163507] binder: 10642:10643 ioctl 40046207 0 returned -16 [ 446.171280] binder: 10642:10647 unknown command 4 [ 446.181946] binder: 10642:10647 ioctl c0306201 20000280 returned -22 [ 446.190883] device lo entered promiscuous mode [ 446.197909] FAULT_INJECTION: forcing a failure. [ 446.197909] name failslab, interval 1, probability 0, space 0, times 0 [ 446.199534] proc: unrecognized mount option "./file0" or missing value [ 446.209264] CPU: 0 PID: 10624 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 446.224343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.233688] Call Trace: [ 446.236277] dump_stack+0x1c9/0x2b4 [ 446.239907] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.245100] should_fail.cold.4+0xa/0x11 [ 446.249180] ? __kernel_text_address+0xd/0x40 [ 446.253679] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.258776] ? __save_stack_trace+0x8d/0xf0 [ 446.263102] ? save_stack+0xa9/0xd0 [ 446.266730] ? save_stack+0x43/0xd0 [ 446.270347] ? kasan_kmalloc+0xc4/0xe0 [ 446.274245] ? kasan_slab_alloc+0x12/0x20 [ 446.278403] ? kmem_cache_alloc_node+0x144/0x780 [ 446.283155] ? __alloc_skb+0x119/0x770 [ 446.287041] ? sk_stream_alloc_skb+0x141/0x970 [ 446.291614] ? tcp_sendmsg_locked+0xee8/0x3f20 [ 446.296276] ? tcp_sendmsg+0x2f/0x50 [ 446.299982] ? inet_sendmsg+0x1a1/0x690 [ 446.303949] ? smc_sendmsg+0x2a2/0x3c0 [ 446.307833] ? sock_sendmsg+0xd5/0x120 [ 446.311717] ? __sys_sendto+0x3d7/0x670 [ 446.315683] ? __x64_sys_sendto+0xe1/0x1a0 [ 446.319918] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.325279] ? lock_acquire+0x1e4/0x540 [ 446.329249] ? fs_reclaim_acquire+0x20/0x20 [ 446.333565] ? lock_downgrade+0x8f0/0x8f0 [ 446.337712] ? check_same_owner+0x340/0x340 [ 446.342029] ? lock_downgrade+0x8f0/0x8f0 [ 446.346172] ? rcu_note_context_switch+0x730/0x730 [ 446.351100] __should_failslab+0x124/0x180 [ 446.355339] should_failslab+0x9/0x14 [ 446.359144] kmem_cache_alloc_node_trace+0x26f/0x770 [ 446.364240] ? kasan_kmalloc+0xc4/0xe0 [ 446.368133] __kmalloc_node_track_caller+0x33/0x70 [ 446.373060] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 446.377811] __alloc_skb+0x155/0x770 [ 446.381520] ? skb_scrub_packet+0x490/0x490 [ 446.385837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.391369] ? tcp_established_options+0x36b/0x5c0 [ 446.396293] ? tcp_select_initial_window+0x3b0/0x3b0 [ 446.401395] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.406404] ? tcp_current_mss+0x2ac/0x410 [ 446.410944] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 446.415089] sk_stream_alloc_skb+0x141/0x970 [ 446.419501] ? tcp_init_transfer+0x470/0x470 [ 446.423905] ? tcp_rate_check_app_limited+0x121/0x460 [ 446.429092] ? tcp_fastopen_reset_cipher.cold.14+0x47/0x47 [ 446.434719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.440251] tcp_sendmsg_locked+0xee8/0x3f20 [ 446.444658] ? trace_hardirqs_on+0x10/0x10 [ 446.448895] ? __schedule+0x884/0x1ec0 [ 446.452777] ? do_raw_spin_lock+0xc1/0x200 [ 446.457016] ? tcp_sendpage+0x60/0x60 [ 446.460813] ? kasan_check_read+0x11/0x20 [ 446.464952] ? do_raw_spin_unlock+0xa7/0x2f0 [ 446.469361] ? kasan_check_write+0x14/0x20 [ 446.473597] ? lock_acquire+0x1e4/0x540 [ 446.477563] ? tcp_sendmsg+0x21/0x50 [ 446.481275] ? lock_release+0xa30/0xa30 [ 446.485244] ? kasan_check_read+0x11/0x20 [ 446.489384] ? do_raw_spin_unlock+0xa7/0x2f0 [ 446.493787] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 446.498363] ? kasan_check_write+0x14/0x20 [ 446.502593] ? lock_sock_nested+0x9f/0x120 [ 446.506824] ? trace_hardirqs_on+0xd/0x10 [ 446.510972] ? __local_bh_enable_ip+0x161/0x230 [ 446.515637] tcp_sendmsg+0x2f/0x50 [ 446.519176] inet_sendmsg+0x1a1/0x690 [ 446.522975] ? ipip_gro_receive+0x100/0x100 [ 446.527290] ? trace_hardirqs_on+0xd/0x10 [ 446.531431] ? __local_bh_enable_ip+0x161/0x230 [ 446.536096] smc_sendmsg+0x2a2/0x3c0 [ 446.539818] ? smc_sendpage+0x1a0/0x1a0 [ 446.543787] sock_sendmsg+0xd5/0x120 [ 446.547494] __sys_sendto+0x3d7/0x670 [ 446.551295] ? __ia32_sys_getpeername+0xb0/0xb0 [ 446.555957] ? vfs_write+0x2f3/0x560 [ 446.559667] ? wait_for_completion+0x8d0/0x8d0 [ 446.564245] ? lock_release+0xa30/0xa30 [ 446.568219] ? fsnotify_first_mark+0x350/0x350 [ 446.572795] ? __fsnotify_parent+0xcc/0x420 [ 446.577114] ? fsnotify+0x14e0/0x14e0 [ 446.580920] ? __sb_end_write+0xac/0xe0 [ 446.584896] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.590429] ? fput+0x130/0x1a0 [ 446.593707] ? ksys_write+0x1ae/0x260 [ 446.597502] ? __ia32_sys_read+0xb0/0xb0 [ 446.601567] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.607113] __x64_sys_sendto+0xe1/0x1a0 [ 446.611179] do_syscall_64+0x1b9/0x820 [ 446.615061] ? finish_task_switch+0x1d3/0x870 [ 446.619557] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.624491] ? syscall_return_slowpath+0x31d/0x5e0 [ 446.629417] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.634429] ? __switch_to_asm+0x34/0x70 [ 446.638489] ? __switch_to_asm+0x34/0x70 [ 446.642549] ? __switch_to_asm+0x40/0x70 [ 446.646609] ? __switch_to_asm+0x34/0x70 [ 446.650666] ? __switch_to_asm+0x40/0x70 [ 446.654720] ? __switch_to_asm+0x34/0x70 [ 446.658773] ? __switch_to_asm+0x40/0x70 [ 446.662833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.667674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.672856] RIP: 0033:0x456cb9 [ 446.676048] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xf401000000000000, @remote}, 0x1c) [ 446.694947] RSP: 002b:00007f53c261dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 446.702659] RAX: ffffffffffffffda RBX: 00007f53c261e6d4 RCX: 0000000000456cb9 [ 446.709923] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000013 [ 446.717186] RBP: 0000000000930320 R08: 0000000000000000 R09: 0000000000000000 [ 446.724453] R10: 000000000000e805 R11: 0000000000000246 R12: 0000000000000014 [ 446.731713] R13: 00000000004d3888 R14: 00000000004c8523 R15: 0000000000000001 03:33:37 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 446.767243] device lo left promiscuous mode 03:33:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc80700145f8f764070") sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 03:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xa, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:37 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000100)={0x654f}) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffe11, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000600)=0x1, 0x4) 03:33:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x92, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x102df, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x6, 0x10001}, 0x8) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x6, 0x4}) [ 446.830213] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:37 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x20000301, 0xe805, 0x0, 0x0) [ 446.885000] binder: 10668:10676 unknown command 16388 03:33:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100008000000000000000130d4f"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0xf6a, 0xb06, &(0x7f0000000080)="f986a65a3c2f6ca052d3216f7ff8bd59e3cea41ae805ca81a5565bc874c0b095b5cce9527bf07ad42950948b6ee1b8ec66aca1b2b993221a40f691738001bce01133481506a32f11faeef69fc0b8bd70f7780e1d2e43bf066b1ef2", &(0x7f00000001c0)="d29dc2d6908cdbd6484bfff3ffa07f28ce623cf2fed66a0f5568673b96957b7a752a26c01a5651659454a6de75ad8a33e41b8a2ac1d321945df37d8136e29c0c52e079a80f62249650e0e6037286090e8b3f05491bdf777f6eb302b3b808399b8e01db64fc8133d86b19e297dc4480d2b88dab4088bf6e7c0aafd0adf84a5f30a783f4dc54d37b446be355fcbc78253ae0ed70519d428a495cf0298d0df5bad54c7ba31d669b2122e128365c8cd4", 0x5b, 0xae}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0xa, 0x10001, [{0xceb, 0x0, 0x4}, {0x3ff, 0x0, 0xfffffffffffffffc}, {0x8, 0x0, 0xfffffffffffffffc}, {0xb79, 0x0, 0x62}, {0x1, 0x0, 0x3}, {0x3, 0x0, 0x1e95}, {0xffff, 0x0, 0x6}, {0xc9, 0x0, 0x4}, {0x3, 0x0, 0x2}, {0x6, 0x0, 0x1f}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0xc0010141]}) 03:33:37 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)) [ 446.906904] binder: 10668:10676 ioctl c0306201 20000280 returned -22 [ 446.932257] binder: BINDER_SET_CONTEXT_MGR already set [ 446.942276] binder: 10668:10687 unknown command 16388 [ 446.948759] binder: 10668:10676 ioctl 40046207 0 returned -16 [ 446.960317] binder: 10668:10687 ioctl c0306201 20000280 returned -22 [ 447.001305] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00 \x00', 0x101}) 03:33:37 executing program 0: r0 = socket$inet6(0xa, 0x80005, 0x4000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e16ff0)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)={0x1, 0x1}) 03:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xffffff7f00000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:37 executing program 2: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400002) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) r1 = shmget(0x2, 0x3000, 0x60, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 03:33:37 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000000005, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @multicast1, r2}, 0xc) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r3}) 03:33:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x542, 0x0, 0x0, 0x6}, 0x10) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1008) fcntl$setstatus(r1, 0x4, 0x6101) ftruncate(r1, 0x3c7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x5) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'vlan0\x00'}) 03:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x600000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 447.154523] device lo entered promiscuous mode [ 447.156046] binder: BINDER_SET_CONTEXT_MGR already set [ 447.166814] binder: 10712:10718 ioctl 40046207 0 returned -16 [ 447.172862] device lo left promiscuous mode [ 447.174222] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zoltiplier. [ 447.222457] ntfs: (device loop2): parse_options(): Unrecognized mount option mft_zoltiplier. [ 447.245136] binder: BINDER_SET_CONTEXT_MGR already set [ 447.254307] binder: 10737:10740 ioctl 40046207 0 returned -16 [ 447.349129] device lo entered promiscuous mode 03:33:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x7400, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="e7733fdd37140100bc041672828a11ad772fdd842a58fabd81d47f5849c29c5bfea9", 0x22) 03:33:37 executing program 2: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f00000000c0)="92460000000000000000", 0xa) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x0, 0x7530}}, 0xfffffffffffffffd) 03:33:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x8dffffff, @remote}, 0x1c) 03:33:37 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="7f", 0x0, 0x8005, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='lo\x00', 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) getpgid(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd04, 0xc0, &(0x7f00000000c0), 0x6) 03:33:37 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0xffffffffffffffff, 0x81}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x8}, 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0xfffffdca, 0x0, &(0x7f0000008f37)}) dup(r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f630c40"], 0x1, 0x0, &(0x7f0000000380)="8c"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, &(0x7f00000000c0)}) [ 447.704781] binder: 10758:10761 Acquire 1 refcount change on invalid ref 0 ret -22 [ 447.712844] binder: 10758:10761 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 447.725496] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:38 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1300, 0xe805, 0x0, 0x0) 03:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f000600", 0x101}) 03:33:38 executing program 1: clone(0x200, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x3f) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) dup2(r4, r2) fcntl$setsig(r4, 0xa, 0x3a) tkill(r0, 0x16) 03:33:38 executing program 4: r0 = epoll_create(0x2a) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x90, 0x6, 0x2, 0x8, 0x2, 0x3e, 0x3, 0x1a2, 0x38, 0x33, 0x3f, 0x1, 0x20, 0x1, 0x9, 0x100000001, 0xbc0d}, [{0x7, 0x2, 0x0, 0x7, 0x3, 0x1800000, 0xa7, 0x9}], "51fad55665abd5aac93b7a03b45d4ad0fef3ff9d5ddb5149916a972104ec707bf25edd7c872fc78a30c2b33fc6bcc1a978e5590ca5c102de79a445e0e176a5d0bb795cb93504ee529dcbc4571865ef0ae921a63d2c60278806ce02eec6997f1980be47bb1df4b02d294dde3f37c97c3e5d8bcca23bb4c5e68e96ddffdf9d3efa0d03c981ffd76d3cf8deeb86ab5b0575b380eb614e94e384f4c540f5f949d0a4224ec4da01ab4ed0240f3ce5263f41822c74b4f3186626dabcff69ec4fa3b525bd6b5ba31359714b68a1fadc72f51acd4e573a02bcfa", [[]]}, 0x22e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2040, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)="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") socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x3, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 447.759669] binder: 10758:10770 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 447.797835] device lo left promiscuous mode 03:33:38 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4000, @remote}, 0x1c) [ 447.816560] binder: 10781:10784 unknown command 1088 [ 447.832226] binder: 10781:10784 ioctl c0306201 20000280 returned -22 03:33:38 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x111000) fchdir(r1) connect$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x5, 0x0, 0xe43, "9f94b6314aaa7bc79a38a1392180c71d3d45442b14fb69d37bffe4ff16a8c87bddd9f5aa6c13ce540c2a1cdf20d20a8fcbbdccd81330e8ca861193bdd6b5b4", 0xc}, 0x60) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000180)={0x2, 0x9, 0x8, 0x401, 0x4, 0x1000}) ioctl$FICLONE(r1, 0x40049409, r2) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setns(r3, 0x24000000) [ 447.864483] binder: BINDER_SET_CONTEXT_MGR already set [ 447.874057] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 447.888891] binder: 10781:10796 unknown command 1088 [ 447.895071] tls_set_device_offload_rx: netdev lo with no TLS offload [ 447.901766] binder: 10781:10784 ioctl 40046207 0 returned -16 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6000000000000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 447.919798] binder: 10781:10796 ioctl c0306201 20000280 returned -22 03:33:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x17, 0x2, 0xffffffffffffffff, 0x3}, 0x2c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x604e00, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x101000, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='cpuacct.usage_percpu\x00', 0xffffffffffffff9c}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)="9068716463630300000073086975ecdd14d1a8eda70f166a7dc86167655f64657201b5e857", 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='teql0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x88}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffffffffffc7e, &(0x7f00001a7f05)=""/251, 0x41f00, 0xfffffffffffffffd, [], 0x0, 0x40000000000}, 0x48) 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x4c00, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x88, @tick, 0x0, {0x2}}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) r2 = dup2(r0, r0) write$P9_RSYMLINK(r2, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x0, 0x0, 0x3}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0105303, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000340)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000000c0)={0x0, 0x1f, 0x4, 0x3, 0x20, 0xdf2}) fstat(r0, &(0x7f00000001c0)) [ 448.026117] binder: BINDER_SET_CONTEXT_MGR already set [ 448.041712] binder: 10812:10813 ioctl 40046207 0 returned -16 03:33:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r1 = socket(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) socket(0xb, 0x2, 0x4) [ 448.108185] device lo entered promiscuous mode [ 448.137800] binder: BINDER_SET_CONTEXT_MGR already set [ 448.144279] binder: 10822:10825 ioctl 40046207 0 returned -16 03:33:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/245) 03:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00|\x00', 0x101}) 03:33:38 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1000004e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 448.268185] device lo left promiscuous mode [ 448.340176] tls_set_device_offload_rx: netdev lo with no TLS offload [ 448.350331] device lo entered promiscuous mode 03:33:38 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x600, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x17a}, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/2, &(0x7f0000000100)=0x2) 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x6c000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:38 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x34}}, 0xb9, 0x4, 0x4, 0xfffffffffffffffe, 0x84}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x4, 0x8}, &(0x7f00000003c0)=0xfffffffffffffe7d) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000340)=0x707) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000380)=0xffffff7fffffffef) io_setup(0x2, &(0x7f0000000100)=0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x100000001, 0x7000, 0x2, 0x4, 0x1ff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80402, 0x0) io_submit(r3, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)}]) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6ddb, 0xffffffffffffffe0, 0x10000}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x84) 03:33:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x35f, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2000000005) 03:33:38 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x355}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x41) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:38 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) [ 448.503403] binder: 10758:10855 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 448.510563] binder: 10758:10770 Acquire 1 refcount change on invalid ref 0 ret -22 [ 448.511234] binder: 10758:10857 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 448.558150] tls_set_device_offload_rx: netdev lo with no TLS offload [ 448.567957] binder: BINDER_SET_CONTEXT_MGR already set [ 448.609068] binder: 10866:10871 ioctl 40046207 0 returned -16 03:33:38 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x281400, @remote}, 0x1c) 03:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x004\x00', 0x101}) 03:33:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x93f2, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0xb554, @loopback, 0x3f}}, 0x101, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xa0000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@nfc, 0x80) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0), 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="ccf96200", 0x4, 0x11, &(0x7f0000000040)={0xa, 0x4e20, 0x7}, 0x1c) close(r0) 03:33:38 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001800)='/dev/dsp\x00', 0x40007fffb, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x357}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x20000000040002}, 0xffffffffffffff73) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001840)={r2, 0x80}, 0x8) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000001a80)=&(0x7f0000001a00)) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$inet6(0xa, 0x200000000008, 0x3fd) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r7, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/104, 0x68}], 0x3, 0x0) r8 = getpgid(0xffffffffffffffff) getpriority(0x3, r8) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)) getsockopt$inet6_int(r4, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r10) connect$nfc_llcp(r3, &(0x7f0000001b40)={0x27, 0x1, 0x0, 0x5, 0x88, 0x34, "2e6d279d062006508e73cfe8b490aae2c05b6d1d39abcb7833db9566ef78755ed8c34f5907709c3f205c343bc3ba21adce04b65e64e77d3e772cac471adc3b", 0x10000000039}, 0x135) r11 = socket(0x10, 0x2, 0x0) signalfd4(r1, &(0x7f0000001640)={0x1f}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000016c0)={0xfffffffffffffff7, 0x100, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x3, r2}, &(0x7f0000001700)=0x20) ptrace$pokeuser(0x6, r7, 0x34d1, 0x3) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='sysfs\x00', 0x110001, &(0x7f0000001940)="42e935580ee227017544ba337c5ccde77603aa4714d23c896d385b44f983581a50d2cca00e331b8f6a76dd56039045a8596fb4e5b4e8b26f69822e5b4961c114e5d40b598932e7c02be8e3868c9c42ad6ef432a819b8ec41d27f") setgroups(0x4000000000000001, &(0x7f00000017c0)=[r13, r13, r13, r13]) setresuid(r9, r12, r12) 03:33:38 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x10005, 0x2, 0x40, 0xb185}, 0xc) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/60, 0x3c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/igmp6\x00') 03:33:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x10000001d) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100090c0c00fcff0000040e05a5", 0x58}], 0x1) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4) 03:33:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x2000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:39 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x41c000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 448.748895] binder: BINDER_SET_CONTEXT_MGR already set [ 448.753937] tls_set_device_offload_rx: netdev lo with no TLS offload [ 448.761871] device lo left promiscuous mode [ 448.770907] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 448.782135] binder: 10890:10897 ioctl 40046207 0 returned -16 03:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x48, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:39 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x48100, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x101}}, 0x18) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0xfffffffffffffe68) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e22, 0x40, @mcast2, 0x4}, {0xa, 0x4e22, 0x10000, @local, 0x8}, 0x73e, [0x7, 0x80, 0x4, 0x4, 0x79b, 0x1f, 0x3f, 0x1ff]}, 0x5c) prctl$setfpexc(0xc, 0x80) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x2bb) 03:33:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0)=0x81, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f00000001c0), 0x1000000000000255) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x0, 0x0, 0x14], [{[{0x9100, 0x1f, 0x401, 0x1}], {0x8100, 0x7, 0x400, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xe0000000, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) getgroups(0x4, &(0x7f0000000000)=[0xee01, 0xee00, 0x0, 0xee00]) setfsgid(r4) 03:33:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x14280000000000, @remote}, 0x1c) [ 448.880967] binder: BINDER_SET_CONTEXT_MGR already set [ 448.888532] binder: 10925:10927 ioctl 40046207 0 returned -16 03:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xa000000, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 448.942161] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0xffffff7f, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYRES64=r0], 0x8}, 0x1}], 0x1, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) [ 448.983365] binder: BINDER_SET_CONTEXT_MGR already set [ 448.989226] binder: 10939:10941 ioctl 40046207 0 returned -16 [ 449.018385] device lo entered promiscuous mode 03:33:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4000000000000000, @remote}, 0x1c) 03:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000000600", 0x101}) 03:33:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x400, 0x4a0000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x9, 0x30}, &(0x7f0000000240)=0xc) r2 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r2, 0x81, &(0x7f0000000000)="025cc80700145f8f764070d94b8497d9161f7b77173be516914f57349b533fe8ba7c0e52f4900ff35a0200000000930a015ba45e0e17090e9b5808912a0c73cd7600a985f86fa2ce1bf5") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@pquota='pquota'}, {@lazytime='lazytime'}]}) 03:33:39 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) r1 = socket$inet(0x2b, 0x1, 0x0) iopl(0x3f) socket$inet(0x2, 0xa, 0x100000001) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2040, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100), 0xbd) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xd58, 0x100) sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xff, 0x501000) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfe, {0x12}, [@generic="2f4a2c97bc9d1faab9c893807fa8bd503c3eb1d22e0a41b35eef774c"]}, 0x30}}, 0x80) io_setup(0xc, &(0x7f0000000240)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="100000004ee793000000000000000000", 0x10}]) 03:33:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000013, 0x1b07e, r0, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 449.122616] binder: BINDER_SET_CONTEXT_MGR already set 03:33:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x100000000, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fchdir(r2) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000001c0)=0x4) [ 449.158717] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 449.180050] XFS (loop0): unknown mount option [lazytime]. [ 449.189372] binder: 10947:10953 ioctl 40046207 0 returned -16 [ 449.200923] device lo left promiscuous mode 03:33:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f00004ecffd), 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x1) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="bf53b0089276431a08b91cc84f4985cd26ec80cc89be3c09b69957f6eb5956068dea030407", 0x25}, {&(0x7f0000000040)="e6a472af513de2e1bba4cb4c1de9372f953a667c7ededcdb8f02528f239ce21a398aad5d11f4bf6411e1a873ebeef907811a21d688c17a1f0e6f5bd1f3f9cc816fa383c2833453a39e5e3eeb41d39ada48b5a3e9f0c7cacbaf7ba1df0689ac14a970e3de979d2d1c2775ee1e", 0x6c}, {&(0x7f00000000c0)="67c4f844b9b8221c7b9882e0641ec940571fe04a61fd7089df43518b133642f8b27300a8a4dae65b2bdee46b29a2dd2bd93192c31fdf4f6283ac7c6eaa9defef237055633f3dd7bb7a5b244fa53d1d112b57dfe0d8d8920b03c0bdcbaefc3881dbcf26c7659d72eae711abc0e44eccdb319d602fd6e43b182187d77edf7fb457cadb445cb239be94a27386688de4f80c46c978918dbc57ba620fbbd254ab00fb8e9e4d", 0xa3}], 0x3, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x32, 0x4, 0x70bd25, 0x25dfdbfd, {0x1d}, [@generic="3c1a9dbd75e1d411c5b74aa67ca351e62b5f0609d093001ad49dae190a460eae4b1505a7d9305e655e17511c01b2aa03089ebceec979ce45e788df7d9a990a586da48e63e16da5b99b39e9bb597bc5d2923392f82e37aa6ef76205ece1ce0a42e38968789a8aeba29e548d42f38bca8532555585f08b7ecaf4f0a857258f8670f27fb58742a89c42160fbebe43c64540272e3503c224199e5100d9241c433838ee71b9aaa4a41205f7a6d2a537"]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$netlink(0x10, 0x3, 0x1f) 03:33:39 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046303, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:39 executing program 1: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)=']lo-\\\x00'}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000001) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24048094) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r0, 0x20, 0x5, "11e13a9495f8b67e1612f4afc65772aa8aa221fe8eba93cb08070f0a01fe9b06f023677fd4bf75fcf74243eb2d0a0f2196c826e3ac1e69171fd060a0e2c14a57db334daeaafbe1fecb9a182d249880623d73afbb10b14f2a"}) fcntl$setlease(r0, 0x400, 0x3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000200)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x94d1, @empty, 0x401}}, 0x1ff, 0xb53c, 0x8, 0x101, 0x4}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r1, 0x100000001}, &(0x7f0000000400)=0x8) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000440)) connect$bt_rfcomm(r0, &(0x7f00000004c0)={0x1f, {0x6, 0xd37a, 0xfff, 0x3, 0x8, 0x40}, 0x800}, 0xa) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4be}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xce9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000007c0)=r3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x1008}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xc590, @remote, 0x400}, {0xa, 0x4e20, 0x0, @empty, 0x20}, r4, 0x10000}}, 0x48) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000900)=r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000940)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/ashmem\x00', 0x340, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000a00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0x50, &(0x7f0000000a40)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)=r5, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000b40)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000bc0)={0x10, 0x30, 0xfa00, {&(0x7f0000000b80), 0x4, {0xa, 0x4e23, 0x6, @loopback, 0x6}, r4}}, 0x38) ioprio_set$pid(0x1, r3, 0x5) 03:33:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe8030000, @remote}, 0x1c) 03:33:39 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'bpq0\x00'}}, 0x1e) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) pipe(&(0x7f0000000040)) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) [ 449.321448] binder: 10990:10996 unknown command 1074029315 [ 449.348842] binder: 10990:10996 ioctl c0306201 20000280 returned -22 03:33:39 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0xad8f, 0x1, 0xa67f, {0x77359400}, 0x10001, 0x8}) r2 = fcntl$dupfd(r0, 0x0, r0) bind$bt_hci(r2, &(0x7f0000000340), 0x1) [ 449.367920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 449.385840] binder: BINDER_SET_CONTEXT_MGR already set [ 449.391479] binder: 10990:11011 unknown command 1074029315 [ 449.395099] binder: 10990:10996 ioctl 40046207 0 returned -16 [ 449.409066] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000006980)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079bd177d27787eef0754ebb9853ce88231278781ce1a4f0d01c3906356b788c6e257b74dc291a66854ea6457c6062fd61e82fc8f872df68bf0970500c26c688655b3de1f8f95b05f24e486e35a5c877dff5725e639c10f6c272582e5b94cc258ca9a9d690ae5a65b662a8c5e52dce63706cfcb47ae8cdea97277ffbed80856456afb53802aa3713f28139d88cdfab66b7ca794cbc77ee21fcbb8f24832d1d46840918d469ed0afbc7117232786cb56baaa0d345bf2166cf698e72524e4ef1945de639f6f2d9667e111be88a16d72808afe104d3a1df4060893b2efc4a1c2c10f7a65df0c8da038e804b77359e1dda156d402d1aadc4d05426b6c5f2467625809dfdd47264ac80c589f72cb6540c84f433be47d177b4223655c85c8b5f88a7f9c31db7b41e3293c53423f13e9dc5ad19a157b8ba48d277bf9dd2cb1f648be7d63738bf0d2ec06bb8f43d7fb5dc9b2e8f64d598aaa58ee03ae69c2c90add5344f020246bc389c366c5cd11ed79001171dd3f1c27a7636138ddf9b38aa9f21fccd013e9e11cc2cde8e575e951c71f0afb6a957da154b9891d89943220b1741f00e1b33168524a1f8c1ea2279be008a638439d529141cdc0e0471f10b9f7de8d32672e996dbcac8431e6d692f66d5cbceb9d526798ad93780cd142b0db1d7cd0b718865d800257dc2b5421827d4c52666f8e554dff30ccad3e40337c7f162c6631491f5465649167ebfafb0c7ff36afc56ab5a68aedff6b8bdaadc1da0748d826d8a540191ccd9a874da6fb068aa83eb5e98874e8781eddb3d86ec81079b26992fbf71aab31ea34f399a70ea191c5e2cae4cec700cf581e2860c51f6df24459f3461b365d6b122d7dd0b03557c4e46c6d67618a7a63addd8d167895e75443088d75434f769ea3909ca8dc85e0a51b022f6eb521078684ab959d97c7aea14338891501e749c30ea69e8416d1a157a0efb9cff39d818a214598cb343250d552ccbff03dd3abc9c26741c4772ac6f0bd4c5c43936f9e01c498b2da35ed551ce75b2015599a5e8c25105b835e5df38a817333c33c01b2947813afbf60d13cbaf1e26cfaf20e3939e007c69b05756a306e18321db5654b0587afe5e84e2203164e38341340ff9d7dc765e9acf6964bf0ee70d0d6b9aa23caec1dfb1078c5e74096d44fbd8fe675a142226c3423e5fdae879c7f004c24255906ba991a407d00e817fb6358e29339656be8e3b257e1d5c20ec95e27046317c52f3463c3990cc0a74d9c563085193e98a641a2b14a79c47519f0223edd0c09bf712b503a7ba795453102e85697642e2656e06489cb078d8b3c61c7edfaaa81ff51fee1851043625f3ce52ecbd24a59ca1667b1f5ac4319e0d669ea83e1f05e21ffe5f5115fafd55612ba095d8221716a2e93270a38daf9d71d9711d97d33afaa14b6f8e4d670591adc81715ef65286e73670d589e1ea9f3d35657696d02b225615fe1c488c0114e819314ea4f74c4115dddabe53417d88e8d20ce21949ca7a66b54822fdc7f44813bde9f2694c91aa4938bed34d28a09aac670dcd35025fd9827c16066f6bebe76074faa110f5828a6e7f757a38db187c3797dd5618ff6d7138d0f7b3817431f91e9a35a1f3772d7fe56fb6820ace9f8768e60375eea56d815d765a2a11896ae386debcec1949883de3f464b4f7491d395b27fbe7a72d982386448f41299928f9c1d53fb7d3244815a41ccfcf91ba680856cb9a4c80464cadf7a7a37e3a8b83a75cf953ef3dd3588f01c29c8ed1973044e0583218be7e99b7f615c420bec1e77c3d0f96bc13c0c706be50a34b0fc687d809fa964174ec77ecb82ccf4c19cc42bfe209e555a47a8be4e4bd67b2837342f1c2346584d214954e05ae80b4e430968a7033f2224bb3a8469f8700db714bcb7ed996f1ad3e6aff36226cd87e341e655b9c9ed408cf334b99c99a32a11be4d61c5588b70856864098121e555db85ade2eba7fdbe0a7089cdb389eba94aa17c022d79f7b0c6bad9ae86bf36ad70ac0a5d01e4d25b105c52b1ed38fe28e4df787196b234dbd284d7ee144ae8d8f05744a0551569b54ca3a570d9f6f2831a91b7efaf89b3366bc464c1d34d87093589e7b1f45e311cac1a974e544394a64c8a45ff8c14d1b82cc39dd18003d12d6fa793c7575f34098b0229cc00ee67a4debb65f62b89ec784a6ce42b658ad42286b5338d704ff195213bf3632031fdec4e86ce633865bf4794794d8bde4cab289022348a9147c4db31703860f7ca8c58aedbf2a7d980745dbaf7f63525b567ff5a1e"], 0x6d0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000580), &(0x7f0000000240)=0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003880)=""/4096, 0x20004880}], 0x1}}], 0x1, 0x0, &(0x7f00000026c0)) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x20) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x5, 0x1, 0x7, 0x0, 0x34b4, 0x10d000, 0x3000, [], 0x1}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0xff, 0x7, 0x6, 0x0, 0x0, [{r0, 0x0, 0x7}, {r3, 0x0, 0x9}, {r0, 0x0, 0x2}, {r3, 0x0, 0x701914f3}, {r1, 0x0, 0x200}, {r1, 0x0, 0x40}]}) 03:33:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000340)=0x8) getsockname(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 03:33:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") unshare(0x40000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0d9b05b5707195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "aee9b11e5a3051c995a854d72e3ad399da247c7cce8ce256574c03fce341ea03a6f8919d2146b3ec13de10d5a08ba8407cdf1b7219d6621165b29e46e9bb2bba", "4aaf8dd1ece958077430fb3b0c1172a8dc1388fd72a09f88a734786873b8ee1016926658782646c011a9cd48b55133e8198017f815032de4140a07cf2ad1d78b", "96f0b0cb596b50cdd31cf748b8b8d9233940989007e8f48e592c5211e2e44661"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x7, 0x8, 0x6, 'queue0\x00', 0x80000000}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000240)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {}, {0x2, 0x0, @remote}, 0x204, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gretap0\x00'}) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x9, 0x204000) socketpair$inet6(0xa, 0x2, 0x648, &(0x7f0000000080)) set_robust_list(&(0x7f0000000600)={0x0, 0x7}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03302904b95c61a4c5d199d0165a900e0b2bbd7000fddbdf2503000000080005000400000008000500feffffff34000100080005000400000008000200320000000800080000080000080008000000010008000800000000000800080008000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) [ 449.428161] binder: 10990:11011 ioctl c0306201 20000280 returned -22 03:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000029000", 0x101}) 03:33:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x630c, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @remote}, 0x1c) [ 449.573491] device lo entered promiscuous mode [ 449.584742] IPVS: ftp: loaded support on port[0] = 21 [ 449.649314] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 449.652427] binder: 11045:11048 unknown command 4 [ 449.666057] device lo left promiscuous mode [ 449.668786] binder: 11045:11048 ioctl c0306201 20000280 returned -22 [ 449.682022] binder: BINDER_SET_CONTEXT_MGR already set [ 449.686016] binder: 11045:11053 unknown command 4 [ 449.687365] binder: 11045:11048 ioctl 40046207 0 returned -16 [ 449.702192] binder: 11045:11053 ioctl c0306201 20000280 returned -22 [ 449.775696] device lo entered promiscuous mode [ 449.797823] IPVS: ftp: loaded support on port[0] = 21 [ 449.834182] device lo entered promiscuous mode 03:33:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)=""/157, 0x9d}], 0x1, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{0x8001, 0x4}, &(0x7f00000002c0)=0x5, &(0x7f0000000300)=0x8, 0x4, 0x101, 0x7f, 0xfffffffffffffffb, 0x0, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x1}, &(0x7f0000000340)=0x4381, &(0x7f0000000380)=0x8, 0x7fff, 0x7, 0x7, 0x0, 0x1}}], 0xb0, 0x8000}, 0xc081) ioctl(r0, 0x8914, &(0x7f0000000000)="025cc83d6d3ddc5f207000000000000000000c2a9c01c52284585f2d275b2751a59b815c9606d3ee7a1f91b9e0f2d8651d74a4b8fec1e012aadd43619a9520f9") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, &(0x7f0000000180)={{0x4, 0x100000000000b}}) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 03:33:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000100)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4200, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) read(r0, &(0x7f0000481000)=""/128, 0x80) 03:33:40 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @loopback}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:40 executing program 2: r0 = socket$inet6(0xa, 0x80000000000804, 0x1abf) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/137) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000004", @ANYRES16=r3, @ANYBLOB="000125bd7000fedbdf250c00000008000500755c0000080006000600000020000200080004000010000014000100000000000000000000000000000000000800050008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 03:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40106308, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x004\x00', 0x101}) 03:33:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x300, @remote}, 0x1c) 03:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10b) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0xe45, 0x8}, 'port0\x00', 0xc, 0x20c00, 0x80, 0x4, 0x10000, 0x4, 0x4, 0x0, 0x1, 0x3f}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1c00000, 0x7}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22}}, 0x6, 0x3}, 0x90) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000440)={0x10201, 0x0, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005104000000000008000100197d0df391b49df45da5990433c3ef255e9ab42434a1c463448a7b9fcb4d3513afe2f265d5ded852bb90324be6cb09571072e1d35cac7ccaa5eba35e23b94b26bf1bde82beb4edaa69717e5a67627a678489dce6531181b80f465be720574c7ca5cac62f2a6ed897d5a200ea3a393f040eb0154d686cdb972c95f2d75c974ec6b54f4dda510f26ba4a3bc8d0a7403665e1c0000000000046d000000000000000000000000000", @ANYRES32=r3], 0x1c}}, 0x0) 03:33:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffff9c}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x8000) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1) capset(&(0x7f00000000c0)={0x1998032d, r2}, &(0x7f00009b3000)={0x0, 0x0, 0x2, 0x8, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1, 0x17}]}, &(0x7f0000000000)=0x10) write$P9_RFSYNC(r3, &(0x7f0000000200)={0x7, 0x33, 0x2}, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000620a50ff0000000000000000000000009500000000006f5b87000000000000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f0000d35000)=""/4096}, 0x48) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000100)={0x200000, 0x5, 0x0, 0x277, 0x66}) [ 450.241454] device lo left promiscuous mode [ 450.249434] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 450.266309] binder: 11070:11079 BC_INCREFS_DONE u4004630400000004 no match [ 450.279453] binder: BINDER_SET_CONTEXT_MGR already set 03:33:40 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x7f) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'ip6gre0\x00', 0x3}, 0x18) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0xfffffffffffffe51) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 03:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x400c630f, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 450.296613] binder: 11070:11079 ioctl 40046207 0 returned -16 03:33:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x200080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x1a8, 0x687}, 0x8) 03:33:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1100, @remote}, 0x1c) [ 450.387761] binder: 11101:11103 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 450.426770] binder: BINDER_SET_CONTEXT_MGR already set 03:33:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127b, &(0x7f0000000040)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x4, 0x5, 0x7ff, 0x7, 0x7, 0x8}) write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="62256b7039a6b80aa43cf18f8306c028", 0x10) 03:33:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40106309, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 450.432368] binder: 11101:11110 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 450.446403] binder: 11101:11103 ioctl 40046207 0 returned -16 [ 450.452981] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 450.469231] device lo entered promiscuous mode 03:33:40 executing program 6: r0 = socket$inet(0x2, 0x4, 0x8) ioctl$void(r0, 0xc0045c7f) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth1_to_bond\x00', 0x10001}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r1, &(0x7f0000000080), 0x4000000000000f4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) [ 450.495203] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 450.509148] device lo left promiscuous mode [ 450.510698] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 450.549708] binder: 11122:11128 BC_ACQUIRE_DONE u4004630400000004 no match [ 450.564216] binder: BINDER_SET_CONTEXT_MGR already set [ 450.567776] binder: 11122:11132 BC_ACQUIRE_DONE u4004630400000004 no match [ 450.591479] binder: 11122:11128 ioctl 40046207 0 returned -16 [ 450.637826] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:40 executing program 0: syz_emit_ethernet(0x80, &(0x7f0000000040)={@link_local={0x7675489f}, @empty, [], {@generic={0x16, "d5b404b46e996370f0ed4ee1ac81c2f8dd4a619e95d48aa5f939dc41f38dc21e700a6671c11f461e0196b7a8cd07329c185921c7f08010d1c45f0e93465804d938e4c19ef773b45d8af4c64a5dc712debe9aceb1cfc06a115f470505ee1af872d187a89cba70e383544b33fa11782d350f92"}}}, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc}) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x200000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x0, 0x9}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000140)={0x2, 0x8}) 03:33:41 executing program 1: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 03:33:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) read(r1, &(0x7f0000000140)=""/165, 0xfffffe2f) 03:33:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1f4, @remote}, 0x1c) 03:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40406301, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00001600", 0x101}) 03:33:41 executing program 4: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0xffffc, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x88500) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) 03:33:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) 03:33:41 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) ioctl$int_out(r0, 0x81204101, &(0x7f0000000040)) [ 451.082437] device lo entered promiscuous mode [ 451.086603] binder: 11154:11162 got reply transaction with no transaction stack [ 451.094591] binder: 11154:11162 transaction failed 29201/-71, size 0-0 line 2761 [ 451.104290] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.108375] device lo left promiscuous mode 03:33:41 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clone(0x4f6100500, &(0x7f00000013c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x20, 0x4, 0x2}) 03:33:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', r1}, 0x10) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x42000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x21, @time={r3, r4+30000000}, 0x40, {0x81, 0x8}, 0x2, 0x3, 0xbb04}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) shutdown(r1, 0x0) [ 451.141860] binder: BINDER_SET_CONTEXT_MGR already set [ 451.147950] binder: 11154:11171 got reply transaction with no transaction stack [ 451.155516] binder: 11154:11171 transaction failed 29201/-71, size 0-0 line 2761 [ 451.163447] binder: 11154:11162 ioctl 40046207 0 returned -16 [ 451.170595] binder: undelivered TRANSACTION_ERROR: 29201 03:33:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xfffffffffffffffa, 0x8, 0xfffffffffffffffc, 0xffffffffffff8001, 0x0, 0xffffffffffffffff, 0x30c}, 0xfffffffffffffeb2) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110004c000000000000000000800000950000000000000011edb80024973fde78755b65bcf0cad992c2762edd1792cac3586d7d950045475902d99fe5cd05c82781d4d2b949f55cfdc5c385c950cf26b7aee42e46970ffec97f783b2c2b489a464a9873ef136057724acb3ef182acbaff000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xc00, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180)) 03:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046305, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 451.188185] binder: undelivered TRANSACTION_ERROR: 29201 03:33:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x5555, @remote}, 0x1c) [ 451.240133] IPVS: ftp: loaded support on port[0] = 21 03:33:41 executing program 0: msgrcv(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x97, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='w'], 0x1, 0x0) [ 451.270775] binder: 11184:11190 Acquire 1 refcount change on invalid ref 4 ret -22 [ 451.283273] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.288777] binder: BINDER_SET_CONTEXT_MGR already set [ 451.302927] binder: 11184:11194 Acquire 1 refcount change on invalid ref 4 ret -22 [ 451.330423] binder: 11184:11190 ioctl 40046207 0 returned -16 [ 451.337966] binder: 11184:11194 IncRefs 0 refcount change on invalid ref 0 ret -22 03:33:41 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@dev, @loopback}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000000)=0x78) 03:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046363, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe000000, @remote}, 0x1c) [ 451.421903] device lo entered promiscuous mode 03:33:41 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @rand_addr=0x7fffffff}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="cb2f1dd0cbdef1ef1c9c2735147165f9ff02e92f81f421db34bc33605733a0ba1ad7fb8750ce27b5c65bd86ed1c4c220b571339e984095f2d3cdf0523a8b768ee5afff89e3115e6290377c861f08269e52b7d8e74c4b274c8bac599bc09d8f7621b170aaa04a5f6e580cf8cf395b13901c41f794d3fc9a4ff3d4285a08c11f2f995855dbd9810b7a20e9fddc224678add8a81ceb51bc8423a540e9da42691ad7fe63ed7c7eff7d6b0f375029ae03db17c0083a977a744b2ddbc14318c371418f70da76445bd955c2cad7c3729d3857b3578bdf0920a779c1ccdac43b38fca733f64a33461af6d9", 0xe7}, {&(0x7f0000000200)="61b5c0f1b920dd8388f4c51827e9e81ae20c61325466eab2c6f04cf6f364908c6b120830a9fe06325941f22603107be519dc1acffd3ab5a493ad826644bd497c4158f509186fefe05e0537b98b1172df7cf4d31f38353122818d827b2482f6d04bff518748ba148de684558d1e47cb56eaa5ebe1af9aac244e3928fb25c54997675f94258d61aaee216ca09a3052c91ebcae065871bf83a6ec65506c5f5a632e3400539cee0e53f020cc0752bbaf2bbd7ab142986cf9c99fa1fc21b4", 0xbc}], 0x2, &(0x7f0000000400), 0x0, 0x10}, 0x40000) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10000010}) write$binfmt_elf32(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 03:33:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = memfd_create(&(0x7f0000000000)='^*eth1\x00', 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42020020}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x88, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc6}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffff7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) 03:33:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\b\x00', 0x101}) [ 451.491061] binder: 11206:11208 unknown command 1074029411 [ 451.516984] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.533077] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffe, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) accept4$inet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) [ 451.540103] binder: 11206:11208 ioctl c0306201 20000280 returned -22 [ 451.540242] device lo left promiscuous mode [ 451.551935] binder: 11206:11214 unknown command 1074029411 [ 451.558556] binder: 11206:11214 ioctl c0306201 20000280 returned -22 03:33:41 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) socketpair(0x11, 0x5, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000019c0)=0x400, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x400000) sendmmsg$nfc_llcp(r2, &(0x7f0000003180)=[{&(0x7f0000000040)={0x27, 0x1, 0x1, 0x6, 0x80000001, 0x6, "942554b84bbb72590719e4d4e8ecb3c6b88b1dedc127e9bd3c80e43740d7ba917df272d71460aca360ecbe19bea6738e6f3e9f3d6b096c90ebe3ddd71a8e5a", 0x27}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000400)="46925be70fc03fcc1a95879b44610770100ce2e13bd8351e30ebe36f2ffdb7f57a86d0086972d413a86f1a379dc982fd944f83ec83808c98e9c430d9990f8ad2b5b2aeec20dc8f15eb79e9affc939c0f5604b83fcc5a72d2c486a1dce31986ce2e470d5b2aa483ee8d7b7c0e568c7dd6a91802e4d2754c3c3861de25bb266bb0d6a9f70bbc15a1f74fbacc198e31ae438fa9ff0ecdf784973a6a61e8", 0x9c}, {&(0x7f00000004c0)="e1b2d1d445abbe44242cab4384126abbc91c4fbdf756082a9ce2b2b081618ebc4ad162f3b14cbd1924cc896389ef919c1d9d5c658d9875808877744131c1ff662e9f899a441089ab6f4db26af2ebb24135e1a69859f122ffe3d2e8398b9cb9e510ec48f0ee894d8eae8a4272b10db59966f7430f8d1c832e70a45aebd10b82574630cb2e529bb8f18f3a32db4b482155ec96a8e202c54eccb478b22e657a32f9bc1565347ef13fc1c34fb4b3b55c1443bf30a67f1411d21a7d48da776e477ca64ec57e41540a292c7f181599fff98bdc26346e47e634df904ed7e3fe", 0xdc}, {&(0x7f00000000c0)="6f599be24d28d0d495c5e1af6b23c079d1fe8021ba4e60c198642385cc3e9212869408dd46661b88b0ca440d27bd57d546e114bd81d27d1bcce9757fd1c430e3baf2b341099a69b4b42a53acbd8369fdb99518442b6c6ba0447bedc1115f92d393c421e17e29143a31a44c6f9ac8ed312ba2", 0x72}, {&(0x7f0000000180)}, {&(0x7f0000000640)="fee1f0d69cf8c1aaa6c245149e09ca6b50c6299b825efaef78f94041d33cba4956762d3c22d4defabd6d7f0ea080db17f779cf49e6fbc247acf9f54094c615036f2a554a6e81ad0af0abf4c4b6d855c2a0a838dd3bf318f09a6fe6c2e59ff23d4f0c4c4239ea19ce126c2544df06c2016623d212e697dd6113b2a884165fd160238fe35f4ab003f8092ff742d1a1bb3f4f50a6b3a4f647fe36053bf1562f32d1155455225dca749bfc5a885cd136d3683a", 0xb1}, {&(0x7f0000000700)="27790efeb6ed8fa623a45fe2ffa6e7e2239c0894c89a3beeccaf42048f2da7c04fd702fb4dd3867037c85c590c7f3b2901678c0e9ca924242445efee237827b5e5723d7cdd7820044108b18a7d37e132b53b86dafbb0e00d0c5514ee815cbc251503483c45bd117e0e31edc6c1c258f1c57d340e7b5107b58b12362f6c96148f5208ac3768e94f0a9cacfde569b06cf957c15b3cf309ab5f23e01d6159", 0x9d}], 0x6, 0x0, 0x0, 0x400c804}, {&(0x7f00000007c0)={0x27, 0x1, 0x1, 0x0, 0x10000, 0x4, "154f1dea5243b64083af6d950aefb4e28e24fcdc81729a7d8c4f402a85e3d97a83bd049e1c5b2c5724ac7868fff807bc64b0c354151871127d29f7119d488c", 0x1f}, 0x60, &(0x7f0000001a40)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000001840)="8f05e97062e84fd05a09bb0bfd5b9b4c79b53c496128c24025e5283c7b5a700f0a97222bfbbafff4f75166af237bda3a9c5e29cfae4875d9d6c85f762336636a9d89c678e7525a524dd38c2fd97051ab52e124a0defd4b68ad022301d719f0f6b47098c38fdbb6dfa0ba2031408d04cb5c6a2df7a4611fc14e0c747e4f2c3dc11649e36fdbd6b5bc548bfa0313ee99bb2eb0027e1b06", 0x96}, {&(0x7f00000005c0)="9180e6a12d617ff7d9a48ec6e4b77406e40610ddbdce3247a1b33a", 0x1b}, {&(0x7f0000001900)="74e707f632c19d6cbc0b3c43166d8d7c879144dd7f7e9f4bbf06eb5e4d1aa756457ed272e0d595f1b54bdb21d99cb0ec66f570848059f0c9dfa58f4840e713c37bd3d88a881b8b371029d200e17906bdb6878e6572e9af7e46bcaf76a70da5d2575acf238d33626e8af55cfa4bcba7052027828d6a4b810684e4d278882eed1a0d432cc72154ea5d90f277869990b30ed6aa306311c2fa7943850c743cd29a58", 0xa0}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="7d43befab9e22a64162c2e9cd41f3eee285962bc57dc", 0x16}], 0x7, 0x0, 0x0, 0x20000800}, {&(0x7f0000002b00)={0x27, 0x0, 0x0, 0x2, 0x7, 0x0, "7cfdfdddfeb4793946149e11d6d5b5dead919de9d04af8a258ff00aa803fe7529b9529ea44c13c8aa71c9190d8f2e8f5679c66a930212c1a2fd830308bf917", 0x23}, 0x60, &(0x7f0000003000)=[{&(0x7f0000002b80)="b645ff8c87812e60c2ca04260dd5c79dbc334fb71a7a171549d732401b70bc8f69261de9779a67b27430346cd958e898016349f7b0be2d7a7dab517eeb0ad73e771177343540700eddf3d97fbaebda92aa6b50f2cb9ef5bd7fd9896b7965818067ab42575f2c00035d2dd1a5", 0x6c}, {&(0x7f0000002c00)="46bd0c2a73707ffbb2f2578696989427569fe184e3d915115eac3483a8c54705d188411a95055bdfa1608e575e1545231765d5bd2d67e7436d89034a3c2aa05b31b49f742e39eddf76563fa7f26363ce251902a9", 0x54}, {&(0x7f0000002c80)="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", 0xff}, {&(0x7f0000002d80)="866f2964165222c675902092452fb37338129c4dda3c34667f8f8470a7f08de73ec332eb44bb7327205428152ef646c1515f7b9b5baeaaee6673a42c5b6f16f0d5e382dacb54cfb7121802f1bdbb24878c5f4b389f2b9d6018d6dde9567b949968c922964c134bc20f8dbc134c5e9a9a2c5432c83ec287c3cc3e122a252a4059f3c83a52840a445692e44ab590b686f1268dcb29608173db30d640bd89c39fe3c1e31ee269487e81b9397ca3d417d1a52bbb857ddb26ea69ac8828996630c96c", 0xc0}, {&(0x7f0000002e40)="8844fb45da03182370353e1304049edcf263028df92fd5458917955d76d4c0cbfdf7580b9863c367e3a048bddb90f6642a22ef1bf7472430d644aeb0002ce073cf8875b690bd387fbc4685a0e6a17379c7af", 0x52}, {&(0x7f0000002ec0)="e64a1d1572a4761f44c5d1e54620f5a084393808d09f06ad4c6d889e518a4a5a00973e8629e54396de8a2fda62c5d7864f061f1a13195a955df5662b232acd2eb89ddc2c1aac99bcb7648a80449b71ef2ee9268ec4ec4cd9a32b9cb739bdcb840b45886865d6adc252f1858a7a376962237e6ea59a31bfca79937c5109021c767a7ee5400ca723dcc6e83f812f424d8652341b0856e59c447ed7686e5fe7348a000c3d22049b571ba890ae09b686c9", 0xaf}, {&(0x7f0000002f80)="0cea46d560f1cbbcf440b0a6725c37a8e61c9e282ea4c54ecc3059d3f7a098e963b84cd0c02ef7f1f92fd8301f6904fd332333eb435673d280cc9c0e10f0e80bf10697791c968050a140f3", 0x4b}], 0x7, &(0x7f0000003080)={0xe0, 0x11f, 0x3, "1147162b29d5bd1faded5b23339ae5096f00e5d664d3fd6d8958726c009baef8adf319d20401092bfdb005d7f3838643754efc8a7e7353417811b63b2d43800056e3658f903a7ceff52d2efdbe5fdb4d30ef7626ce1ed8a656ae78abfe6bdcdac1e1eecea27d793fab2c9ab17e94cdf484a4500026d5e614508af213d2f5a1d5ba4f76fe2cd456ec2e8d96e832c962476453478bbacf6eeae66a0bf8f1ad6031dde7a08a05abfa804d0f9af93650f9f1b5d4e5e1d1f54851d7174afc70fb8b3225afbc7b032a7ca18d3bcb"}, 0xe0, 0x4}], 0x3, 0x8000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600300, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0xa00000, 0x2) 03:33:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40406300, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 451.667470] binder: 11247:11250 got transaction to invalid handle [ 451.673826] binder: 11247:11250 transaction failed 29201/-22, size 0-0 line 2854 [ 451.744811] binder: BINDER_SET_CONTEXT_MGR already set [ 451.746593] binder: 11247:11257 got transaction to invalid handle [ 451.756437] binder: 11247:11257 transaction failed 29201/-22, size 0-0 line 2854 [ 451.761846] tls_set_device_offload_rx: netdev lo with no TLS offload [ 451.764829] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.772824] binder: 11247:11250 ioctl 40046207 0 returned -16 [ 451.808861] device lo entered promiscuous mode [ 451.814368] binder: undelivered TRANSACTION_ERROR: 29201 [ 451.825744] device lo left promiscuous mode [ 451.835406] IPVS: ftp: loaded support on port[0] = 21 03:33:42 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)="6367726f75702e70726f637300ed0c7a97ea72a806be95ba4e2ad2493eb3be6d2046e0556f212058c2cbef994fd497a9cbd2681edeb2b7e7628d22a6ff9b13cb294ddc8cd6d6a65cc03ec25c4834e7a3c8ac0dfdbf16241c5c0dbeecf78356cb3bc37fdcf691184ffbe408fe9db9108de8de35181f55455c867ad8cd480000000000000000c4e86e0886bc5f7cc49f0e888780fe1cfe7a80bc738861c887aee8218fcd914977d5011989d7804e27bd9a27b3fe819a58d2b56a108d644a970ae8c2210c2779d460f805aba43db961089bbd451e8289a4779b98be879a", 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") poll(&(0x7f0000000000)=[{r2, 0x400}, {r1, 0x102}, {r3, 0x10}, {r2, 0x8104}, {0xffffffffffffffff, 0x1040}], 0x5, 0x7) 03:33:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x40, &(0x7f0000000140)="de6c2c9edf7f6cbb6a3929") ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xff, 0x200000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x26, 0x7, 0x1, 0x3, 0x8, 0x80, 0x2, 0x60, 0xffffffffffffffff}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40084503, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) 03:33:42 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xffffff8d, @remote}, 0x1c) 03:33:42 executing program 2: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000280)) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="294a5106ef8fe98e54102f146a824aff8dbd4d55538729a75f850a9a94778c176a9fae62dda784fac8828adc88d018ba957fac6260a9c9858a56cea95304fa758ae0df9f034c56062a49917fc7185fcca2e7c068ea0bef39ff3700c101c52471b67ea76d9690fb04584acbf7a303376962df859ddd5344faf37d4498efb797fc4e2d5d90e4ffda667e3b5ec1d0cf37b629da87216248", 0x96}, {&(0x7f0000000100)="0550e455f45fcf71be8703b7b7209f9c9673cbdeb8ee72593862308544abb64f337f0d63677d1fba5d46a999af0e7ebb1d1d01fa06cbc7b7c8c6487c81e9a9bd6ec1e51924f72b7fca1b9174f4d98afe9001522e301f863bdf127cf302f0a9af19b01d40623900d14bbf0a4c807789486ddb0a9d4fde1219d955df801d690697c33d69c93f0c51152d6845aef23e15283a4c77d82bb688057150294bd62c42f4a21c7c329a0a60d8d7422106f87e826055b26835fc88027b02de4f0bb23fa6c850835a9f20df7dbe32ef824253392537c2a08163eaeb77487bdb23e7678eaffa87b7a0", 0xe3}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="290000001800190000003fffffffda0602000000fde800010758bc399adc69abf22d020005495ae6d7", 0x29}], 0x1) 03:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x4008630a, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="e0ffff000000"]) 03:33:42 executing program 6: r0 = socket$inet(0x2b, 0x805, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000000)={@rand_addr=0x3033300, @empty, @dev={0xac, 0x14, 0x14, 0x12}}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x141000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000380)={@remote, 0x2d, r2}) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f008e00", 0x101}) 03:33:42 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x80100) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @rand_addr=0x4, @loopback}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 452.230900] device lo entered promiscuous mode [ 452.236979] binder: BC_ATTEMPT_ACQUIRE not supported [ 452.239555] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 452.253536] device lo left promiscuous mode [ 452.259517] binder: 11270:11280 ioctl c0306201 20000280 returned -22 03:33:42 executing program 0: r0 = getpid() clone(0x200, &(0x7f0000000000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0xfffffffc) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, r0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x4, r1, &(0x7f0000000100)={0xffffffffffffffff, r1}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) open$dir(&(0x7f0000000380)='./file0\x00', 0x27e, 0x0) 03:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40086303, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 452.287949] binder: BINDER_SET_CONTEXT_MGR already set [ 452.297678] binder: BC_ATTEMPT_ACQUIRE not supported [ 452.302270] binder: 11270:11280 ioctl 40046207 0 returned -16 [ 452.318691] binder: 11270:11291 ioctl c0306201 20000280 returned -22 03:33:42 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x103080, @remote}, 0x1c) [ 452.437394] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 452.448162] binder: 11301:11308 BC_FREE_BUFFER u4004630400000004 no match [ 452.455214] binder: 11301:11308 unknown command 0 03:33:42 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001580)}, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0xc00) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r4, 0x0, 0x0, 0x10001) fallocate(r4, 0x3, 0x5e00, 0x2cbd) sendfile(r0, r3, &(0x7f0000002000), 0xffffffff000) signalfd(r2, &(0x7f0000000000)={0x8}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 452.499514] binder: 11301:11308 ioctl c0306201 20000280 returned -22 03:33:42 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xa00000000000000, @remote}, 0x1c) 03:33:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046312, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="666d61736b3d343030303030303030303030523030303030303030306cfe40d4b3db203300"]) [ 452.605803] device lo entered promiscuous mode 03:33:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d000b0000000000000000000a0000004db3f5825c052312f8227930710e8499270ada874637cd607b732a0825e181e56c2fa3ba9f846e3324a204ae7338a63a00cda18a09a0c816068886ed12a986ecebec9a588e828895b0a60d2c0925", @ANYRES32=0x0, @ANYBLOB="000000000800010000000000"], 0x24}}, 0x0) getpeername(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x10000}, 0x8) [ 452.647257] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 452.678499] FAT-fs (loop4): Unrecognized mount option "fmask=400000000000R000000000lþ@Ô³Û 3" or missing value [ 452.688119] binder: 11322:11325 unknown command 1074029330 03:33:42 executing program 1: syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)={[{@inline_dentry='inline_dentry'}, {@adaptive_mode='mode=adaptive'}, {@six_active_logs='active_logs=6'}, {@user_xattr='user_xattr'}, {@noquota='noquota'}]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x9, &(0x7f0000000700)=[{&(0x7f0000000280)="4fe96221c6252ddd21f4370c5e6388e7c462f41f488ef92ae8b561f4b0d12aad58a9ade82b044166bd674a6d2baca8a6fa2c535f77bdfbed211146fe79ca2eb2bf933376f0d57cf15c58f529fb2c03c2defb5090e240586056189dd662abdb7593f13317fb7e14c014d5253e2d763829b8bb4c8a325c0e5f5d085f8d452288b9be674db0ecdc159ff23a17f32fe4c267ce7d7e", 0x93, 0xfff}, {&(0x7f0000000340)="9922fddc57f5d67a143ee4d6bc0f1966d3878eceeefe91f57e603a43d7df73e21460e176eee419c9f8866766bc21b124b770f1f01070054e3c73dad68749ec7e2ef9e7d3894992203ae26882f773625bfaf8a8276d1218389cf92c3e6c938b8b89c41eec8e59ec65e943c692875cf38408c7d77c7e4fa6dd14e70e89c9d0c46ba45bdc673d82a708eac9cbb2a070e945d74263ec08b4c19cc3c0fe0e8a4c1f1fad7e7d", 0xa3}, {&(0x7f0000000400)="872793bb8de1918ffb58ca336c1c0f900ecc77613beef8caf8404f03ac80cccb055cefa42ea935bd3b286bf2ac850a7966580c11561caa01fec847cd35151bb528bd324e186e5379e1729dca5d04ddb9c0d5ab1bc8d33dfd9f907234fafd63c053262d7e2f7adbb6313f1f5731e86c32c521536b44111581fee0b2c9f6690c8290fa2ba264cfc2f839d171f1e2cd0c304b7a921cbcb983556072a04378b344aafbc931f9a925fc77978c9ad4ed95b86395b86a29127f586168ab8ce9baf9c1a3690d751305c1931d", 0xc8, 0x5}, {&(0x7f0000000080)="eb3782b6be8767933212240f430ba725677136da67c0fd6033c0", 0x1a, 0x1}, {&(0x7f0000000500)="5478d9e0ff36da303ad48c358c8c798c3ca9e5b6a9e85739e80e798fc7a63b86e06b920a6727cce25d5f2752eb1a1dce3ed5b63ca9985673fa562e81281365a19f145aff87d8598f9de58e65d5c39b596d367ea7bfca78a18ad6ada76f42fa8974927223ab54605f6ccc4410245c5d917bcd8f3cc6", 0x75, 0x3feb72c3}, {&(0x7f00000000c0)="4a8d4600ac868497cc513d620db5b24965ff68b0d9e268406a5042f836096b8542f43fde9e5989aac35d071ac28b3059", 0x30, 0x6}, {&(0x7f0000000580)="8557d3adb23923da6fc1f7f15425b7ef8cea4cbf1e7473e38fab", 0x1a, 0x5}, {&(0x7f00000005c0)="79427853dff0379a8b7bb07722deace45486e8d6f4ff0fcfc9476f13729ee972df388c4ba303141fb411f662db4b0d62b1ad7c8e2da7b76babfd87b037e05bd77298362a327cb4a29ea4b22835d524233c74e2c3ad2d661d2092a07024322491c41a51ea2537a4d13bc1fae326e43f057a5dc217", 0x74}, {&(0x7f0000000640)="6d8c69e00ca0f8c19e66df487b6d8984371d2e348c320bea984f08530d37ed02d652fcb906df3835f1ee68250f4491796c228999069e02f66c89f67878a6ffd1fc1693a3f050b42dcc898c66cdff613854de66c0bdea3984eb6b4e0a40033f81a0f71dfc11ed72f7fd3c3f7ab78ce83437e93fceb87ce25894d04c43ac58d46c25b8447a53361e06c503f15d93cb157717996f189bd7b98b57fa51c0a30090f48832071c094f492449e00fc67101b29754a05eec31052e99bbe1ab", 0xbb, 0x5}], 0x380000, 0x0) 03:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000000fc00", 0x101}) 03:33:42 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000500)={0x800, 0x7, 0x1, 0x2, 0x1000000000000}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f0000000580)=0x4) sendto$inet(r0, &(0x7f0000000680)="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", 0x1000, 0x4000000, &(0x7f0000001680)={0x2, 0x4e22}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3ff, 0x20, 0xfffffffffffffffb, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x18) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x1, 0xfffffffffffffffe, 0x7, r2}, &(0x7f0000000180)=0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000640)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x0, &(0x7f0000000380)={0x3, 0x3, 0x8377, 0x682, r3}) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 452.694928] binder: 11322:11325 ioctl c0306201 20000280 returned -22 [ 452.743443] device lo left promiscuous mode 03:33:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x6, 0x3f, 0xb1, 0xa2df, 0x1, 0xfffffffffffffff9}}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) socketpair$inet6(0xa, 0x804, 0x40, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffd5f, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000300000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="f90000001400010000000000000000000000ffffac141400144b9aa8952f4be93a53d94b4ac38a5edc8b960e52c912db8fd4995a18f71b1f58e5305433e31e802e2a629f5a7a77c72f3c67b80ef325d779f59234573b154688d82c21a1630d0ec61f9787dde50f2f49cc1100000000000000"], 0x30}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x630b, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 452.771784] f2fs_msg: 10 callbacks suppressed [ 452.771798] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.783515] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 03:33:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff00000000, @remote}, 0x1c) [ 452.835559] tls_set_device_offload_rx: netdev lo with no TLS offload [ 452.873306] binder: 11364:11368 ERROR: BC_REGISTER_LOOPER called without request [ 452.880980] binder: 11364:11368 unknown command 4 [ 452.887799] attempt to access beyond end of device [ 452.892829] loop1: rw=12288, want=8200, limit=20 [ 452.902490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 452.916374] attempt to access beyond end of device [ 452.921391] loop1: rw=12288, want=12296, limit=20 [ 452.930015] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 03:33:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x900000000000000, @remote}, 0x1c) [ 452.936577] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.938652] binder: 11364:11368 ioctl c0306201 20000280 returned -22 [ 452.943720] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 452.959337] attempt to access beyond end of device [ 452.964347] loop1: rw=12288, want=8200, limit=20 [ 452.969559] attempt to access beyond end of device [ 452.974592] loop1: rw=12288, want=12296, limit=20 [ 452.979852] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 453.022650] binder: BINDER_SET_CONTEXT_MGR already set [ 453.029729] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 453.033385] binder: 11364:11382 ERROR: BC_REGISTER_LOOPER called without request [ 453.036819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 453.044355] binder: 11364:11382 unknown command 4 [ 453.069740] binder: 11364:11368 ioctl 40046207 0 returned -16 [ 453.076678] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 453.101320] binder: 11364:11382 ioctl c0306201 20000280 returned -22 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046307, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 453.136738] attempt to access beyond end of device [ 453.141759] loop1: rw=12288, want=8200, limit=20 [ 453.169715] attempt to access beyond end of device [ 453.174756] loop1: rw=12288, want=12296, limit=20 [ 453.188590] device lo entered promiscuous mode 03:33:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000017d400300000000006506000001ed00001c040000000000006f640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = memfd_create(&(0x7f00000012c0)='GPL\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000001300)=""/148, &(0x7f00000013c0)=0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0xe, 0x1000, &(0x7f0000000140)="2a385aef86f0cede9e81b7149109", &(0x7f0000000200)=""/4096}, 0x28) 03:33:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0xffffffffffffffd4, 0xfffffffffffffff9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000000, 0x4015, r1, 0x0) mmap(&(0x7f00001c0000/0x1000)=nil, 0x1005, 0x0, 0x11, r1, 0x0) 03:33:43 executing program 6: r0 = socket$inet(0x2b, 0x400000000003, 0xf1) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x4}, @in={0x2, 0x4e21, @remote}], 0x3c) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9d94, 0x200) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r3, 0x52b, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"000ad6161880daa1c1ae9b8e65b9c6cb"}, 0x81, 0xad2e, 0xffffffff80000000}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x8}}}, 0x118) [ 453.227184] binder: 11387:11390 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 453.235213] device lo left promiscuous mode [ 453.238818] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 03:33:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) [ 453.290902] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 453.303010] binder: BINDER_SET_CONTEXT_MGR already set [ 453.310095] binder: 11387:11400 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 453.328011] binder: 11387:11390 ioctl 40046207 0 returned -16 [ 453.342799] attempt to access beyond end of device [ 453.347804] loop1: rw=12288, want=8200, limit=20 [ 453.362214] binder: 11387:11400 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 453.386192] attempt to access beyond end of device 03:33:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) r2 = dup3(r0, r0, 0x80000) connect$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0xf538, 0x0, 0x1000, 0x7, 0x2}, 0x8}, 0xa) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) quotactl(0x5, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000300)="64584ab9bcb8588c19a2b348dd0805d6dc3f8d07f625b30abe762a2a51d3caa793288449ffabe451b605433aa417ca7683446019cf4a51dc845c60199ec5178fc8ab5ddf0ec96da92899cc4ebe047c9e61e2fafd2e9ae14cf42ef9bf1a4ca870679c4d3fce47c60f3539ab590bab5f1a8aa3e43836fd9cdbe3d7a7f3fd86a1ce2c12c9e2e5fe851e0e95acd9fa9d6efd7aa9b56a120d3c4e2cc2eced42a8") ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000200)="7f000080000022ca000955a49551785b0c952808bec3cad648ab848bb2c7ec63f4", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f0000000240)}) [ 453.391204] loop1: rw=12288, want=12296, limit=20 03:33:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x80000000d) r1 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x719}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 03:33:43 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'ip6tnl0\x00', 0x400}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @local}, 0x16) recvmmsg(r0, &(0x7f0000002800)=[{{&(0x7f0000000080)=@nl=@unspec, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/48}, {&(0x7f0000000300)=""/117}, {&(0x7f0000000180)=""/43}, {&(0x7f0000000400)=""/243}], 0x0, &(0x7f0000000500)=""/138, 0x0, 0x7c0000000}, 0x7}, {{&(0x7f0000000640)=@sco, 0x0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/163}, {&(0x7f0000000780)=""/91}, {&(0x7f0000000800)=""/238}, {&(0x7f0000000900)=""/171}, {&(0x7f00000009c0)=""/4096}], 0x0, &(0x7f0000002900)=""/169, 0x0, 0xfff}, 0x100000001}, {{&(0x7f0000001a40)=@rc, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001bc0)=""/218}, {&(0x7f0000001cc0)=""/120}, {&(0x7f0000001d40)=""/182}, {&(0x7f0000001e00)=""/252}, {&(0x7f0000001f00)=""/232}, {&(0x7f0000002000)=""/131}], 0x0, &(0x7f0000002140)=""/86, 0x0, 0xfffffffffffff60d}, 0xfffffffffffffff7}, {{&(0x7f00000021c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002240)=""/156}, {&(0x7f0000002300)=""/65}, {&(0x7f0000002380)=""/86}, {&(0x7f0000002400)=""/129}, {&(0x7f00000024c0)=""/153}, {&(0x7f0000002580)=""/130}, {&(0x7f0000002640)=""/88}], 0x0, &(0x7f0000002740)=""/185, 0x0, 0xffffffff}, 0x5}], 0x2b7, 0x4000000000, 0x0) sendto$inet(r0, &(0x7f0000000000)="077a2975b0e942ef01e675d544", 0xd, 0x2000000e809, 0x0, 0x0) [ 453.426506] sd 0:0:1:0: [sg0] tag#974 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 453.435198] sd 0:0:1:0: [sg0] tag#974 CDB: Read(32) [ 453.440271] sd 0:0:1:0: [sg0] tag#974 CDB[00]: 7f 00 00 80 00 00 22 ca 00 09 55 a4 95 51 78 5b [ 453.449079] sd 0:0:1:0: [sg0] tag#974 CDB[10]: 0c 95 28 08 be c3 ca d6 48 ab 84 8b b2 c7 ec 63 [ 453.457887] sd 0:0:1:0: [sg0] tag#974 CDB[20]: f4 03:33:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x7, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}]}, 0x60}}, 0x0) time(&(0x7f0000000240)) 03:33:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046302, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 453.535004] binder: BC_ACQUIRE_RESULT not supported [ 453.561142] binder: 11419:11422 ioctl c0306201 20000280 returned -22 [ 453.586066] binder: BINDER_SET_CONTEXT_MGR already set [ 453.596710] binder: BC_ACQUIRE_RESULT not supported 03:33:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x98) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}}, 0x0) close(r1) [ 453.608530] binder: 11419:11422 ioctl 40046207 0 returned -16 [ 453.625687] binder: 11419:11430 ioctl c0306201 20000280 returned -22 [ 453.640299] sd 0:0:1:0: [sg0] tag#974 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 453.648944] sd 0:0:1:0: [sg0] tag#974 CDB: Read(32) [ 453.654029] sd 0:0:1:0: [sg0] tag#974 CDB[00]: 7f 00 00 80 00 00 22 ca 00 09 55 a4 95 51 78 5b [ 453.662828] sd 0:0:1:0: [sg0] tag#974 CDB[10]: 0c 95 28 08 be c3 ca d6 48 ab 84 8b b2 c7 ec 63 [ 453.671649] sd 0:0:1:0: [sg0] tag#974 CDB[20]: f4 [ 453.757881] device lo entered promiscuous mode 03:33:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00001700", 0x101}) 03:33:44 executing program 2: r0 = socket$inet(0x2b, 0xb, 0x10000) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2}, 0x333) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000100)="82282a7e1b3e1875bca1702d2a6dcc663bffefb681b74a477862ad302a80b26ddcc41760e0c525561f84dac4e1c69468e8377174a70b15524d45cc92aa73ac1d97b9501d8c38313d0d122804a4ccbf6e9d1ec3e167b16e417dc12d8bf57a7111de3bb8739307d9d1b224d78022c419ee0df96b783026907652dc78cb03b757eb2746b6f77c1d4113867f4d1a9449a159e56756e45218cb58b223d38b821fdb871eee27103edc4fdcd05ebff603ccd6058637b9241816d018dc8714a9dbbc5bed1807", 0xc2, 0x42d}, {&(0x7f0000000200)="73b1cb4363dd93c8b7d8ea3c2621a99856e92a94c03ae13c847f4434957616ed2c0d29e6674fae437235ab412cafee7d473b7c088f8ce1da17fff1536e29beb2cf4228893879192479ab78cefd759708ee69892e9d3573b6199109d8ad90f896", 0x60, 0x3557}, {&(0x7f0000000280)="63222b79327cfc3d1137a2ec825f7b4e2e514d20adc13fbcb2988e9e7d2580b846d7b6ab4037ca08533ff815d81e9182f2bb0e0993c7b612e38d1b98ca27a40eeb965b5948d47d8d4fcd3ee28e9d86e5d35a2426a424", 0x56, 0x40}, {&(0x7f0000000300)="779f70bd7831edd53bc6e90e6a3d46b19e4cfcd14f1c74d941ac7ed0affae38ff0d3e654263c7755cd87eb677f47b391b3729ac6901475efc19fed0c5f81098b06b9a7ee63e46b7321128eaecc6ab634a1", 0x51, 0x3}, {&(0x7f0000000380)="0bd8b4b316926508ccdfae2452", 0xd, 0x6}, {&(0x7f00000003c0)="ca3441fe8c60cc93530110a0e66d7c6709d2dbbb6031fe0f5e2452ac26cb324c173bcc7b35acfe1b483cfee6c1c87597ee796f351d0b39e53d74ff61bdcebf982ccdd6cfe193159feb8215a468242d0d2a9ae113a1a2cb31e005cb04fc72a53105741ab6c9fb40bed1bb94571b6e6138d5b97bf7048fa048cd393471b7c3f237c45069e0af2b076a3442b5", 0x8b, 0xfff}, {&(0x7f0000000480)="7653024491fb26a769f336ce24236c9b098016ddafd1adcb8a59f179088557ab8801271950bb3d4e104affcfbc1e90aeeab35723f7adb7074a13f77892a1da7578b32cc1da0311186d8c40f378f6d833a637010724fbba75e33285076bb4e79434c19b87b9a7c000ff72998df78f3a34818d180bbcfd0022509201329a61cfba78b7b178e2636bdd97b4904938c3f6ebe3235b26baa65eab2e0c9a7cfe907a186044ec84e9586e5da77f17b2a02baeb45172a18a7d19", 0xb6, 0xdc}, {&(0x7f0000000540)="941d851253c8c1e017310421af60aa15b927c3eeb8a1bd844f2e89b6cbb4cdba3eee34db42a7b98ccf312b5f0ad7eb6772eeeeae1d20a9217bc92c082a8a3683c17646f17b816a8d5fbbe75c3049c67bc4a338d5cf5172e24846552a33f281bdb20a192f01ce248787590cc123facc477e6d84a792aa0b0cca47e2d80011", 0x7e, 0x8}], 0x10000, &(0x7f0000000680)='lo[em1lo\x00') r1 = syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000700)={0x8f367fb886443af5, 0xff}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x630d, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f00001e1000)={{0x2}}) [ 453.832556] binder: 11443:11446 unknown command 4 [ 453.857720] binder: 11443:11446 ioctl c0306201 20000280 returned -22 [ 453.871210] device lo left promiscuous mode [ 453.878356] ceph: device name is missing path (no : separator in /dev/loop2) [ 453.898731] binder: BINDER_SET_CONTEXT_MGR already set 03:33:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @remote}, 0x1c) 03:33:44 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sched_getscheduler(r2) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:44 executing program 1: r0 = semget$private(0x0, 0x4, 0x262) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000640)='./file0\x00', 0xa00, 0x108) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) semget(0x3, 0x7, 0x451) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r4 = geteuid() r5 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000380)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x9, r2, r3, r4, r6, 0x44, 0x2}, 0x2, 0x1f, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socket$inet6_dccp(0xa, 0x6, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r9, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r8, &(0x7f0000000140), 0x703000}]) 03:33:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8") fcntl$setstatus(r0, 0x4, 0x4000) finit_module(r0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8", 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x1, @time={0x0, 0x989680}, 0x0, {0x1000, 0x2fd}, 0xfffffffffffffffc, 0x2, 0x80000001}) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) 03:33:44 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000140)=@nfc={0x1e}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000009d00), 0x0, 0x4}}], 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x10800, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfff}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}]}}) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00'}, &(0x7f0000000540)=0x54) [ 453.908699] binder: 11443:11461 unknown command 4 [ 453.919499] ceph: device name is missing path (no : separator in /dev/loop2) [ 453.920775] binder: 11443:11446 ioctl 40046207 0 returned -16 [ 453.929196] binder: 11443:11461 ioctl c0306201 20000280 returned -22 03:33:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @broadcast}}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$setptracer(0x59616d61, r1) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40486311, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) lseek(r1, 0x0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f3c23fb57e6c60f1f4b45b74d99009a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x6611, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x0, 0x22, 0x4, 0x3, 0x1, 0xd6f6}) [ 453.999402] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f47726f1d56228756260ed3bc23bf51770bc5c6ada7ff21067930d8c986417a47a92c3c33fd04587332e3c0e9037ed95098e32634833e2cd48d40fd24962a5a4c913b2ca54672fd64f5e605fd4fffd9fb3cc4b533650bf2cc69484d3c830f26f17d844845a6ee39ba5bedce7ee1997fb1665d23f44fe9ad9bba06762c444b47970572bf210000000000000000000000", 0x2761, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xc900b) ioctl(r0, 0x2, &(0x7f0000000280)="d753ad54802a24c92fd062f16f8fb028ec57ac6f5232546a441a2db41895e3349db59a3d44615e80ca5748db0d4fadfc3013573d6b81b8b65fc2c8268bc8bbbcfed66a0b05509667228e3d4cfa83cf7ed2c0447d09c2ac186cce1e8f9b9e2b587136a85bde3903f6d04ebb4e252107e02a5718f0e1fccac5207700392a125f5d8917a641d70b653ea2c2cb5fdfc6a9425b9e202dd6a16b8b07a0a19098ef60e6dd9c446c0fd60448b3470661079d79cbeba1ffe9b3a7a8d0824b7421525d0289d16d97ffd170d87e1e9f349927df30986eb21a171ff382c6665276c1fabb3f3e249092ccefe857a14ded031c352ae1b6a7e2e334bcda9912") socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x8, [0x2, 0x7fff, 0x1, 0x77d15c48, 0x3, 0x6, 0x7, 0x3d8]}, 0x14) sysfs$2(0x2, 0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff9f, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x2f4}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) [ 454.057524] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8827, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 454.099791] binder: 11492:11496 got transaction to invalid handle [ 454.106459] binder: 11492:11496 transaction failed 29201/-22, size 0-0 line 2854 03:33:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1503, @remote}, 0x1c) [ 454.177336] binder: BINDER_SET_CONTEXT_MGR already set [ 454.185183] binder: 11492:11511 got transaction to invalid handle [ 454.191518] binder: 11492:11511 transaction failed 29201/-22, size 0-0 line 2854 [ 454.218740] binder: 11492:11496 ioctl 40046207 0 returned -16 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40486312, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 454.261663] binder: undelivered TRANSACTION_ERROR: 29201 [ 454.271601] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 454.281008] binder: undelivered TRANSACTION_ERROR: 29201 [ 454.321015] device lo entered promiscuous mode [ 454.346715] device lo left promiscuous mode [ 454.368188] binder: 11523:11525 got reply transaction with no transaction stack [ 454.375776] binder: 11523:11525 transaction failed 29201/-71, size 0-0 line 2761 [ 454.414520] binder: BINDER_SET_CONTEXT_MGR already set [ 454.420318] binder: 11523:11530 got reply transaction with no transaction stack [ 454.424949] binder: 11523:11525 ioctl 40046207 0 returned -16 [ 454.427828] binder: 11523:11530 transaction failed 29201/-71, size 0-0 line 2761 [ 454.441880] binder: undelivered TRANSACTION_ERROR: 29201 [ 454.447833] binder: undelivered TRANSACTION_ERROR: 29201 03:33:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x101}) 03:33:44 executing program 4: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240), 0x14) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x100, 0x41, 0x2) syz_emit_ethernet(0x13e, &(0x7f0000000040)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, '>![', 0x108, 0x0, 0x0, @remote, @empty, {[], @gre={{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "c53f9bc10b5218fbe6b21126ec5dfd4b51895eeabb8f1881b91980e74888ed41c49dc1d8bafc100ed78e3cc3b555dd235dba88b38388d4deb8c6d3795dcf58efc348b06d6b0f767c7520b7f6b0ca7326a75ba6ca9e1dadc8a4fecca66ad80f29bc3bb41a06f18c6f4f0b195587ebc281814d6457127854ef65964f36cbef44461b195c5e4c40fe1a57ae459fadf5b343cca1eeb3cdd0243195920ebeb7ebe99d397ef4d81cd3bca637aa32fbb0205fa83ce13b0277825ee8de7e55926a410d09a500e29e"}}}}}}}, &(0x7f00000001c0)) 03:33:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f485a95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000001500020000000000200900000000000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [], r0}, 0x48) 03:33:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x800) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r1, r0}) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) ioctl$TCXONC(r3, 0x540a, 0x0) 03:33:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000fb9fc8)={&(0x7f0000397ff4), 0xc, &(0x7f0000fe8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000ac141400000000000000000000000000ac14ffaa000000000000000000000000000000000000000036452277f46f2a0000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac14ffaa000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000001c001700cb010000000000000000000000000000000000000000000014000e007f000001000000000000000000000000"], 0x120}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0xfb1803bc58d72514, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) 03:33:44 executing program 6: r0 = socket$inet(0x2b, 0x0, 0xf1ab) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10004e21, @multicast2}, 0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/full\x00', 0x414000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000780)={0x10000, &(0x7f0000000080), 0x3, r1, 0x8}) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RRENAME(r1, &(0x7f0000000380)={0x7, 0x15, 0x1}, 0x7) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r2 = add_key(&(0x7f0000000680)='asymmetric\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="ed3f32dd570a0b48e093c36fb0ed9da1ceda1998b92b73848cccd306d40050109fb4dda1b3b39b0e065b22209ac9894ac4", 0x31, 0xfffffffffffffff8) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000600)="44552ff248bf5fdfda422d70dfbd5bf803c3f8d3204b3cc9f2ff4fbfdef31d26a14a515185709eac59c3120a3b09228b94be3d0689fa7c5588a753a40dedb090c91e41655b99ea3ed5cb198d0764c9180d70646c8c74124fdeada099e8ba99d684260bcea1c5bf76e0975885a1c23821898f0359e2731fd86496a4fb32", 0x7d, r2) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000540)=""/57) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) r4 = getuid() setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000800)=0x7, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x114400}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=@newpolicy={0x10c, 0x13, 0xe04, 0x70bd29, 0x25dfdbfc, {{@in=@remote, @in6=@ipv4={[], [], @loopback}, 0x4e24, 0x0, 0x4e21, 0x5, 0x2, 0xfd528391eae4ed66, 0x80, 0x88, r3, r4}, {0x8, 0x4, 0x6, 0x6, 0x3a80ea4e, 0x7ff, 0x1, 0x1}, {0xa, 0x0, 0x4, 0x80000000}, 0x2c, 0x6e6bbf, 0x1, 0x0, 0x1, 0x3}, [@policy_type={0xc}, @mark={0xc, 0x15, {0x35075d, 0xcb57}}, @output_mark={0x8, 0x1d, 0x5}, @output_mark={0x8, 0x1d, 0x7f}, @tfcpad={0x8, 0x16, 0x6}, @lifetime_val={0x24, 0x9, {0x8, 0xf, 0x5, 0x4}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000740)) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046354, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe00000000000000, @remote}, 0x1c) [ 454.522481] device lo entered promiscuous mode 03:33:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000040)=ANY=[@ANYBLOB]) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x4000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/38) 03:33:44 executing program 2: prctl$setfpexc(0xc, 0x100080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="75a51dc092aa1c000000", @ANYRES16=r1, @ANYBLOB="210000000000000000000c0000001000040000000000"], 0x1c}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), 0x4) [ 454.561564] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 454.585593] device lo left promiscuous mode [ 454.585770] binder: 11535:11547 unknown command 1074029396 03:33:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbc7f, 0x41) r1 = socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) setresuid(r2, r3, r4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(r1, &(0x7f0000000300)="04040000ad88fcc3c78022d1c980587b8309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c", 0x2c, 0x0, &(0x7f0000000040)={0xa, 0x800, 0x5, @local}, 0x1c) 03:33:44 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000040)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000640)=""/4096}, &(0x7f00000000c0)=0x78) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xe0ffffff00000000, @remote}, 0x1c) [ 454.656360] binder: 11535:11547 ioctl c0306201 20000280 returned -22 [ 454.683829] binder: BINDER_SET_CONTEXT_MGR already set 03:33:44 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x41000000000001, 0x10004) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl(r1, 0x8, &(0x7f0000000140)="0031ce8faf4035f669892b") r2 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @dev}, 0x10) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0xdee0}, 0xf) close(r2) 03:33:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x5502de1b35299f1f) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) r3 = mmap$binder(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x3010, r1, 0x0) r4 = mmap$binder(&(0x7f0000b6c000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xf4, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000040)=[0xb4c239eaea49faab, 0x78]}, 0x1ff}}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x0, 0x3}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x48, &(0x7f0000000140)=[@fda={0x66646185, 0x2, 0x3, 0x10}, @flat={0x77682a85, 0x10b, r2, 0x2}, @flat={0x77622a85, 0x100, r3, 0x4}], &(0x7f00000001c0)=[0x38, 0x28, 0x78, 0x28, 0x78, 0x48, 0x0, 0x30, 0x20]}, 0x6}}, @dead_binder_done={0x40086310, 0x3}, @release={0x40046306, 0x2}, @exit_looper, @increfs_done={0x40106308, r4, 0x3}], 0x2b, 0x0, &(0x7f00000000c0)="a9707b4ae1278610f5f4febcf1a53a28272342dd462c76aae0d599c734191a3cf4305935dace6386ed5dd4"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000436348400000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000001470bfa0e01bdf757a235cd085c276711348db7745403bfea5ca37d5020b0000000000000043e8455bd4d4a67e165510065aca0cbbdb912bf36063dbae18518942d65e7226aefd45543276d24925a72601ffb0a3c1d9072674a870659d7629e86f347599a9186f4f911ef32af87859c99acc452725c1610d947aee250e79c9aff6774f10891eed769ca99a61f34191a66a1b9f70ac36348005404e5ba0ea40a2d4290e4daff25d39f678b7d775d7394a5b5ec14b4621e7fe1165c2b65e5332340aa675cd7418281aad83651c3009372a70d6b0414b21dea2aba2c9fc851fa725d46c34532e8920c6fd7c5f8581a636030d7d9d1f37e40c4416bc294c6f11463f7f510ec34274b1248f33f2fcf30e6d44292f00bb9779f90c53268450fa0d2b4575a59a506a224f2be058cdac550231bc5fe6e1208db931808b11fae5f97fbabf694ffebe50b6a94fb9ac0bbc6d08bcdf27855bb99fc6ef3c41d64303a2bb688ee016e55309b67c6f03ac61794e5e7ef34b4cbd6b6d17a5c15e96ef31837581a6e4e99a1480181b7706529f2a6688ab0d354b4d169ad5", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000007c0)}) [ 454.702744] binder: 11535:11572 unknown command 1074029396 [ 454.722196] binder: 11535:11547 ioctl 40046207 0 returned -16 [ 454.735973] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 454.749481] binder: 11535:11572 ioctl c0306201 20000280 returned -22 03:33:45 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) listen(r0, 0x0) shutdown(r0, 0x2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600), 0x4) 03:33:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000031200", 0x101}) 03:33:45 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x181000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/236, &(0x7f0000000100)=0xec) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 03:33:45 executing program 0: r0 = memfd_create(&(0x7f00000001c0)="766d6e6565310034f2a7650ab6a98da7d84f4ad5b4b5b1f4d57512c0fdb3b7564c1184bf877fc0e6afebef11f70678bd284e7f9143581162f5405e69a03658e84f2665c85ad38d0373aefa3b017fd9c848df0929d23cd0cc6d7ba6bf14ceebeaa098e185216f18b3e8061de7bad7b51fee44527c2c8cce06cb6e96e6f8902fb88b4b2c25db1dc29d", 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1000, 0x0, 0x800, 0x5}, &(0x7f00000002c0)=0x18) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000500)={0x6, 0x7ff, 0x5a}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x2}, &(0x7f0000000340)=0x8) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x17, 0xf2, &(0x7f00000003c0)="764b301e0c08f808116276dd6a1132f421b9d9967dd6dd636679ed8bbd8cbee3e975122b5fb0255b06855776c3bcd53216396f9c1e2ed5e20f0f60ae19a417dbcd765e668a7c8e70d885cac69520cbe859e9ba51923dd2a6a89f12a83f0497625825ab84a3e5cf0e13ae9baba84d8efbc4109d841e870bf2f3f946b45c24a7682a534af9fbe47a11574e3dfb731df71552dff8a1c2caa014af39db3355af02b5b90d1ba035a8aa143063efd41a1db2f54ac50f078b93a087a2bc1ccadd72275eaa72500972b944479aa54fc8b522b9a1d6fa56d52885dd45134ccbdd52274e2b37d3c7df0bda92f72d86e0cfe29de1dff937"}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = socket$inet6(0xa, 0x1401000000801, 0x40000001ffffc) prctl$seccomp(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1, 0xd00, 0xffffffffffff8474, 0xfffffffffffff800}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f00000004c0)) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0xffffffff, 0x5, 0x7ca, 0x7]}) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 03:33:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x4004630a, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, &(0x7f0000000000)={{0x0, 0x1}}) 03:33:45 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4]}}, 0x1c) 03:33:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x14) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc000, 0x0) [ 454.934817] device lo entered promiscuous mode 03:33:45 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x101, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000016c0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="1400000026000100ff0100100000000000000000"], 0x14}}, 0x0) [ 454.981086] tls_set_device_offload_rx: netdev lo with no TLS offload [ 455.004605] binder: 11605:11610 unknown command 1074029322 [ 455.010417] device lo left promiscuous mode [ 455.022556] binder: 11605:11610 ioctl c0306201 20000280 returned -22 03:33:45 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) socket(0x11, 0x8080f, 0x3) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl(r0, 0x8000000000009374, &(0x7f00000000c0)) 03:33:45 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) keyctl$set_reqkey_keyring(0x16, 0x6) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x400) [ 455.022824] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="5da33c94fb3b4428412476f5", 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0), 0x0) [ 455.074748] binder: BINDER_SET_CONTEXT_MGR already set [ 455.088672] binder: 11605:11633 unknown command 1074029322 [ 455.111825] binder: 11605:11610 ioctl 40046207 0 returned -16 03:33:45 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)="7383ee86dfd40f176d2c65"}, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000300)=""/76) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe000000008500000030000000b7000000000000009500000000000000"], &(0x7f00000002c0)="7383ee86dfd40f176d2c65"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x73, &(0x7f0000000080)="baef530cc81f740c8f4b5b630683", &(0x7f0000000100)=""/115}, 0x28) 03:33:45 executing program 2: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x38) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000002c0)={0x0, 0x1, 0x5, 0x1, 0x9}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340), &(0x7f00000003c0)=0xfdc5) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x90a00, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000001940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f00000006c0)=@newtfilter={0x1224, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, r5, {0x1f, 0xfff1}, {0xfff3, 0xf}, {0xb, 0x2}}, [@TCA_RATE={0x8, 0x5, {0xfffffffffffff800, 0x1}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x11bc, 0x2, [@TCA_CGROUP_ACT={0x120, 0x1, @m_sample={0x11c, 0x12, {{0xc, 0x1, 'sample\x00'}, {0x4c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffffffffffc01, 0x10000007, 0x72, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xbd, 0xc0000000, 0x2, 0x8, 0x3}}]}, {0xbc, 0x6, "f753904dc8cce858fe4a0ecd57eaf3ff551372a755cebd799198200433dbfba1b4a051f34732cf42cc315a26015159f6cfced61af2029eb30be0a055ae51726a751ddfb4d97569e71cb145f656be4ec7edbe71f26a031e22d907040602736c0d9ff5271010f9923fd66f7bc1d0760b2407b218d26097052c59fe4d44248352c67e5a9c22e1851577b3c55883750a2690e046750bf5327668bfd904ef29e46285078bb1e517e6688d740589301081e7558252f71d2b1ce7"}}}}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}}, @TCA_CGROUP_ACT={0x108c, 0x1, @m_gact={0x1088, 0x1b, {{0xc, 0x1, 'gact\x00'}, {0x70, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x260b, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x0, 0x4, 0x10000, 0x297f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1398, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd3d, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1135, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1708, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ee, 0x2000000f}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa22, 0x3}}]}, {0x1004, 0x6, "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"}}}}]}}]}, 0x1224}, 0x1, 0x0, 0x0, 0x1}, 0x0) readahead(r1, 0x5, 0xffffffff7fffffff) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r6 = socket$inet6(0xa, 0x40002003, 0x100000000) ioctl(r6, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00001ec000), 0x0) r7 = accept$alg(r3, 0x0, 0x0) sendto(r7, &(0x7f00000004c0)="04908fbee12b5562b477659eacab30e15e9e394aa1b0cfb973c3dad1f0ea182424736723bff2686f722b9376b2201090ea0030ae96537ea2739418b0aaef6c640d46150deca047d05fd5734ac6d687215cdb141786e6005df4af35e6a15da4f2a9057ece49ae13d0e38bf8d6c933c4ace8", 0x71, 0x0, &(0x7f0000000440)=@in={0x2, 0x0, @dev}, 0x80) clock_gettime(0x0, &(0x7f0000004f80)={0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0x6a) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001d40)=""/156, 0x47e}], 0x1, &(0x7f0000004040)=""/224, 0x2a4}}], 0x2, 0x0, &(0x7f00000001c0)={0x0, r8+10000000}) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x80, @empty, 0x2}, 0x1c) 03:33:45 executing program 0: r0 = semget$private(0x0, 0x3, 0x206) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x109901) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000000)=""/47) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0x6, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRES32=0x0], 0x2}}, 0x0) 03:33:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x400600212) pread64(r0, &(0x7f00000001c0)=""/190, 0xbe, 0x0) [ 455.125840] binder: 11605:11633 ioctl c0306201 20000280 returned -22 03:33:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40086310, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 455.250662] binder: 11659:11661 BC_DEAD_BINDER_DONE 4004630400000004 not found [ 455.258157] binder: 11659:11661 unknown command 0 [ 455.309914] binder: 11659:11661 ioctl c0306201 20000280 returned -22 [ 455.322794] binder: BINDER_SET_CONTEXT_MGR already set [ 455.329039] binder: 11659:11669 BC_DEAD_BINDER_DONE 4004630400000004 not found [ 455.336498] binder: 11659:11669 unknown command 0 [ 455.337194] binder: 11659:11661 ioctl 40046207 0 returned -16 [ 455.348201] binder: 11659:11669 ioctl c0306201 20000280 returned -22 [ 455.393296] device lo entered promiscuous mode [ 455.403101] device lo left promiscuous mode 03:33:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00r\x00', 0x101}) [ 455.508204] device lo entered promiscuous mode [ 455.514961] device lo left promiscuous mode [ 455.589404] device lo entered promiscuous mode 03:33:46 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000040)={@local, @empty, @loopback}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) prctl$intptr(0x26, 0x3) 03:33:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x240]}}, 0x1c) 03:33:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$sock_int(r0, 0x1, 0x38, &(0x7f00000000c0), &(0x7f0000000040)=0x1) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "c0e9b66dd81aa9ce4ec02618b9a9d63934424690e1fb47a48de3f68a137ae57f58fd94eb2ef9e2341bf5bb0b706e6ffef78222ed4fa71af841285027e0a6252420eec7429e134112e7746578141b30ee957c172a17c0e7119cadd3dda075d0c17eb1b601f9dbfc81fb90b08a82faba5eeabb23"}, 0x77) 03:33:46 executing program 4: getpgrp(0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x28) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x8, 0x4, 0x3}, 0x40}}, 0x18) 03:33:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000008912, &(0x7f0000000100)="0201c8353c011ff603bf3669a58557ee6f72cc83ede7670b11001d391edfaf9f41b30ddd86bac20f2f4cac05ec3282088ce639b8fc9b78c1e2b3a8a3b26942d2529f5c8b270c6f50c5d42126d71738c2dba76c978386229a9aabb99b93fa9176331357531ee5a1693007dcf54d1a0e426f00049ff7381745cbfee1a9389bf429eff8f6d5e59002d45a36753aa8812dfc6941e1") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x27, 0x101, 0x0, 0x0, {0x8}, [@nested={0x4}, @typed={0x8, 0x4, @u32}]}, 0x20}}, 0x0) 03:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x400c630e, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x2, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x476ed66cbd1797a9, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x7, 0x8, 0x9}, 0x10) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x162a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00?\x00', 0x101}) [ 455.791210] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 455.809374] binder: 11682:11688 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 455.818888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 455.832279] binder: BINDER_SET_CONTEXT_MGR already set 03:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00@\x00', 0x101}) 03:33:46 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x200005ad, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20242, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x4004, 0xf000, 0x9, 0x7, 0x9}) [ 455.837240] binder: 11682:11698 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 455.845356] binder: 11682:11688 ioctl 40046207 0 returned -16 03:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046306, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1802]}}, 0x1c) 03:33:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={r4, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0xffffffffacd4e8cd, @local, 0x4f}]}, &(0x7f0000000580)=0x10) sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x80000009) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f00)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'teql0\x00', r6}) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x101000, 0x0) getsockname(r0, &(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000002c0)=0x80) sendmsg$can_bcm(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x1d, r8}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x7, 0x7e9825336390d606, 0x7ff, {}, {}, {0x4, 0x81, 0x8, 0x1}, 0x1, @can={{0x1, 0x76, 0x7f, 0x2}, 0x6, 0x1, 0x0, 0x0, "3bdc1bd0700a2274"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = accept$alg(r5, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x100000001, 0xffffffff}) sendmsg$alg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) [ 455.926184] Unknown ioctl 1075883685 03:33:46 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x10000, 0x3, 0x200, 0x7, 0x7, 0x8a, 0x9, 0x6, 0xffffffff7fffffff}) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="3000000029010000000000000400000000000000000000000000000000000000000d002e2f66696c65302f66696c6530"], 0x30) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) fdatasync(r3) 03:33:46 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) r0 = memfd_create(&(0x7f0000000040)='cpuset{\x00', 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="47dad7b5ddb89d5ec9d145a2f4af30daa0db6816fffa0e9fccfb2e90d88800baf690459774fee220100ea71fe1c3e7ffa1373f96a6213871eaf8cf4c8cd6a4c49a3025f4b4ebc18f950e97c5a8201eb789d1865935486c88e1bbefc1ca106ac747b4859746d1b2252d8a64becc8347c4afe57ba9008f24f1199d68bac08638427b2dc1cea4a2c0d2a2412ab8511d593b50dc726850bd1bd1877d4559ebb61413caf38a7f816de25d3d7db00d801ef720937bf1c0d7373d"]) r1 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r1, &(0x7f00000000c0), 0x300, 0x0, &(0x7f0000000080)={0xa, 0x4305, 0xf, @mcast2}, 0x1c) 03:33:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffffffffffd, {{0x2, 0x4e20, @broadcast}}}, 0x88) r2 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r2, &(0x7f0000000000)="c1", 0x1, 0x8000, &(0x7f0000000080), 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x380) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-avx2,pcbc(aes-aesni))\x00'}, 0x58) sendto$inet(r2, &(0x7f0000000240)="58325d8cc52b3af7b67516089928dd", 0xf, 0x0, &(0x7f0000e81ff0), 0x10) [ 455.965712] device lo left promiscuous mode [ 456.002184] binder: 11718:11721 Release 1 refcount change on invalid ref 4 ret -22 [ 456.023903] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 456.041517] binder: BINDER_SET_CONTEXT_MGR already set 03:33:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) pkey_alloc(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000040), &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48) 03:33:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046309, 0x4}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 456.055442] binder: 11718:11740 Release 1 refcount change on invalid ref 4 ret -22 [ 456.065869] binder: 11718:11721 ioctl 40046207 0 returned -16 [ 456.084252] binder: 11718:11740 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 456.084653] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303015303000002c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c1a8823555bfb33a37a46203667726f2b000000643d", @ANYRESDEC=0x0, @ANYBLOB=';\x00']) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r0, &(0x7f00000020c0), 0x1000) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x7, 0x4}}, 0x20) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) socket$kcm(0x29, 0x7, 0x0) 03:33:46 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@remote}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000180)=0xe8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 456.163011] binder: 11756:11757 unknown command 1074029321 [ 456.171887] binder: 11756:11757 ioctl c0306201 20000280 returned -22 [ 456.189022] device lo entered promiscuous mode [ 456.190717] binder: BINDER_SET_CONTEXT_MGR already set [ 456.207512] binder: 11756:11759 unknown command 1074029321 03:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00029000", 0x101}) 03:33:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000140)=0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r5, 0x428, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xee0c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x16}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffff0001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2d}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x114}}, 0x20000000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x4, 0x2, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000440), 0x1, r6, 0x30, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0xa0) 03:33:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) sendmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="d8edd2c714e6c09af89fcc99f0f00c6c156a02bc6ba0fdedecc2d6db407a794b77551ba3ae102fbe506ded5cd6069cea5866591618ff29069a4d7174f5f30c444c7572d5fb3b977c03a870f0ea169c501f6d7317c8f036f69aeaeeac80ce710fda8a96b314a0b1bfbdda98bed369a3249dc1123a76e755e138f0b8d5edd5", 0x7e}, {&(0x7f00000005c0)="b467f90773d73f4decfb58d70a81ad2b572612c285f1654689e2df3041467a2c13fb9b93523c98130506732ca3f8f0f10366c158706a335a1d8b0dce21421825d1867375470520651b2554705e5b17175a6c3c2f87effacc249ed9d7b3de7998660e6c587b0230d013af9ff47b5be80287d6640e7186b292d1d5e6d07c78961f125332056d4575ae2f252be2e91eade9", 0x90}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="4ad670e24d90fb1eaca505c0618c80d432206d08afa76549e49ae2674acf4f8e066068a2ca35c0e1ed9d8d6ea8eefd410dae01ec3e89043cdf9df7f70edce38a3ff2b1fa7022fa87a44b00ffeffbf49b2c5f92a9ed16496562a90dc862683009f84f47774178d00967a273120fbaae0f57d14f3a4b7924ce5b417e903e339a07b1f96279fd881b34363ca76a", 0x8c}, {&(0x7f00000017c0)="1443a70c55c084fcd5b893e196414d9634ebccc8292b28e470df03b870a0ee994b09cb1e7e139ae8c059b584ed3f23b7599ba9f5485b80592e4eef3381cdcf00661db47ea9dd20bea0e98c7d70088ee3febf3b85bb11bb6819f75973c90a28ae62611f6ff0b8ec91db85ca3fde0d182ab30e2005e29e23227ebdafb6f61c7cfaefbd02ba2dff17be27877a6127f5503978950ce1672e8b712c4b799421a51cec0b1f6b1260f25ca5d125a31b56ae8836395a7cea28ca599060003135fecc5917b095b5b2151d020725687e0d6dafd9a10154d9e7ec863bfa197369c1", 0xdc}, {&(0x7f0000000140)="f3438ae032c42a3ad736c47a7d3d317661778e84a9938088fa8c3ca9eb86fabcb9823a2e903150c5db872dc71c1e028e449c02b7f2b7c7db80933c6addb1ec77ceac77a351cf43e751409a9a9edec6aa2f9ca257f1c7", 0x56}], 0x6, &(0x7f0000000380), 0x0, 0x1}, 0x7fff}, {{&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000018c0)="1f5ec5e44a1dbbcba8cca18cb34fab977c541fba009981f0f94fe4750feb6e819add03ada9db17d18a65b8b8205189e994aa4956e49f03c4fdd40d8a4b9b48e4d01d36a10747da36af8652cfa4f94de0d382e36241c9f3776eee4fb3d97d798c3a239a85d009bbbdfbcb3109eb34dd2f2c59bf2830c2f92a373c660245fe1cbfb318321685fc267ea4fa6c269463adfe25d10d83cdce3b5975337546f09c2da143fd0d4b282b2542d190409b66f56f9717b2180aacda645fb89b32ab7fbf12ffc81b46e27d09999c0d7a20422cc0e8d60ed1131c1ef18a3937", 0xd9}, {&(0x7f0000000400)="8560b4f1caf89f13eb7a4edffeb570f299468560214a", 0x16}], 0x2, &(0x7f0000001a00)=[{0x50, 0x104, 0x2, "0177673c2d0e2579647e23fe30a50b3d2a156faf0e559a6c4e1efacf0f50d9f74c384c81500f35b5fc4e2fb5dbc6170da138cfde619e96744e987462da558437"}, {0x108, 0x1bb, 0x80000001, "7732bf50b86fd64840536304fcadc5b8eeca5f00546bd0adf137a9730bc494e6938393966390f8b71d1e1b3a22c1d7c5b8b4f6999d3548ecac38584148a069209a7c63cf283301f7153ba7b59a25ac21d4859f3334781e08b4ef8215dc757b0e5aecbc922ff0441730623da3a08dc39b41bcbacd6fb834109eba35865b75d94f7300fa5145afd7214932c22c365f2ec70d3e8cde80cbf7938b8d1115030c9caf0a3d6260f4416d9269dee8351dd31dbb259cc7406e87534df362558ca9c9fc03a3e6189420351d015d2cc0d65b03069d9c772a749dfb93bbfc870108a1d2cccb89eb2dc1222dcafaa7582c955bf5f2786a79ff7c5c"}, {0x38, 0x112, 0x9, "e41bec2e3e1d6f26f8304a6e3a57e23c7aa514d6f7a49bd52aa2f10df5f0b84b595c3543"}, {0x98, 0x114, 0x1f, "f6331681708741403fa7c94183d7d45b734bc05962fd4d7e3c380ce98045e28de4e94df1b8b305d6700d37a69b8d765994738cf457690274fe6c9576a23f35ee5aef07497d86426239ac0113fc94468ed46af2c89b7ce3fd31b15e48da2037cc5a9298028b3211d741d555c5449ee9c0990c2ceddf4c0fab4f065109bf025705a03a"}, {0x1010, 0x103, 0x6, "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"}, {0x100, 0x10a, 0xff, "25ed19fdc4fcb1b423164f2cd66f271d25bed7512e9ee62fdf8f4c50c7b83b28ac5fc0c9c02fb5f40c154370f68a0bc1a7ae1ebf9039923cfc17b203aed4a48c96303f242c34b5c9e1722f397160119919aa4e6725935ddaf7f8ee9d305b6f720e7ad44c2e46452b3b1d3d4781b67e986566e616c2f4a862110f169e6dde4d53e001104d8960851cabe6d83960a30f9dbf00e12f2dabf18f47156a336e4043d0db4a107a5a8d6a3945428d1b018abc6853f058c131e37ae707d4513b46eb5e451ae968621b063f0319bd3645543ad15144a5c70a555ff5fc1a11dd48de845507eacc7896b6147585bfc1daa990f36d"}], 0x1338}}], 0x2, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x6c, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380)}}], 0x0, 0x0, &(0x7f00000007c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x49, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8fd"}) 03:33:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x40, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x3, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$reject(0xc, 0x0, 0xfffffffffffffff5, 0x4000000000006, 0x0) socket$inet6(0xa, 0x0, 0x8001) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 456.248916] binder: 11756:11759 ioctl c0306201 20000280 returned -22 [ 456.279683] binder: 11756:11757 ioctl 40046207 0 returned -16 03:33:46 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffff, 0x0, 0x0, 0x0, 0x401}, 0x10) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) write$P9_RSTAT(r2, &(0x7f0000000080)={0x49, 0x7d, 0x1, {0x0, 0x42, 0x400, 0x8, {0x60, 0x4, 0x3}, 0x40000000, 0x4ed90000000, 0x0, 0x9, 0x0, "", 0xd, "656d319d6367726f75702d6c6f", 0x2, "2cd1"}}, 0x49) [ 456.301002] tls_set_device_offload_rx: netdev lo with no TLS offload [ 456.313475] device lo left promiscuous mode [ 456.330110] binder: 11772:11777 got new transaction with bad transaction stack, transaction 246 has target 11772:0 [ 456.340739] binder: 11772:11777 transaction failed 29201/-71, size 0-0 line 2881 03:33:46 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="00f9ca4ccce25a315a534074ee9aa9d4c877f0edef507c049c98843627bf33d92e0e7f9ed7a7c3005901d6a21358af4f0100f3085f419175548b60b1689534dca785d9102ddfdd18cc490242266831e873f72551d8941eb40659237b43810b4fddaf76a81fa2e003", 0x68, 0xe805, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x401, @empty, 0x4}}, [0xfff, 0x3ff, 0x20, 0xfff, 0x4b3, 0xfffffffffffffff8, 0xffffffffffffffef, 0x7, 0xfff, 0x9, 0xfff, 0xffffffffffff8000, 0x2c]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x34b, 0x30, 0x7, 0x545}, &(0x7f0000000340)=0x18) [ 456.358841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 456.405297] binder: 11772:11790 ERROR: BC_REGISTER_LOOPER called without request [ 456.419150] binder_alloc: binder_alloc_mmap_handler: 11772 20001000-20004000 already mapped failed -16 [ 456.433208] binder: BINDER_SET_CONTEXT_MGR already set [ 456.439065] binder: 11772:11790 ioctl 40046207 0 returned -16 [ 456.445379] binder_alloc: 11772: binder_alloc_buf, no vma [ 456.451025] binder: 11772:11777 transaction failed 29189/-3, size 24-8 line 2969 [ 456.451705] binder: 11772:11790 Release 1 refcount change on invalid ref 1 ret -22 [ 456.472454] binder: 11772:11777 BC_ACQUIRE_DONE u0000000000000000 no match [ 456.479546] binder: 11772:11777 BC_INCREFS_DONE u0000000000000000 no match [ 456.482320] binder: 11772:11799 ERROR: BC_REGISTER_LOOPER called without request [ 456.494493] tls_set_device_offload_rx: netdev lo with no TLS offload [ 456.501604] binder: send failed reply for transaction 246 to 11772:11777 [ 456.508646] binder_alloc: 11772: binder_alloc_buf, no vma [ 456.514380] binder: undelivered TRANSACTION_ERROR: 29201 [ 456.519900] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.525848] binder: 11772:11777 transaction failed 29189/-3, size 0-0 line 2969 [ 456.535354] binder: undelivered TRANSACTION_ERROR: 29189 [ 456.561243] device lo entered promiscuous mode [ 456.564975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:47 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x11]}}, 0x1c) 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x12}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r1, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000440000), 0x0, 0x0, &(0x7f0000000000), 0x10) 03:33:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:33:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) r1 = shmget(0x2, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x3, 0x80000001, 0x1}}, 0x28) fcntl$getown(r0, 0x9) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0x4d, "f0076a", "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"}}, 0x110) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000340)={@remote, @local}, &(0x7f0000000380)=0xc) pwrite64(r2, &(0x7f00000003c0)="9f14be37b1fc802687b16e8e0b834ac97259ecbf4b3cfdbda17b83329d359cafd7872cb747a7754e6c1fdd63d9118ac7708e157afa5eb0ace6eb73e48c0eaa892ed99b9fbce964ec716f0f9bb0f46f2fe9fdd0e04da1d5", 0x57, 0x0) syz_mount_image$hfs(&(0x7f0000000440)='hfs\x00', &(0x7f0000000480)='./file1\x00', 0x7f, 0x2, &(0x7f0000000640)=[{&(0x7f00000004c0)="a0d83bea6209922287bee2dc19e3aef8ef2be92039da60d6ff569362d7caf4e4339834caa8387e4d2526e60f55b5eb71c7749e5620997b5ed63be5393f86aaaa232e65efa93506dd88291024daac993d50557ff0c04ed80720b8f3ba0dbf787ea280295de841df81419efac6bbf7b0d9f47d9febd8ac5687b2a0bb72f178d67604740cb5306c8cba31a04629ba200485112d2ffd1e28e43b7c000f3ba0236386cd693b4dfd44560414bdc0f8e03fe252e2950f1fdd41052c3c7f118f34d91564e76350c365da219fff7f50c6ba55491164019232be750be42c2ce1befdfd77f47a", 0xe1, 0x8}, {&(0x7f00000005c0)="1c484dbcacba28a237974fcc48423a8af0c3f5799387f5ca8a5b3de232e4246fe9d025214f75e0e35b27252e83a168b344fa8db21bb03dfbc4cae754cd6fb2d67132433d35dfb319135f9bb6a59a702516e616c37ea97d3f0b5f9b2b9c54de51c89676e4362c03448b5dcbd37a9cb33e8b5521ce1cf3f71224", 0x79, 0x5}], 0x0, &(0x7f0000000680)={[{@session={'session', 0x3d, 0x5}}]}) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10) write$P9_RFLUSH(r0, &(0x7f0000000700)={0x7, 0x6d, 0x2}, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x20000, 0x52) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r0, 0x4) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000007c0)={0x9, 0x4, 0xe114}) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) utimensat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000880)={{r4, r5/1000+10000}, {0x0, 0x2710}}, 0x100) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000008c0)) connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x6) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000a00)=0xa4) rename(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file2\x00') syz_read_part_table(0x200, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="447a640e838f85b4767abec7ec16162d4970965e111f6f5f15fbcb0c0301f9340ed0e4e56499b636842fd5c54a37fee8ffa2f0014f57c8d66bf2cdcc1ef234c778b483021cdcf4bee12abe66dce1326558f6b491cff8b001c30f57f370a8a874f40acd9ffdf9fbcd0a4c870ebdc78d48005048311c13fbb9729ef7c07da3d1786408be598231a0cba32657f1d889622a43709112a67af401776ebd22f1b316a6d8c504c0e61a9935b10a54f3ba", 0xad}]) openat(r0, &(0x7f0000000bc0)='./file1\x00', 0x200000, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000c00)={0x80000000}) r6 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x1000) 03:33:47 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0), 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00ffffe73100", 0x101}) 03:33:47 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x100) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'vlan0\x00'}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x5, 0x0, 0x8}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x80487436, &(0x7f0000000000)) 03:33:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1802]}}, 0x1c) [ 456.862958] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 456.870121] tls_set_device_offload_rx: netdev lo with no TLS offload [ 456.876967] binder: 11819:11826 IncRefs 0 refcount change on invalid ref 18 ret -22 [ 456.890571] device lo left promiscuous mode [ 456.901424] hfs: invalid session number or type of track [ 456.906923] hfs: can't find a HFS filesystem on dev loop4 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000080)="025cc80700145f8f764070") syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="000000000000000000000000000000000000000000000000e0e415320000000002009c0126000100000064000000000127008e030c0065000000640000000003b50d0ebf3100c900000064000000007d54c0a92020002d010000df40000055aa", 0x60, 0x1a0}]) 03:33:47 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0xffffffffffffffab) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 456.927968] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 456.942422] binder: BINDER_SET_CONTEXT_MGR already set [ 456.945821] binder: 11819:11842 IncRefs 0 refcount change on invalid ref 18 ret -22 [ 456.964754] binder: 11819:11826 ioctl 40046207 0 returned -16 03:33:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x147}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() sched_getattr(r3, &(0x7f00000000c0), 0x136, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x9}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="025cc80700145f8f764070") setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e22, 0x8, @empty, 0xe37e}, {0xa, 0x4e21, 0x35, @local, 0x3}, 0x200, [0x3, 0x3, 0x6, 0x2, 0x10001, 0x5, 0x101, 0xffffffff]}, 0x5c) get_robust_list(0x0, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fffa, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) truncate(&(0x7f0000000040)='./file0/file0\x00', 0xb0c) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x2000000000}}}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43) [ 456.988600] hfs: invalid session number or type of track [ 456.994164] hfs: can't find a HFS filesystem on dev loop4 [ 457.026209] loop2: p1 p2 p3 p4 [ 457.029638] loop2: partition table partially beyond EOD, truncated [ 457.067537] loop2: p1 start 1 is beyond EOD, truncated [ 457.072991] loop2: p2 start 101 is beyond EOD, truncated [ 457.078491] loop2: p3 start 201 is beyond EOD, truncated [ 457.083996] loop2: p4 start 301 is beyond EOD, truncated [ 457.117818] binder: 11863:11867 IncRefs 0 refcount change on invalid ref 9 ret -22 03:33:47 executing program 6: r0 = socket$inet(0x2b, 0x8000f, 0x4000) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000240)={0x9, 0x1, 0x80000001, 0x8}) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x101000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x1, 0x0, 0x1}, {0x8, 0x2, 0x5, 0x973a}, {0x8, 0x9, 0x6, 0x106}, {0x3, 0x200, 0x0, 0x5}, {0x0, 0x1f, 0x0, 0xb01}, {0x3a, 0x1, 0x9, 0x6}, {0x8001, 0xffffffffffffff01, 0x0, 0x4}, {0x1, 0x9, 0x686a, 0x9}, {0x24, 0x60f, 0x100000001, 0x2}, {0x9, 0x0, 0xf4e, 0x830}]}) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x1112, &(0x7f0000000500)=""/229, 0xe5}}], 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@local, r3}, 0x14) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000000c0)}, 0x3a02bd9d}}], 0x0, 0x0, &(0x7f00000002c0)}) r3 = semget(0x1, 0x3, 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee00]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x4) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x8000, r4, r5, r6, r7, 0x0, 0x9b}, 0x7, 0x4, 0x2}) [ 457.168131] binder: BINDER_SET_CONTEXT_MGR already set [ 457.178935] binder: 11863:11876 IncRefs 0 refcount change on invalid ref 9 ret -22 [ 457.196497] binder: 11863:11867 ioctl 40046207 0 returned -16 [ 457.269303] device lo entered promiscuous mode [ 457.280216] binder: 11882:11884 transaction failed 29201/-28, size 0-0 line 2969 [ 457.292015] device lo left promiscuous mode [ 457.308450] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000045) [ 457.315619] FAT-fs (loop4): Filesystem has been set read-only [ 457.318587] binder_alloc: binder_alloc_mmap_handler: 11882 20001000-20004000 already mapped failed -16 [ 457.357928] binder: BINDER_SET_CONTEXT_MGR already set [ 457.363342] binder_alloc: 11882: binder_alloc_buf, no vma [ 457.363434] binder: 11882:11884 ioctl 40046207 0 returned -16 [ 457.368962] binder: 11882:11897 transaction failed 29189/-3, size 0-0 line 2969 [ 457.380565] binder: undelivered TRANSACTION_ERROR: 29189 [ 457.388348] binder: undelivered TRANSACTION_ERROR: 29201 [ 457.432570] device lo entered promiscuous mode 03:33:47 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2000000000000]}}, 0x1c) 03:33:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x5}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:47 executing program 2: r0 = epoll_create1(0x0) ioctl$void(r0, 0xc0045878) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') r2 = epoll_create1(0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) 03:33:47 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xcfe}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0xa5}, 0x8) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00t\x00', 0x101}) 03:33:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1f, 0x4) r1 = socket$inet6(0xa, 0x6, 0xfffffffffffffffe) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 03:33:47 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x11, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e22, 0x0, 'wrr\x00', 0x10, 0x20, 0x5c}, {@multicast1, 0x4e20, 0x3, 0x401, 0x100000001, 0x3}}, 0x44) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6, @random="60ee12e8b856"}, 0x10) socketpair$inet(0x1e, 0xf, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xa00c0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2, 0x700, 0x1, 0xfff}, 0x4}, 0x20, 0x1, 0x0) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) listen(r2, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 03:33:48 executing program 1: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = dup2(r0, r1) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) dup2(r1, r2) [ 457.735325] device lo left promiscuous mode 03:33:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9139}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x94a}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2180}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001e003303000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 03:33:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x27a8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e66732c00f4dd44a9c5162baeb486ccae1172b9fec713c9c27bb205bf5cdfa739d7803946e7e45bdc3329f5761ccf72f5015227d59a9f8703ce82382f5f20643fc1d15e6792776985518b56ad46e79835da727694bcdd88dcdc9f89cfffc317465903cafc48d8ccb38e5667b06ec614349d7c16187637a3d72631139f65e68549"]) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) [ 457.767969] binder: 11915:11920 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 457.768308] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 457.807414] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x8912, &(0x7f0000000340)="025cc8070080259e8d4070") getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x3, 0x7}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@srh={0x5e, 0xe, 0x4, 0x7, 0xfff, 0x50, 0xd1f, [@remote, @mcast2, @ipv4={[], [], @multicast2}, @mcast2, @empty, @empty, @ipv4={[], [], @local}]}, 0x78) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8, 0x30}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xfffffffffffffff7, 0x2, 0x7, 0x8, r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x6aba, 0x2, 0x9}) [ 457.815312] binder: BINDER_SET_CONTEXT_MGR already set [ 457.827180] binder: 11915:11932 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 457.848350] binder: 11915:11920 ioctl 40046207 0 returned -16 03:33:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x64, 0xe3b}, 0x20}}, 0x0) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x63}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 457.866773] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 457.877537] binder: 11915:11932 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 457.902422] FAT-fs (loop2): FAT read failed (blocknr 32) 03:33:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4002000000000000]}}, 0x1c) [ 457.949992] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 457.962445] binder: 11955:11956 IncRefs 0 refcount change on invalid ref 99 ret -22 [ 457.987287] binder: BINDER_SET_CONTEXT_MGR already set [ 457.988844] FAT-fs (loop2): FAT read failed (blocknr 32) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x2}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet6_int(r1, 0x29, 0x100000000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000002880)=0x373) [ 458.004160] binder: 11955:11960 IncRefs 0 refcount change on invalid ref 99 ret -22 [ 458.010110] binder: 11955:11956 ioctl 40046207 0 returned -16 [ 458.027332] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 458.041056] device lo entered promiscuous mode 03:33:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000000fd00", 0x101}) 03:33:48 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000080)={@multicast1, @multicast2, @broadcast}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x2, 0xffffffffffff0000}, 0x8) 03:33:48 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0xffffffffffffff41, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0xfffffffffffffff5, 0x10000) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000340), 0x4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000200)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000003c0)={0x77359400}, 0x10) 03:33:48 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000300)=""/194, 0xc2, 0x120, &(0x7f0000000200)=@nfc={0x27, 0x1, 0x1, 0x6}, 0x80) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='io.bfq.weight\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) read(r2, &(0x7f0000000400)=""/231, 0xfffffed2) 03:33:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000000000)=0x4) userfaultfd(0x800) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8b2e, 0x800) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101180, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x4) [ 458.132748] binder: 11968:11975 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 458.146190] device lo left promiscuous mode [ 458.160529] binder: BINDER_SET_CONTEXT_MGR already set 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00'}) [ 458.179787] binder: 11968:11975 ioctl 40046207 0 returned -16 [ 458.181481] binder: 11968:11982 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 458.214935] binder: 11968:11982 IncRefs 0 refcount change on invalid ref 0 ret -22 03:33:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="88a5843fc524eaf5877af8dbb131123ca8ff9c33208ace4fbbcd37474c6937a912d7000000000000000000") r1 = socket$inet6(0xa, 0x805, 0x0) sendto$inet6(r1, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400000, 0x41) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)={@host}) connect$inet6(r1, &(0x7f00006f7000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8200, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r4, 0x410, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) write$FUSE_DIRENT(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x118) close(r3) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @loopback, 0x3ff}, {0xa, 0x4e24, 0x7, @mcast2, 0x10000}, 0x400, [0xd21, 0x3, 0x4, 0x80000001, 0xffff, 0x8001, 0x2, 0x6]}, 0x5c) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x3}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 458.297488] binder: 12004:12006 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 458.316511] binder: BINDER_SET_CONTEXT_MGR already set [ 458.322966] binder: 12004:12009 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 458.327465] binder: 12004:12006 ioctl 40046207 0 returned -16 [ 458.350891] device lo entered promiscuous mode 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x5400}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:48 executing program 1: setitimer(0x2, &(0x7f0000000fe0)={{0x100000000000}, {0x77359400}}, &(0x7f0000000440)) r0 = dup(0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x7, 0x100000001, 0x3f, 0x1f, 0xc34, 0xffff, 0x1, 0xff, 0x2, 0x15}) setitimer(0x2, &(0x7f0000000380)={{0x77359400}, {0x0, 0x7530}}, &(0x7f00000003c0)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x20000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 03:33:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x5c, 0x100000001, "9b8aecb323ea2dd0b4067c0ac740ae267495b3d4209b06b61276b48aa290dd56153fabcb2dc4f6119ab682ed735755667fe295412de7fb1b85b5db2d504a554de3bc48c93cd5f0d0d0eae76375371f1057b5e9bf"}, &(0x7f0000000100), 0x1000) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x8, @loopback}]}}}]}, 0x48}}, 0x0) 03:33:48 executing program 6: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0xfffffffffffffc5d) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x181) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r2, 0x42, "db0e3d", "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"}}, 0x110) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 458.377454] device lo left promiscuous mode 03:33:48 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x401}, &(0x7f0000000080)=0x14) r0 = userfaultfd(0x0) r1 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000200)=0x0) rt_tgsigqueueinfo(r1, r2, 0x12, &(0x7f0000000240)={0x10, 0x0, 0x8, 0x9}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x401, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "1cb888f2387873532a38ac35cc8e870bd243b5f24aed32dcf3f420057bb3320033ec27858d90e28d79ea1d9443bc55b67ca6e26cd3aa06f70357bbbe22933296a2d6151cbb146ecd46cd50a56198fc284d200486999c34bc6728fd912d040dab8bebbceaa33b4ab1ebca847713d931ef13bd990ade41e28b63875889c7cd74447839e672673f0f038cf334b8be978cc136607c4f1be0ce845f38e275a1493debedc3079d50c0592cb1c3e9b73fe13f16fe64fdc4daf59daec10ded808710120e96784efc933bbd08ed0e2f8546192e0d530daddc8b8916b4dbd85f3c9d883fd010b3536016e2d7188ed3ac758c3222f1c00904cabe3736b5"}, 0xfc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000004, 0x152, r4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x60, &(0x7f0000000000), 0xc) close(r4) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") close(r4) ioctl(r0, 0x3, &(0x7f00000002c0)="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") [ 458.464046] binder: 12017:12024 IncRefs 0 refcount change on invalid ref 21504 ret -22 [ 458.498274] binder: BINDER_SET_CONTEXT_MGR already set [ 458.506389] binder: 12017:12031 IncRefs 0 refcount change on invalid ref 21504 ret -22 [ 458.514688] binder: 12017:12024 ioctl 40046207 0 returned -16 [ 458.572448] device lo entered promiscuous mode [ 458.578493] netlink: 'syz-executor4': attribute type 8 has an invalid length. [ 458.589158] netlink: 'syz-executor4': attribute type 8 has an invalid length. 03:33:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1503000000000000]}}, 0x1c) 03:33:49 executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') setresuid(0x0, 0xee00, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000040)={&(0x7f0000000180)="4dc99e1aff84277ed3a192641a6a334ca306caedf9e4d7e22943ccce6ca4f8bfada3fd97467242c78a0d3a5921b4f364bcae3241117c8000d09bd9a52e5ad9debc9fa951adfff7205e3465da1b09350474b27e8b8ccfafdb97a587dab91749cebb8952b4d7edc63b29cd823b", 0x6c}) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000) 03:33:49 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000007000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x7}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000007fffffff00", 0x101}) 03:33:49 executing program 4: getpgrp(0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x10007c) read(r1, &(0x7f0000000040)=""/20, 0x14) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:33:49 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0xffffffffffffff51) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0xff92, &(0x7f0000002940)=[{&(0x7f0000002780)=""/158}, {&(0x7f0000002840)=""/135}, {&(0x7f0000002900)=""/21}], 0x0, 0x0, 0x0, 0x8e9}, 0x5}, {{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000002740)=""/43, 0x2b}, {&(0x7f0000000500)=""/255, 0xff}], 0x1d1, &(0x7f0000002640)=""/69, 0x45, 0x6}, 0xd8}], 0x2, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/142) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tls\x00'}, 0x10) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000280)) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0x9, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x4, 0xfffffdea) [ 458.907361] device lo left promiscuous mode [ 458.911360] binder: 12045:12057 IncRefs 0 refcount change on invalid ref 7 ret -22 [ 458.929268] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 458.939222] binder: BINDER_SET_CONTEXT_MGR already set [ 458.943643] binder: 12045:12063 IncRefs 0 refcount change on invalid ref 7 ret -22 03:33:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaabd6, 0x0, &(0x7f0000000140), 0x69) r3 = memfd_create(&(0x7f00000000c0)='/dev/kvm\x00', 0x3) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000040)={0x6, 0x7f, 0x1, 0x10000}) 03:33:49 executing program 2: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1a391ea7b1a64ff9, 0x84) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='keyring\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000000c0)={0x4cbc1244, 0xffffffffffffffff, 0x5, 0x4}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000001c0)=""/30, &(0x7f0000000200)=0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000, 0x0) [ 458.951698] binder: 12045:12057 ioctl 40046207 0 returned -16 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x54}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 458.984089] binder: 12045:12063 IncRefs 0 refcount change on invalid ref 0 ret -22 03:33:49 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000080000000900000042842df9edda67c12c8e5471d948d058160c2e89b18df2c1bc96d4c5c82acbd0e884e656d99f41da51bc0d8fc638b1443de7e818ff8556406b3cbc70405cc3d90800000000ffcd1cdd6f7583a4f2ff7d151d51228078dc24c14c58d2379b67f96c68d9b7ce256ff8d6d701b9440b0c64f17e5ad9555315cf20e8a4c309cbb51275bf927a8798bed1adeadd5e06f23157c5b1115d587fe608a6cb3800bf4c79335550d196be343c856c87616ad6af60911a73fe557a196bc57c9543d5f624faaff801a3e3184c"], 0x14}, 0x0) 03:33:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8030100000000000]}}, 0x1c) 03:33:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000740)={0x2, 0x4, 0xc9f8, 0x3, 0x5, 0x8}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003c00)={&(0x7f0000000040), 0xc, &(0x7f0000003bc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="075e00000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400020004000100240001006c625ffffffffffffffffb000200000000000000000008006f4590cc03001b0000000840040000000000080006bec91447abb66d461ec037265eea57f1e1855b6a3b47c0f0a16e562c5f784fd89498fda495f1528700e98bec1d8e4b6db8487b744a93909a1bc3997d2b6c1f0c38f5000000000000000200000000", @ANYRES32=0x0], 0x60}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000030}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x3e0, 0x2f, 0x100, 0x70bd27, 0x25dfdbff, {0x13}, [@typed={0x14, 0x7d, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @generic="041c91d78a3fdfb66b82241ca261be09d08002c9d73c698cb9f1", @generic="08ef85598aa5dfafe9e8150d192b9eeb3cc6b483ce31dc54e6f1031d6767c5beeb2db9ecae36848a41b32390f67ed53026aacc16ae2ed6d4b6ea0a2aec43d81ad563d88e0178ad90d57c90dbfe2293e57febade01110d269d012fae6114d292b22ec181d2a020cbd1f51aa88f3869b4bb5754ac3f7ad634a107ac7929821cb6e96a7217bc52784e1a1a396f4ff2615f311f3d66e229296cd4c5df7f9c4414db184c060bbb64a3b783b37817046d00de8aad6d0c77a77bd7a0a41cb5ab099e9366f075b19d70e03ac57e3310d5c6a", @generic="051762e59e20e4b4711080e70ae55f0dd491a09f760931c578e1e37e3b5e1e82eb6fb48ceaf7e64a7d2073fe51c8e40a094992b0128d0297af871befd2fa558f66c7fce3689cf0d3d9208f29934046e6fbeba75d2f806d966a1ffc0b42ce86ea79812ac5f607dda04ee1ad42847197ecbc7f91dfd9faa7bc3bd061038c85b36c917167553929f2cebc65a8da8478d351bca81e216dd3abec1ef78ae6", @nested={0x5c, 0x62, [@typed={0x14, 0x0, @ipv6}, @generic="fa92155cb779547f60be90c3456da8dbbfd034e8d220fd7049533be413", @typed={0x8, 0x24, @u32=0x51ff8f8f}, @typed={0x8, 0x62, @uid=r4}, @typed={0x8, 0x1e, @str='\x00'}, @typed={0xc, 0x90, @u64=0x200}]}, @nested={0x10, 0x6e, [@typed={0xc, 0x93, @u64=0x7}]}, @generic="2be8b44060c3dff29090b285ad6d420f3bae080d9e8cde7852f10d4c7595c23b352f4bcd6fdd9753270908269b48e5850ee1105c828c2f56fd347199350f057d9ebc9c8146bc57b964d15e27d255f58dff94a9b0361049f4c215f35b8da2f2ebfc0c35e813dae4ca7ed4796fb599063f764ffdc1b99cf03c5ef2abce0573c17e10d147a7433df6cd994bdf9c896bd8187b4cd166cb47c1", @generic="39d965271dfba9536d61096463fbfc93dc38bbd0c0daa9aa4a5617ba3df100beaa88220a778dc9c1cd669be5e8763c6564126c8ad939057eea11026c97ecab83e4536b16c4722ded73680f385dbfe1ad9d68e7a5dba16a7ef0d7e52cd4b0d836e6e5394b154f3db2661062ea64f72aea58c8b651a7c811a2a62e4aa28f39a32a79e8f5b4c85ce649b2b46581bdecd4bdde95e87aac2421d3502f82e1ed173a31ef67346fd9862484eb4222fa6d13d43993901b217eb90a89b383ccc3dccbb8b59a4331", @typed={0x6c, 0x56, @binary="e4950f49eaf46aeecf64a925bcecfa74f41214c056b085ad9ca5d06b5824bbed47a1c132b97ff5ec4407d82447911fa3101ebd768846ea6af855467823071722a6cd49ec46f7988550e37d5f30c6ca0cd6800cb08a7778defb167df54336b1c8d810d9f090"}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x1}, 0xd0) [ 459.093270] binder: 12079:12085 IncRefs 0 refcount change on invalid ref 84 ret -22 [ 459.101212] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 459.127687] binder: BINDER_SET_CONTEXT_MGR already set 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0xa}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) 03:33:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="eb58906d6b66732e66617402020120000200038000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00']) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x101000) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)={0x3, [0x0, 0xfffffffffffffff8, 0x20]}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/71) [ 459.138824] binder: 12079:12089 IncRefs 0 refcount change on invalid ref 84 ret -22 [ 459.153682] binder: 12079:12085 ioctl 40046207 0 returned -16 [ 459.161546] binder: 12079:12089 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 459.174146] device lo entered promiscuous mode [ 459.195932] device lo left promiscuous mode [ 459.258913] binder: 12099:12103 IncRefs 0 refcount change on invalid ref 10 ret -22 [ 459.264083] FAT-fs (loop1): bogus logical sector size 514 [ 459.272383] FAT-fs (loop1): Can't find a valid FAT filesystem [ 459.292361] FAT-fs (loop1): bogus logical sector size 514 [ 459.297979] FAT-fs (loop1): Can't find a valid FAT filesystem 03:33:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0xffffffffffffffff, {0x2, 0x4e24, @rand_addr}, {0x4, 0x0, @remote}, {}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='bond_slave_0\x00'}) socketpair(0x5, 0x3, 0xfffffffffffffffd, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000200)=0x10200) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000003c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0x98, 0x32, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x8000, 0x1ff}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa51b}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x481aff4}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0x34}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xffffffff, 0x8000) 03:33:49 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, [], 0xf}, 0x571}}, 0x2, 0x101, 0x36d4, 0xebf, 0x8000}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r1, 0x1, "ae"}, &(0x7f0000000180)=0x9) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x72, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000640)={{0x8, 0x7, 0x0, 0x3061, 'syz0\x00', 0x8000}, 0x1, [0x9df9, 0x900000, 0x9, 0x10001, 0x7fff, 0x5, 0x7f, 0x9, 0x3, 0x3, 0xff, 0x6, 0x8, 0x1, 0x7, 0x6, 0xffffffff, 0x2, 0x3, 0x4, 0x6, 0xafcc, 0x1, 0xffffffff, 0x1, 0x77, 0x8000, 0x7, 0x40, 0x3, 0x5, 0xec6, 0xc6, 0xdf, 0x4, 0x54, 0x2, 0x9, 0x8, 0x2, 0x1, 0xfffffffffffffffa, 0xb72, 0x4, 0x1, 0x0, 0x4, 0x1, 0x61e6, 0x401, 0x3, 0x6, 0x6, 0x80, 0x4, 0x1, 0x9, 0x10001, 0x9, 0x9, 0xffffffff, 0x6, 0x81, 0x40, 0x894a, 0x6, 0xfff, 0x2, 0x6, 0x1f, 0xdf4, 0x8000, 0xffffffff, 0xffffffffffff2b45, 0x3, 0x87, 0x5, 0x200, 0x3, 0xff, 0x20, 0x5, 0x20, 0x1, 0x9, 0x95ac, 0x2, 0x7, 0x8, 0x2, 0x29, 0x7ff, 0x7, 0x6, 0x3, 0x2, 0x7, 0x5, 0x10000, 0x401, 0x3, 0x8, 0x8, 0x10000, 0x81, 0x80000001, 0x100, 0x400000, 0x8, 0x7, 0x0, 0x1000, 0x1000, 0x800, 0x35, 0x3, 0x6, 0x7f, 0x81, 0x2e, 0x7, 0x300000000000, 0x7, 0xff, 0x7ff, 0x0, 0x0, 0x5], {r3, r4+10000000}}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:49 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 03:33:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x5555]}}, 0x1c) [ 459.310200] binder: BINDER_SET_CONTEXT_MGR already set [ 459.316486] binder: 12099:12113 IncRefs 0 refcount change on invalid ref 10 ret -22 [ 459.342299] binder: 12099:12103 ioctl 40046207 0 returned -16 03:33:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x6}, @increfs], 0x0, 0x0, &(0x7f0000000180)}) [ 459.366455] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 459.420998] tls_set_device_offload_rx: netdev lo with no TLS offload [ 459.432667] binder: BINDER_SET_CONTEXT_MGR already set [ 459.442611] binder: 12130:12134 ioctl 40046207 0 returned -16 [ 459.452030] binder: 12130:12134 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 459.469978] binder: 12130:12134 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 459.479336] device lo entered promiscuous mode 03:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\r.\x00', 0x101}) [ 459.570368] device lo left promiscuous mode [ 459.634834] device lo entered promiscuous mode [ 459.641910] device lo left promiscuous mode [ 459.701098] device lo entered promiscuous mode 03:33:52 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x2, 0x3fc5, 0x8, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/252, &(0x7f0000000500)=0xfc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r1, 0x7, 0x4, 0x1000, 0x8001, 0x3, 0x80000001, 0x8, {r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1, 0x7f, 0x8, 0x5, 0x7}}, &(0x7f00000002c0)=0xb0) r3 = openat$cgroup_int(r0, &(0x7f00000001c0)="6d656d6f72792e6c6f77008a1201a40b06a2932f519392229f8a2f2f02b279529630324c7d40e777bab07c", 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x4b, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x0, 0x4000000000000000, [0x0, 0x0, 0x20000000]}}, 0x20) 03:33:52 executing program 1: timer_create(0x1, &(0x7f00000001c0)={0x0, 0x33, 0x0, @thr={&(0x7f0000000080)="e9054014049624426193a414b3a6bb9f14dc6734a2ece88a3cd0007b920445934297176d4be74c4cf043a999a28474489e99b2f77b9100673032d5890c3078aed94bea0ca1365c973678aa6394daee50c35c5a0c1d2406dc31c08eb74191c6fc44196e11fa93536af4e18cabc9b738d9b4b2d2f92618d7e9d1e3e50cc9fa40103dad5d334684fe5164dd7fcd37e20939a35baf41b86becb02a79ac275c0de6e772f6730b31c01ff821f1aec61ae35c44bfbc2651732badc985f397ddb67b5e7ad87643b0cf93dfd5a93c842d6a0152f3b3641f040c3f6bcb5f2f6f05934da301575556", &(0x7f0000000180)="ec44b39af26c09a1f3df9c9df974f681532289aab49e51"}}, &(0x7f0000000200)=0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0xc, 0x3}, &(0x7f0000000300)) timer_gettime(r0, &(0x7f0000000340)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000240)={0x0, {0x77359400}, 0x7f, 0x9}) 03:33:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x300000000000000]}}, 0x1c) 03:33:52 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x44, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6e61740000008d3b455e0000000000000000000000000000000000000000000003000000000000000000000000000000000000000000009bb3ffffffffffff000000000000000000000000000000000000000000000000006ce1ff5949a009b701e18ce42ca77d8ff7f3184864e24dddcd38c52e1fec82809d36ce4193d6a2417adce0c37a2392c5f386fae3817b8b2e6cff917a81ad4377ca6dace57d9e64375ec9e6df2cf1f54f478bc9d2e46d6bef29053add887ecb57798ab8bf064a4d0c1abc0487032cd174d0bdf1"], 0x58) 03:33:52 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x800) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x33, 0x3, 0x0, {0x0, 0x12, 0x0, 'eth1*^proc%system^'}}, 0x33) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0xe75f23e1cee22b57}) 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046312}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r1, 0x6}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x6, 0x8, 0x7, 0x100000000, 0x5, 0x101, 0x9}, &(0x7f0000000140)={0x900000, 0x8000, 0x80000000, 0x1, 0x0, 0x3, 0x2ba, 0x100000000}, &(0x7f0000000180)={0x1ff23e27, 0x7, 0x1, 0x8000, 0xb33, 0x1, 0x20, 0x5}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={0x800}, 0x8}) r2 = timerfd_create(0x1, 0x0) unshare(0x400) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00'}, &(0x7f00000000c0)=0x44) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000004c0)=""/227) timerfd_settime(r2, 0x0, &(0x7f00000a5ff0), &(0x7f000010bff0)) 03:33:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000400000000100", 0x101}) 03:33:52 executing program 2: capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)) delete_module(&(0x7f0000000000)='wlan0}em0md5sum\x00', 0x800) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000e1ffffbb0000000059f1150520bb2ddecc4e0c7cce859a0000000000010000001800000000950800000000000000000000008a82b212c5acdeca88df7345bef091499d1b10f7b6a8f878db952e5c73ecd585de061d42682719044e9b98c9af08271c21"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xef4d, 0x0) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 461.930848] binder: 12157:12162 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 461.938681] binder: 12157:12162 unknown command 1074029330 [ 461.938879] QAT: Invalid ioctl [ 461.949151] tls_set_device_offload_rx: netdev lo with no TLS offload [ 461.956402] device lo left promiscuous mode [ 461.961269] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2]) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x12, 0x111e00) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x38e}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 461.978543] QAT: Invalid ioctl [ 461.995856] binder: 12157:12162 ioctl c0306201 20000280 returned -22 03:33:52 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f00000004c0)=""/25, 0x8}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f0000000180)=""/12, 0xc}], 0x5, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x27b, 0x4000000007be3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x20000005}) 03:33:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x80301000]}}, 0x1c) [ 462.027284] binder: BINDER_SET_CONTEXT_MGR already set [ 462.043376] binder: 12157:12162 ioctl 40046207 0 returned -16 [ 462.046573] binder: 12157:12183 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.057136] binder: 12157:12183 unknown command 1074029330 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046363}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000380)=0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) [ 462.121453] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 462.132269] binder: 12157:12183 ioctl c0306201 20000280 returned -22 03:33:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x27b, 0x4000000007be3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x20000005}) [ 462.179564] tls_set_device_offload_rx: netdev lo with no TLS offload [ 462.199854] binder: 12204:12207 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.207713] binder: 12204:12207 unknown command 1074029411 03:33:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe00]}}, 0x1c) 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x402000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x1, 0x2}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xe92]}) 03:33:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x202800, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x100, 0x5, 0x7, 0x4, 0x5, 0x9}) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x400400) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000180)) clock_nanosleep(0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8000000000000031, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) [ 462.224954] binder: 12204:12207 ioctl c0306201 20000280 returned -22 [ 462.233397] binder: BINDER_SET_CONTEXT_MGR already set [ 462.255263] binder: 12204:12207 ioctl 40046207 0 returned -16 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046354}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x400000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1d}, @multicast2}, 0x8) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) 03:33:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000180)=@can, 0xfd28, &(0x7f00000035c0), 0x0, &(0x7f0000003680)=""/41, 0x29}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa88000000000086dd60110c1100302100fe8000000000000000000000000000ffff020000000000000000000000000001010090780600000061cb155d00000000ff020100000000000000000000000001fe800000000000000000000000000000"], 0x0) [ 462.326590] device lo entered promiscuous mode [ 462.345214] device lo left promiscuous mode [ 462.361438] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 462.428035] binder: 12232:12234 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.435876] binder: 12232:12234 unknown command 1074029396 [ 462.460510] binder: 12232:12234 ioctl c0306201 20000280 returned -22 [ 462.472384] dccp_v6_rcv: dropped packet with invalid checksum [ 462.485910] tls_set_device_offload_rx: netdev lo with no TLS offload [ 462.492576] binder: BINDER_SET_CONTEXT_MGR already set [ 462.493451] binder: 12232:12253 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.502294] binder: 12232:12234 ioctl 40046207 0 returned -16 [ 462.505673] binder: 12232:12253 unknown command 1074029396 [ 462.518665] binder: 12232:12253 ioctl c0306201 20000280 returned -22 03:33:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000080fe00", 0x101}) 03:33:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000100)={0x4, {{0xa, 0x4e20, 0xd6, @mcast2, 0x2f}}, {{0xa, 0x4e22, 0xfffffffffffffffd, @mcast2, 0x100000001}}}, 0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x71, &(0x7f0000000000), &(0x7f00000000c0)=0x98) close(r2) close(r1) 03:33:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x700]}}, 0x1c) 03:33:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000), 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x24, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4}]}, 0x24}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000017c0)='/dev/input/mouse#\x00', 0x8, 0x420042) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001800)={0x0, 0xffffffffffffffdc, 0x30, 0x100000000, 0x7fff}, &(0x7f0000001840)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001880)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x1000, 0x208000000000000, 0x1, 0x0, 0x46}, &(0x7f0000001940)=0x98) 03:33:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x4004630a}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:52 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0xfffffffffffffeb7) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xfffffd37) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 462.578205] device lo entered promiscuous mode [ 462.585916] dccp_v6_rcv: dropped packet with invalid checksum 03:33:52 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$vnet(r0, &(0x7f0000000640)={0x1, {&(0x7f00000002c0)=""/185, 0xb9, &(0x7f00000003c0)=""/21, 0x1, 0x3}}, 0x68) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x404c534a, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x280b7441}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000540)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, [0x4, 0x0, 0x7fff, 0x9, 0x5, 0x200, 0x10000, 0x1000, 0x3, 0x6, 0x6, 0x1, 0x5, 0xfffffffffffffffa, 0x6]}, &(0x7f0000000240)=0x100) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCSTI(r0, 0x5412, 0x7fffffff) tkill(r4, 0x1000000000013) 03:33:52 executing program 4: inotify_init() chmod(&(0x7f0000000000)='./file1\x00', 0x1f1) linkat(0xffffffffffffffff, &(0x7f000001b000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000017000)='./file1\x00', 0xfffffffffffffffd) [ 462.631392] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 462.644974] binder: 12262:12268 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.652775] binder: 12262:12268 unknown command 1074029322 [ 462.674160] device lo left promiscuous mode 03:33:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000080002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getcwd(&(0x7f0000000440)=""/91, 0x5b) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)=""/229) r2 = fcntl$getown(r1, 0x9) mq_notify(r1, &(0x7f0000000100)={0x0, 0xa, 0x6, @tid=r2}) 03:33:52 executing program 4: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='traMs=fd,rOdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000046f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) open(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) [ 462.696005] binder: 12262:12268 ioctl c0306201 20000280 returned -22 [ 462.704427] binder: BINDER_SET_CONTEXT_MGR already set [ 462.709897] binder: 12262:12287 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.717723] binder: 12262:12287 unknown command 1074029322 [ 462.730647] binder: 12262:12268 ioctl 40046207 0 returned -16 03:33:53 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="87058d83f8eda4edb4b0a36c3547ab4afd0513caefa7764f7b547eb4203505f0a339bd279137841eb18ee6d9d9481239ecb86ae6ff073c9db58ab4b3e9ef31e060c4a61022322cea12b9f47c23f84023c1a70b12902ccde0d7e0618626c523274eb2d3cf032df5c8cb8b", 0x6a, 0xe809, 0x0, 0xffffffffffffff58) 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40486312}], 0x0, 0x0, &(0x7f0000000180)}) [ 462.746889] binder: 12262:12287 ioctl c0306201 20000280 returned -22 03:33:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 462.806400] binder: 12306:12307 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.814262] binder: 12306:12307 got reply transaction with no transaction stack [ 462.821800] binder: 12306:12307 transaction failed 29201/-71, size 0-0 line 2761 [ 462.837970] binder: BINDER_SET_CONTEXT_MGR already set [ 462.850598] binder: 12306:12313 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.856091] tls_set_device_offload_rx: netdev lo with no TLS offload [ 462.858428] binder: 12306:12313 got reply transaction with no transaction stack [ 462.872415] binder: 12306:12313 transaction failed 29201/-71, size 0-0 line 2761 [ 462.880653] binder: undelivered TRANSACTION_ERROR: 29201 [ 462.891890] binder: 12306:12307 ioctl 40046207 0 returned -16 [ 462.901126] binder: undelivered TRANSACTION_ERROR: 29201 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x630c}], 0x0, 0x0, &(0x7f0000000180)}) [ 462.923488] binder: 12314:12319 got transaction to context manager from process owning it [ 462.931940] binder: 12314:12319 transaction failed 29201/-22, size 24-0 line 2845 [ 462.943024] binder: BINDER_SET_CONTEXT_MGR already set [ 462.953936] binder: 12320:12321 ioctl 40046207 0 returned -16 [ 462.963100] binder: 12320:12321 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 462.970300] device lo entered promiscuous mode [ 462.970971] binder: 12320:12321 unknown command 0 [ 462.981314] device lo left promiscuous mode 03:33:53 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 03:33:53 executing program 1: sched_setaffinity(0x0, 0x4, &(0x7f0000000040)=0x8) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xf7, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x989680}, 0x9, 0x7f}) [ 463.022113] binder: 12320:12321 ioctl c0306201 20000280 returned -22 [ 463.032009] binder: BINDER_SET_CONTEXT_MGR already set [ 463.040822] binder: 12320:12326 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.048647] binder: 12320:12326 unknown command 0 [ 463.055707] binder: 12320:12321 ioctl 40046207 0 returned -16 [ 463.072836] binder: 12320:12326 ioctl c0306201 20000280 returned -22 03:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f000000000600", 0x101}) 03:33:53 executing program 6: r0 = socket$inet(0x2b, 0x3, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 463.163819] device lo entered promiscuous mode [ 463.169259] binder_alloc: binder_alloc_mmap_handler: 12314 20001000-20004000 already mapped failed -16 [ 463.179121] binder: BINDER_SET_CONTEXT_MGR already set [ 463.184551] binder: 12314:12316 ioctl 40046207 0 returned -16 [ 463.190255] binder_alloc: 12314: binder_alloc_buf, no vma [ 463.196130] binder: 12314:12319 transaction failed 29189/-3, size 24-0 line 2969 [ 463.205159] binder: undelivered TRANSACTION_ERROR: 29201 [ 463.214330] device lo left promiscuous mode [ 463.219053] binder: undelivered TRANSACTION_ERROR: 29189 [ 463.310344] device lo entered promiscuous mode [ 463.317487] device lo left promiscuous mode [ 463.380321] device lo entered promiscuous mode 03:33:53 executing program 6: r0 = socket$inet(0x2b, 0x6, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r2, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r3 = getpgrp(0x0) getpriority(0x3, r3) sendto$inet(r0, &(0x7f0000000300)='\a', 0x0, 0xc000, 0x0, 0x14a) 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046303}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000002c0)=0x3, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) 03:33:53 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x6, 0xcbe3, 0x1f, 0x0, 0x0, 0x66, 0x0, 0x8, 0x2b7, 0x80000000, 0xc0a, 0x89, 0x1, 0x0, 0x5, 0x7, 0x40, 0x101, 0x3ff, 0x5, 0xdd8, 0x2ea, 0x3, 0xfffffffffffeffff, 0x6, 0x100000000, 0x3, 0xd00, 0x9, 0x20, 0x3ff, 0x200, 0x9, 0x2, 0x5, 0x6eee, 0x0, 0x1f, 0x4, @perf_config_ext={0x3ff, 0x943a}, 0x0, 0x6d95, 0x80, 0x0, 0xcab7, 0x2, 0x20}, r2, 0xb, 0xffffffffffffffff, 0x1) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f0000000200), &(0x7f0000000140)={0x40}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) fadvise64(r0, 0x0, 0x7fff, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='erspan0\x00', 0x10) 03:33:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x14280000000000]}}, 0x1c) 03:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00fffffffe00", 0x101}) 03:33:53 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x7, 0x1) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x3) setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000040)=0x7, 0x4) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setsockopt$inet6_int(r2, 0x29, 0x3b, &(0x7f0000000080)=0x101, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x20102) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)={r4}, &(0x7f0000000340)=0x8) 03:33:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x6, 0x5d}) 03:33:53 executing program 6: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x7f, @multicast1, 0x4e21, 0x3, 'dh\x00', 0x20, 0x800, 0x74}, {@empty, 0x4e20, 0x0, 0x7, 0x1, 0x5}}, 0x44) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 463.531673] binder: 12357:12359 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.536492] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.539508] binder: 12357:12359 unknown command 1074029315 [ 463.562489] device lo left promiscuous mode [ 463.611174] binder: 12357:12359 ioctl c0306201 20000280 returned -22 [ 463.621446] binder: BINDER_SET_CONTEXT_MGR already set [ 463.626889] binder: 12357:12384 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.634675] binder: 12357:12384 unknown command 1074029315 [ 463.640585] binder: 12357:12359 ioctl 40046207 0 returned -16 03:33:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe00000000000000]}}, 0x1c) 03:33:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000764ff0)='/dev/sequencer2\x00', 0x0, 0x0) fchmod(r0, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0xfffffffe}}) 03:33:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046307}], 0x0, 0x0, &(0x7f0000000180)}) [ 463.657574] binder: 12357:12384 ioctl c0306201 20000280 returned -22 [ 463.670128] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:54 executing program 0: r0 = epoll_create1(0x80000) r1 = getpgrp(0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0xfffffffffffffff7, 0x6, 0x33c, 0x3, @tick=0xf2, {0x10001, 0x8}, {0xfffffffffffffffa, 0x7}, @control={0x9, 0x8, 0x10000000000}}, {0xfff, 0x10001, 0x100000001, 0x594f, @time, {0x2, 0x4}, {0x9, 0x3}, @result={0x80000000, 0x7fe000}}, {0x20, 0xffffffffffffff80, 0x2, 0x9, @time, {0xca, 0x1}, {0x0, 0xfff}, @result={0x7f}}], 0x90) fcntl$setown(r0, 0x8, r1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback}, 0x4b) [ 463.709699] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.723604] binder: 12396:12399 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.731522] binder: 12396:12399 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 463.788646] binder: BINDER_SET_CONTEXT_MGR already set [ 463.794485] binder: 12396:12409 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.802295] binder: 12396:12409 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 463.806016] binder: 12396:12399 ioctl 40046207 0 returned -16 [ 463.828846] device lo entered promiscuous mode [ 463.846155] device lo left promiscuous mode 03:33:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r2, r1, &(0x7f000025d000)=0x700, 0x1000) 03:33:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x21000000) inotify_rm_watch(r1, r2) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_adjtime(0x0, &(0x7f0000000000)={0x53, 0xff00000000000000, 0x0, 0x0, 0x0, 0x3}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4eb8b4b7, 0x80) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000001c0)={0x1, 0xbe7, &(0x7f0000000140)="2e662f234a6de78ed1d5d7fe12bed67e6086f90ed3707caaa16226e77747fa3fa76a3c0198be1a5b0d8e8fb6", &(0x7f0000000180)="f032270627d78a", 0x2c, 0x7}) 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40406300}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:54 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x100000000, 0x4) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0)) epoll_create1(0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000180)="539e227987f3b45e5919ce4d8f4c0bb316df4f9d4936ab73e8ffc6fa42037c48f1ba9ec05525fa", 0x27) 03:33:54 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x100000000000000]}}, 0x1c) 03:33:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x8}, 0xfffffffffffffff8}}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_setup(0x1, &(0x7f0000479000)=0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0xa00, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0xf7a0, 0x0, 0x1000}, 0x4) io_submit(r4, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="16", 0x1}]) [ 463.926273] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.940804] binder: 12421:12425 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 463.953826] binder: 12421:12425 got transaction to context manager from process owning it [ 463.962273] binder: 12421:12425 transaction failed 29201/-22, size 0-0 line 2845 03:33:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2080, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0x99, &(0x7f0000000100)=""/153}, {0x0, 0xb5, &(0x7f0000000340)=""/181}, {0x6000, 0x97, &(0x7f0000000400)=""/151}]}) read(r0, &(0x7f0000000240)=""/224, 0xfffffc71) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) dup2(r0, r2) [ 463.977432] binder: BINDER_SET_CONTEXT_MGR already set [ 463.992751] binder: 12421:12435 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 464.001036] tls_set_device_offload_rx: netdev lo with no TLS offload [ 464.008054] binder: undelivered TRANSACTION_ERROR: 29201 [ 464.014777] binder: 12421:12425 ioctl 40046207 0 returned -16 [ 464.028809] binder: 12421:12435 transaction failed 29189/-22, size 0-0 line 2854 [ 464.036512] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00p\x00', 0x101}) 03:33:54 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x300]}}, 0x1c) 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40486311}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2080, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0x99, &(0x7f0000000100)=""/153}, {0x0, 0xb5, &(0x7f0000000340)=""/181}, {0x6000, 0x97, &(0x7f0000000400)=""/151}]}) read(r0, &(0x7f0000000240)=""/224, 0xfffffc71) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) dup2(r0, r2) 03:33:54 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='}{.selinuxposix_acl_accesskeyring#\x00', 0x3) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/185) prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x903985409d1dd2e5) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) [ 464.129895] device lo entered promiscuous mode 03:33:54 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="e980ca31ae944e8903b3f38a13cbfa3f8323b757d9e96dbaf8b811418272952569e7fe238c9b8adae5a22f1cba11bf8c20a5da87110d8baba184ef3f6c08e790b99dc58f160249ee5eaafef6679117207d54ec096b04dda97d3c938ae21b23d92e92885fcb96157c241e0ec2637ea3169b5ab2dc650f9c71a7f035d6bb258e59bbc10081b387745770a82ca916f6fe315dd41a10f19cd9c19c8dfbf45828a5abe3b5c7b2e90c0672934c5bccb4247f3840db06811312f45db1d415dd3368b92a61acabe7df834ab0f658e42fd35f0e1c260a79", 0x1, 0xe805, 0x0, 0x2f2) 03:33:54 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x100000004, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6(0xa, 0x2, 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f00000002c0), 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = fcntl$getown(r2, 0x9) sched_getaffinity(r3, 0x8, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x20}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 464.195402] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 464.209893] binder: 12456:12460 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 464.232014] device lo left promiscuous mode 03:33:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0xffffffffffffff9c}, 0xffffffffffffff92) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'gre0\x00', 0x400}) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2080080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2d}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000230000000002800000850000000000fc0095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) write$P9_RLERROR(r1, &(0x7f00000005c0)={0x9, 0x7, 0x2}, 0x9) 03:33:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2711}, 0x80) poll(&(0x7f0000000140)=[{r0, 0x1002}, {r0, 0x4001}], 0x2, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x8, 0xae6, &(0x7f00000000c0)="efaae7ea3fec3f95407fa3f304c024b9393708277833ac33b0947583edccb5cc01d9975216c14f2719526df0314fbeb6bf0b401266a30e0b996c45b253c7b9c04d7c703e", &(0x7f0000000140), 0x44}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x288a0f33}}, 0x6, 0x3, 0x8, 0x2, 0x7f}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x0, 0x9, 0x1, 0x7f, 0x400, 0x34af2b66, 0x800, 0xa07, r3}, &(0x7f0000000440)=0x20) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000002c0)={0x9, 0x7, 0x7, @random="87429d0ee24c", 'lo\x00'}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0xff) [ 464.240129] binder: 12456:12460 got transaction to context manager from process owning it [ 464.248552] binder: 12456:12460 transaction failed 29201/-22, size 0-0 line 2845 [ 464.267917] tls_set_device_offload_rx: netdev lo with no TLS offload [ 464.302207] binder: BINDER_SET_CONTEXT_MGR already set [ 464.311273] binder: 12456:12483 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 464.328036] binder: undelivered TRANSACTION_ERROR: 29201 [ 464.331762] binder: 12456:12483 transaction failed 29189/-22, size 0-0 line 2854 [ 464.335870] binder: 12456:12460 ioctl 40046207 0 returned -16 03:33:54 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000380)=0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000880)=0xe8) linkat(r0, &(0x7f00000009c0)='./file0\x00', r0, &(0x7f0000000a00)='./file0\x00', 0x400) getgroups(0x6, &(0x7f00000008c0)=[0xee00, 0xee01, 0xee00, 0xee00, 0xee00, 0x0]) sendmsg$unix(r0, &(0x7f0000000980)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="7d948c625a56b3e1c0eef2559f611a2f81d362f42d81664846eea58bbd3dbe25add90d0e91fc3de61fd50370e92052b63b4c0141ac", 0x35}, {&(0x7f0000000400)="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", 0xfe}], 0x2, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x20040000}, 0x40) r10 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r10, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r10, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r10, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r10, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r10, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:54 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000000, 0x40102) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4940, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x5, 0xffffffbfffffffff, 0x4, r1}, 0x17) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10) [ 464.352164] binder: undelivered TRANSACTION_ERROR: 29189 03:33:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x630d}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:54 executing program 4: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x0, @multicast1}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={r2, 0x1, 0x101, 0x7, 0x8, 0x34, 0x5}) 03:33:54 executing program 1: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f7f"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 464.456593] binder: 12501:12503 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 464.464494] binder: 12501:12503 unknown command 0 [ 464.470534] tls_set_device_offload_rx: netdev lo with no TLS offload [ 464.478665] binder: 12501:12503 ioctl c0306201 20000280 returned -22 [ 464.510237] binder: BINDER_SET_CONTEXT_MGR already set [ 464.517670] binder: 12501:12512 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 464.525534] binder: 12501:12512 unknown command 0 [ 464.526808] binder: 12501:12503 ioctl 40046207 0 returned -16 [ 464.557747] binder: 12501:12512 ioctl c0306201 20000280 returned -22 [ 464.566340] device lo entered promiscuous mode [ 464.598899] device lo left promiscuous mode [ 464.738587] device lo entered promiscuous mode 03:33:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @dev}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0x2}, r1}}, 0x30) 03:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046302}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:55 executing program 4: r0 = socket(0x10, 0x2, 0x40000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setreuid(r1, r1) r2 = memfd_create(&(0x7f00000001c0)="0099e62aaf0000000000", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000200)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=""/196, &(0x7f0000000180)=0xc4) 03:33:55 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x7f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x28402, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xef7}, 0x8) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x84) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) r3 = dup(r2) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000001cc0), 0x0, &(0x7f0000000000)=""/225, 0xe1, 0x9}, 0x7c1}], 0x1, 0x0, 0x0) 03:33:55 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x3f, 0x3, 0x16, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x7, 0x9, 0x7fffffff, 0x5d385980, 0x9}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb6, 0x7fff, {0x6, 0x7f, 0x2d1b, 0x3ff, 0x0, 0x200, 0x0, @in6=@dev={0xfe, 0x80, [], 0x1d}, @in=@rand_addr=0xcf}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x4, {0x6, 0xff, 0x3, 0x81, 0x0, 0x6, 0x0, @in6=@mcast2, @in=@local}}]}, 0xb0}}, 0x8000) close(r2) 03:33:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00fec000", 0x101}) 03:33:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4002]}}, 0x1c) [ 465.171238] device lo left promiscuous mode [ 465.177562] binder: 12534:12538 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.185346] binder: BC_ACQUIRE_RESULT not supported [ 465.191881] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 465.213194] binder: 12534:12538 ioctl c0306201 20000280 returned -22 03:33:55 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x80) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0xf000, 0x3272ef1576de8f76, 0x3, 0x80000001, 0x1}) socketpair(0x16, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x5c, 0x8001}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040), 0x8) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3eb, 0x4) [ 465.229408] binder: BINDER_SET_CONTEXT_MGR already set [ 465.235167] binder: 12534:12558 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.242945] binder: BC_ACQUIRE_RESULT not supported [ 465.251677] binder: 12534:12538 ioctl 40046207 0 returned -16 03:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x4008630a}], 0x0, 0x0, &(0x7f0000000180)}) [ 465.273585] binder: 12534:12558 ioctl c0306201 20000280 returned -22 [ 465.283663] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffe0]}}, 0x1c) 03:33:55 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x7f) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'ip6gre0\x00', 0x3}, 0x18) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10) syz_mount_image$minix(&(0x7f0000000540)='minix\x00', &(0x7f0000000580)='./file0\x00', 0x7fff, 0x2, &(0x7f0000001640)=[{&(0x7f00000005c0)="926e137b41133df913baa8070b159559e6a296c07fad7bb49eb3de6b91d10120acd8e5f0270ad5398e3179a80c103f996e29483c7d278513cca471d53483332f9935cdd5c77f241628f1f92943cf961c25f15698e9b0600b62d65958898735a19bb663c6e7e10331ce8c", 0x6a, 0x8}, {&(0x7f0000000640)="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", 0x1000, 0xff}], 0x14000, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x88}}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_0\x00', &(0x7f0000001a00)=@ethtool_per_queue_op={0x4b, 0x8, [0x7f93a470, 0x53, 0x6, 0x7, 0x7f, 0x1, 0x8, 0x0, 0x5, 0x6, 0x6, 0xedf, 0x4729, 0x4, 0x1000, 0x6, 0x8001, 0x4, 0x7fffffff, 0x9, 0x0, 0x9, 0x6, 0x2, 0x4, 0x10000, 0x7, 0x6b5, 0x7, 0xffffffff, 0x0, 0xfffffffffffffffb, 0xce, 0x1f, 0xfff, 0x40, 0x1, 0x7fffffff, 0x40, 0xf3, 0x7, 0x1, 0x10001, 0x87, 0x101, 0x0, 0x7, 0x1c6, 0x7fffffff, 0x7fff, 0x8, 0xfffffffffffffff7, 0x80000000, 0x4, 0x1, 0x1000, 0x5, 0x69, 0x6827a964, 0xf21, 0x6, 0x6, 0x6, 0x3ff, 0x10001, 0x6, 0x7ff, 0x6, 0xb64, 0xfff, 0x9, 0x8, 0x1, 0x7, 0x1d, 0x3, 0xfffffffffffffe00, 0x9, 0x9, 0x1, 0x36c7, 0xfffffffffffffff9, 0x639a3b7f, 0x1, 0x4, 0x4, 0x38000, 0x7, 0x2, 0x9, 0x5, 0x7, 0x1, 0x7, 0x80, 0x3ff, 0x3, 0x8, 0x10001, 0x8, 0x3ff, 0x0, 0x2, 0x8, 0x6, 0xfffffffffffffff9, 0x3, 0x5, 0x5, 0x3ff, 0x6, 0x5, 0xffffffff7fffffff, 0x4, 0x5, 0x5, 0xc16, 0x3, 0x0, 0xb60, 0x1, 0x8, 0x3, 0x6, 0xd402, 0xffffffffffffbc7a, 0x9, 0x20, 0x0, 0x1, 0x6, 0x81, 0x1, 0xb3, 0x6, 0x9, 0x3, 0x8, 0x12f, 0x2, 0x9, 0x0, 0xc1c5, 0x9, 0x4, 0x9, 0x2, 0x8, 0x53, 0x9, 0x5, 0x2, 0x7, 0x6, 0x0, 0x9, 0x80, 0x10, 0xffffffffffff8000, 0x3, 0x80, 0xeb6, 0x7fff, 0x4, 0x8, 0xffff, 0x41b588f5, 0x1, 0x773d14f0, 0x7, 0xff, 0xd191, 0x7000000000000, 0x1, 0x1, 0xdb, 0x0, 0x101, 0x8000, 0xffff, 0x6, 0x0, 0x5, 0x8, 0x8, 0x8, 0xffffffffffffff21, 0x9, 0x5, 0x6, 0x200, 0x200, 0x100000000, 0x4c5, 0x7, 0x6, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0xf04b, 0x8, 0x3, 0x800, 0x3f5, 0x7fff, 0x6, 0x4, 0x0, 0x9, 0x0, 0x4, 0x7, 0x7, 0x401, 0x9, 0xd200, 0xfffffffffffffffd, 0x5, 0x0, 0xf7, 0x0, 0x7fff, 0x8, 0x7, 0xd7, 0x2, 0x0, 0x4, 0xe5de767, 0x8, 0xc677, 0x808000000, 0x7ff, 0x1, 0x40, 0xef6e, 0x9, 0xd01, 0x6, 0x80000000, 0x2, 0x3, 0x2, 0x10000, 0x0, 0xe6a, 0x200, 0xfffffffffffff001, 0x3, 0x20, 0x2f, 0x9, 0x0, 0xbd5f, 0x4, 0xfffffffffffffff7, 0x0, 0x5, 0x4, 0x6, 0x2, 0x4000000, 0xcb9, 0xffffffffffffff81, 0x20, 0x8001, 0xff, 0x5, 0x10001, 0x40, 0x5, 0x1, 0x3, 0xff, 0x3, 0x2, 0xfffffffffffffffb, 0x6, 0x7, 0xfffffffffffeffff, 0x1000, 0x5, 0x5, 0x6, 0x1ff, 0x4, 0x3, 0x3, 0x40000, 0xfffffffffffffffb, 0x4, 0xfffffffffffffe01, 0x200, 0x67, 0x9, 0x8000, 0x9, 0x100, 0x4, 0x5, 0x57, 0x0, 0xb40ae6, 0x4ed8c07f, 0x5, 0x3, 0x80, 0x1, 0x9, 0x9, 0x7f, 0x7, 0x8, 0x2, 0xfffffffffffffb86, 0x4, 0x5d4, 0x200, 0x0, 0x3, 0x6, 0x2164, 0x4, 0x2, 0xfe, 0xffffffff, 0x2, 0x8001, 0xe96, 0x3d, 0x6, 0xbb9d, 0x4, 0x80000000, 0xe4b2, 0x846, 0x7, 0x4, 0x7ff, 0x7, 0x1000, 0x2, 0x1f, 0x5, 0xbd, 0x8, 0x6, 0x0, 0x100000000, 0x401, 0x5, 0x100, 0x3, 0xfffffffffffffff7, 0x7, 0x6, 0x8, 0x1, 0x100, 0x7, 0x5, 0xfffffffffffffff7, 0x4, 0x3, 0x9, 0x8, 0x0, 0x8, 0x5, 0x1f, 0xfffffffffffff897, 0x2, 0xff, 0x20, 0xb58, 0x8, 0x9c44, 0x2, 0x8001, 0x8, 0x1, 0x6f3, 0x800, 0x9, 0x6, 0x1, 0x0, 0x3, 0x8000, 0x3f, 0x100000001, 0x30, 0x9, 0x2f6, 0xec4, 0x7, 0x5, 0x7ff, 0xfffffffffffff001, 0x0, 0x9, 0x100000001, 0x1000, 0x2, 0x40, 0x8, 0x7, 0x6, 0x4, 0x7fffffff, 0x401, 0x3, 0xf1, 0x81, 0x3, 0xb91d, 0x8, 0xf1a, 0x399, 0x5, 0x9, 0x80, 0x4, 0x10001, 0x8, 0x0, 0x0, 0x3, 0x8001, 0xffffffffffff6ebf, 0x6, 0xfffffffffffffff7, 0x7, 0x2, 0xffffffffffffff70, 0x0, 0x7f, 0x3, 0x5, 0x2, 0xffff, 0x40, 0x3, 0x1, 0x2, 0x6, 0x7d, 0x6, 0xfffffffffffffffe, 0x2, 0x101, 0x6a67, 0x28, 0xdf, 0x8, 0x10000, 0x89, 0x5, 0x9, 0x5be, 0x7fffffff, 0x800, 0x7fffffff, 0x8, 0x2, 0x9, 0x0, 0x7, 0x2, 0x10000, 0x102, 0xffffffff, 0xb177, 0xc5, 0x7, 0x80000000, 0x6, 0x100000001, 0x7, 0x401, 0x5, 0x4, 0x20, 0x9, 0x1, 0x0, 0x3, 0x4, 0x81, 0x0, 0x7, 0x9, 0x10000, 0xfe7, 0x3, 0x627a, 0x5fbac340, 0x8001, 0x401, 0x7, 0xfffffffffffff74e, 0x400, 0x10000, 0x9, 0x0, 0x5, 0x8001, 0x2, 0x4, 0x0, 0x1f, 0xfffffffffffffffb, 0x1, 0x4, 0x7fffffff, 0xba, 0x8, 0x7, 0x8, 0x3, 0x100, 0x80000000, 0xb9, 0xffffffffffff13fc, 0xfffffffffffffe00, 0x9, 0x7, 0x4, 0xff, 0x3424ea40, 0x0, 0x1, 0x100, 0x6, 0x7, 0x7, 0x20, 0x800, 0x30, 0x4, 0x9fc, 0x1, 0x2, 0x0, 0x81, 0x2, 0x2, 0x0, 0x8000, 0x1, 0x6, 0x4, 0x9d, 0x7, 0x4, 0xfffffffffffffffd, 0x2, 0x7fffffff, 0x0, 0x6, 0x4, 0x2, 0x41152826, 0xe6e, 0x7fffffff, 0x6, 0xffff, 0x0, 0x8001, 0x9, 0x2, 0x800, 0xfff, 0x0, 0x91c4, 0x6, 0x200, 0x8, 0x6, 0xd18, 0x4, 0x1, 0x0, 0xfa, 0xff, 0x8, 0x0, 0x5, 0x87be, 0xffffffffffffffff, 0xdb, 0x6, 0x8, 0x3, 0x6, 0x9, 0x2b, 0x400, 0x0, 0x6, 0xffffffff00000001, 0xfffffffffffffffa, 0x5, 0x1000, 0xed, 0xaa3, 0x101, 0x6, 0x81, 0x9de, 0x8, 0x3, 0x5, 0x3, 0x3f, 0x9, 0x4a, 0x9, 0xf69, 0x80000001, 0x80, 0x1, 0x3ff, 0x1, 0x40, 0x81, 0x1, 0x1c1b, 0x100000000, 0x10000, 0x5, 0x5d11, 0x8, 0x9, 0x691, 0xe1a, 0x80000001, 0x1, 0x5, 0x9, 0x6, 0xba, 0xfff, 0x91, 0x8, 0x8, 0x5, 0x0, 0x8, 0x2, 0x1000, 0x3, 0x0, 0x6, 0x8, 0x20, 0x1, 0x6, 0xfff, 0x1, 0x2, 0x3, 0x4, 0xfffffffffffffff9, 0x4, 0x8, 0x2, 0x4, 0x3, 0x1, 0xffffffffffffffca, 0xcafd, 0x4, 0x2, 0xffff, 0x7, 0x8c, 0x1f, 0x0, 0x5, 0x8001, 0x1, 0x1, 0x4b, 0x101, 0x3, 0x25, 0xfffffffffffffa79, 0x10000, 0x8, 0x4, 0x9, 0x1, 0x2000000000000, 0xd8, 0x0, 0x2, 0x3, 0x1f, 0x5, 0xd04, 0x18c, 0x7, 0x0, 0x1, 0x0, 0x7ff, 0xfff, 0x8, 0xab9c, 0xffffffffffffff01, 0x8001, 0x3, 0x2, 0x5, 0x5, 0x0, 0x6, 0x31, 0x1b19, 0x0, 0x101, 0x20, 0x8, 0x7, 0x2, 0xf078, 0xf1b, 0x73, 0x7, 0x1, 0x7, 0x4, 0x545, 0x4, 0x1000, 0x2, 0x2, 0x7ff, 0x9, 0x401, 0xff, 0x8001, 0x81, 0x100000000, 0x0, 0xff, 0x80000000, 0x80000001, 0x200, 0xffffffffffffffff, 0x8, 0x3, 0x8, 0x9, 0xe23, 0x5, 0x140000, 0x5, 0x7, 0x0, 0x0, 0x5, 0x41e8, 0x3, 0x4, 0x79ef, 0x5, 0x200, 0x7fffffff, 0x5b, 0x1, 0x8, 0x7, 0x5, 0x1b7, 0x1a0ecded, 0x9, 0x7f, 0x5, 0x5, 0x7fffffff, 0x1, 0x100000001, 0x7fffffff, 0xbb2, 0x0, 0x5ab0, 0x6, 0x80000000, 0x1ff, 0x6d8, 0x7, 0x100000001, 0x7, 0x101, 0x401, 0x3, 0x8000000000000, 0x7, 0x80, 0x7, 0x3d6c, 0x3, 0x2, 0x346, 0x7, 0x1ff, 0x800, 0xcd88, 0x0, 0x2, 0x0, 0x81, 0x8, 0x5, 0x2, 0x1, 0x3, 0x8, 0xfee, 0x1, 0x9e0, 0x80, 0xfffffffffffffff9, 0x0, 0xffff, 0x2, 0x5, 0x6b0f, 0xced, 0x1, 0x800, 0x10000000000, 0x81, 0x6, 0xd6c5, 0x1b1b, 0x3, 0x9, 0x400, 0x9, 0x5, 0x401, 0x9, 0x9, 0x100000001, 0x3f, 0x8, 0x2, 0x7ff, 0x6, 0x2, 0x100000000, 0x8, 0x4, 0x5, 0x3, 0xfffffffffffeffff, 0x8, 0x80000001, 0xf99, 0x8001, 0xfffffffffffffffa, 0x5, 0xbc, 0x1, 0x80, 0x6, 0x8, 0x1, 0x1f, 0x7, 0xded, 0x6, 0x6, 0xd49c, 0x9, 0x14, 0x7ff, 0x6, 0x5, 0x101, 0x6, 0x6, 0x5, 0x1, 0x8, 0x38, 0x80, 0x0, 0x6, 0xffffffff, 0x100, 0x5, 0x9c, 0x1e1, 0xfe6a, 0x8, 0x1000, 0x4000000, 0xffff, 0x6, 0x9001, 0x3, 0x2, 0x2, 0x7ff, 0x728b, 0x0, 0x8, 0x0, 0x6, 0x5, 0x0, 0x9, 0x101, 0x53b, 0x9, 0x7, 0x800000000000000, 0x1ff, 0x1, 0x10001, 0x0, 0x13, 0xfff, 0xffffffffffffffc3, 0x1000, 0x1, 0x9e3, 0x6, 0xd0f, 0x5903fff9, 0x7, 0x3, 0x100000000, 0x5, 0x7f, 0x0, 0xc0000000000, 0xffffffffffffff72, 0x7, 0x8000, 0x2, 0x80000001, 0x3, 0x7fffffff, 0x3, 0x7, 0x4, 0x5, 0x1, 0x5, 0x100, 0x3f, 0x3, 0x7ff, 0x4, 0xfffffffffffffff9, 0x3f, 0x1, 0x8, 0x6, 0xfffffffffffffffa, 0x4f9, 0x1000, 0xff, 0xc98, 0x20, 0xff, 0x686, 0x9, 0x806, 0x80, 0x4b80, 0x40, 0x0, 0x2, 0x7f, 0x5, 0x7, 0x3, 0x1136, 0x6, 0x400, 0x7, 0x20, 0x96, 0x1, 0x1887, 0x2, 0xd5, 0x4631, 0xffffffff80000001, 0x1000, 0xfffffffffffffffd, 0x7fffffff, 0x0, 0x101, 0x3ff, 0x2, 0x2, 0x5, 0x8, 0x4, 0x8000, 0x800, 0xffffffff, 0x80000000, 0x80000000, 0x0, 0xa7df, 0x67, 0x0, 0x0, 0x0, 0x8, 0x2, 0x8, 0x3, 0x100000000, 0x80000000, 0x40, 0x2, 0x1ff, 0x7f, 0x101, 0x3, 0x1, 0x1000, 0x0, 0x8, 0x10000, 0x6, 0x40, 0x100000000, 0x4, 0x80000001, 0x8, 0x8, 0x80, 0x101, 0x35, 0x6, 0x6, 0x9, 0x1ffc0, 0x7, 0x9, 0x100, 0x5, 0xa25, 0x3, 0xffffffff, 0x1, 0x286bc3d1, 0x1, 0x2, 0x4, 0x100, 0x1, 0xd5d, 0x6, 0x1, 0x838, 0x400, 0x7, 0x8, 0xff, 0x6, 0x8, 0x1, 0xff, 0x1, 0xffffffffffffbb19, 0x7ff, 0x6, 0x1, 0x8, 0x3, 0x400, 0x7b, 0x1f3, 0x9fb, 0x63, 0x3, 0xffffffffffffffbd, 0xdd, 0xcb, 0x2, 0x7b6, 0x5, 0x5, 0xc0, 0x80, 0x2, 0x1000, 0x7fff, 0x8, 0x1, 0x400, 0x6, 0xffffffffffff7fff, 0x2, 0xfff, 0xd, 0x2c, 0xffffffff, 0x8000, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x2, 0xffff000000000000, 0xfffffffffffffff0, 0xe3b, 0x1, 0xfff, 0x1, 0x7, 0x8b0, 0x601355f9, 0x0, 0x3, 0x1, 0xfffffffffffffffb, 0x4, 0x80000000, 0x9, 0x3, 0xb96, 0x20, 0x6, 0x2be, 0x9, 0x3, 0x9, 0x7, 0x4, 0x6111e0, 0xfffffffffffffeff, 0x0, 0x4, 0x2, 0x8001, 0xfcfa, 0x8, 0x10001, 0x200, 0x9, 0x3, 0xea8d, 0x10001, 0x3, 0x3, 0x6, 0x5, 0x4, 0xdf, 0x4d5, 0xfffffffffffffffa, 0x8001, 0x9, 0xce2a, 0x0, 0x2, 0x4, 0x401, 0x52fd, 0x2, 0x30, 0x3, 0x1ff, 0x80, 0x7df442bb, 0x4, 0x4, 0x1f, 0x2, 0x0, 0x5, 0xac, 0x2, 0x7, 0x7ff, 0x4, 0xb1de, 0x5b, 0x0, 0x5, 0x75, 0x9, 0x1, 0x6eab, 0x7, 0x2, 0x0, 0xe10, 0x8b, 0x1, 0x6, 0x80, 0x0, 0xee, 0x8, 0x7, 0x400, 0x6, 0x9, 0x80, 0x8678, 0x3, 0x2, 0x101, 0x5, 0x200, 0x1000, 0x9, 0x9, 0x5, 0x4, 0xca3b, 0x3, 0x401, 0x7, 0xfffffffffffffe01, 0x401, 0xb07, 0x0, 0x1, 0xcd, 0x2, 0xd8e, 0x7fff, 0xa7e1, 0xff, 0x1, 0x1, 0x7, 0x10001, 0x5, 0x400, 0x101, 0x9, 0x0, 0x1, 0x0, 0x4, 0x7fff, 0x6, 0xcc42, 0x9cb8, 0x8, 0x40, 0x6, 0x7ff, 0x7f, 0x1, 0x64, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0xe8, 0x4, 0x4, 0x80, 0x1, 0x9, 0xa9, 0x5, 0x1, 0x101, 0x6, 0x7f, 0x5dc, 0x6, 0x80000000, 0x0, 0x2, 0x4bd96e6f, 0x773e5782, 0x81, 0xffffffffffffffe1, 0xad, 0x0, 0x3ff, 0x91, 0x0, 0x5ac0, 0x5, 0x20, 0x596, 0x0, 0x8001, 0xfff, 0x8, 0x9, 0x7, 0x5, 0x2, 0x471edee2, 0x7fff, 0x7d1ec3c5, 0x2, 0x9, 0x0, 0x81, 0x3, 0x3, 0x5, 0x1, 0xff, 0x0, 0xfffffffffffffffb, 0x1, 0x100000000, 0x5, 0x3ebfd2c8, 0xfb, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x3f, 0x79, 0xcc6, 0xe9800, 0x4000000000000000, 0x2, 0x189, 0x9, 0x2, 0x37e2f564, 0x5, 0x9, 0x8000, 0xc6f, 0x35, 0x10000, 0x10000, 0xa6, 0x101, 0xb398, 0x1, 0x9, 0x3f, 0x81, 0x0, 0x2, 0x3f, 0x6, 0x0, 0x0, 0x78, 0xff, 0x576, 0x9, 0x3ff, 0x8, 0x8ab7, 0x7, 0x21f7, 0x401, 0x7fffffff, 0x4, 0x200, 0x3, 0x7840, 0x1f, 0x10000, 0x1ff, 0x7, 0x8d3b, 0x8997, 0x8001, 0x8000000000000, 0x6, 0xf27, 0x8, 0x6, 0x5, 0xfffffffffffffff9, 0x0, 0x1, 0xffff, 0x80000000000, 0xfffffffffffffffc, 0x0, 0x927c, 0x42, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x200, 0x3, 0x0, 0xb43, 0x2, 0x5, 0x2, 0x4, 0x1, 0x200, 0x0, 0xfffffffffffffffa, 0x4, 0x3ff, 0xffffffffffffff54, 0xffffffff00000001, 0x9, 0xec, 0x4, 0x9, 0x8000, 0x1ff, 0x6, 0x3, 0x20, 0xe4, 0x6, 0x2, 0x400, 0xfffffffffffffffd, 0x8, 0x80000001, 0x8, 0x100000001, 0x7, 0x5, 0x6, 0xffffffff, 0x81, 0x101, 0x10000, 0x2, 0x9, 0x5, 0x4, 0x80, 0x1ff, 0x100, 0x9, 0x80000001, 0x78, 0x0, 0x7, 0x9, 0x6, 0x5, 0x0, 0xfffffffffffffff7, 0x2, 0x386, 0x10000, 0x2, 0x1000, 0x9, 0x0, 0x2, 0x7f, 0x800, 0x7ff, 0x2, 0x1, 0x5d, 0x6, 0x9, 0x3f, 0x400, 0x200, 0x1, 0x4, 0x5, 0xb2, 0x9ba, 0x5, 0x31e7, 0x1, 0xe0, 0x9, 0x7fffffff, 0x7f, 0x0, 0x800, 0x7, 0x1, 0x6, 0x401, 0x80, 0x100000001, 0x348, 0x7ff, 0x2, 0xfff, 0x4, 0x4, 0x1, 0x2ae, 0xff, 0x4, 0x200, 0x401, 0x16f, 0x20, 0x9, 0x9, 0x5, 0x40, 0x0, 0x81, 0xffff, 0x5, 0x3, 0xb0a9, 0x100000000, 0x4, 0x4, 0x9, 0x90000000, 0x3, 0x4, 0x65, 0x6, 0x7, 0x2, 0xcc03, 0x8, 0x5, 0x5, 0x1, 0xffffffff, 0x1, 0x8, 0x5, 0x5, 0xe2b4, 0x8, 0x2, 0x4a, 0x0, 0x8, 0x4, 0x9, 0x8, 0x7, 0x1, 0x3, 0xfff, 0x7, 0x971f, 0x0, 0x7f, 0x26f9, 0xed3, 0x7f, 0x1000, 0x1, 0x9, 0xe82, 0xd4, 0x2, 0x722, 0x383b, 0x5, 0x7fffffff, 0x3, 0x7, 0x5, 0x0, 0xfffffffffffffff9, 0x1f, 0xffffffff, 0x4, 0x3, 0x7, 0x20, 0x7ff, 0x5, 0x2, 0x2, 0x400000000, 0x3, 0x8000, 0x7d3b, 0x5, 0x4, 0x100000001, 0x10001, 0x9, 0x8, 0x7, 0x4844, 0x200, 0x2, 0x7, 0x7986, 0x80000000, 0x9, 0xffff, 0x9, 0x5, 0x2, 0x0, 0x910a, 0x0, 0x2, 0x9, 0x8a8, 0x56437d07, 0x20, 0xff, 0x83, 0xe4d9, 0x1, 0x100000001, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x100, 0x1, 0x7f, 0x100000000, 0x4, 0x4, 0xcef, 0x9, 0x4, 0x3, 0x400, 0x1, 0x4, 0xbbe, 0x1, 0x4, 0xfffffffffffffffa, 0x1ff, 0x936, 0x8000, 0x80000001, 0x1, 0x80000000, 0x4, 0x7fffffff, 0x0, 0x1, 0x6, 0x7fff, 0x1ff, 0x2, 0x0, 0x9, 0xff, 0x4, 0x4, 0x9, 0x0, 0x7, 0xffffffffffff0000, 0x80, 0x10001, 0x8001, 0x0, 0x3, 0xfff, 0x7, 0x100000001, 0x1ff, 0xc2e8, 0xf424, 0xfffffffffffffe00, 0x451, 0xffffffffffffffff, 0x51, 0x8, 0x9, 0x4, 0x4, 0x1, 0x9, 0x100000000, 0x7b1, 0x0, 0xffff, 0x7ff, 0x6, 0x5, 0xffffffff, 0x8, 0x8, 0x0, 0x800, 0x8, 0x2, 0x1, 0x9, 0xc185, 0x800, 0xa4, 0x4, 0x2, 0x2e2a, 0x35, 0xf627, 0x3ff, 0x4, 0x8, 0x7, 0xec1, 0x100000001, 0x7f, 0x3, 0x3, 0xb85, 0x799800, 0x0, 0x6, 0x7ff, 0x10000000000000, 0x4, 0xc000, 0x8, 0xcb6, 0x5, 0x100000001, 0x9, 0x4, 0x5, 0x80, 0x5a74, 0x100, 0x7, 0x20, 0x2, 0x3e, 0x7f, 0x100000000, 0x6, 0x10001, 0x7ff, 0x8, 0x3, 0xce9b, 0xfffffffffffffffa, 0xac, 0x5, 0x5, 0x2, 0x4, 0x3, 0x2, 0x7, 0x8000, 0x401, 0x81, 0x0, 0x4, 0x9, 0x7, 0x80, 0x7, 0x3, 0x3, 0x0, 0x9, 0x7f, 0x3, 0x9, 0xfffffffffffffffb, 0x7, 0x100, 0xa3d, 0x7, 0x6, 0x5, 0x5, 0x3f, 0x100, 0x3f, 0x7ff, 0x3, 0x8000, 0x2, 0x3f, 0x101, 0x7, 0x1, 0x401, 0x4, 0xa7, 0x5, 0x15, 0x4, 0x5, 0x1f, 0x8001, 0x7, 0x4, 0x80, 0x8, 0x10000, 0x7, 0x20, 0x457, 0x7, 0xfffffffffffffbff, 0x8, 0x8, 0x2d, 0x200, 0x80000000, 0x7d73, 0x8, 0x1000, 0x8, 0x6, 0x4, 0x8, 0x5, 0x434, 0x6, 0x2, 0x6, 0x401, 0x9, 0x1, 0xe4c, 0x6, 0x10000, 0xb1d8, 0x20, 0x5, 0x5, 0x6, 0x2, 0x2, 0x0, 0x4, 0x67, 0x81, 0xbd, 0xfffffffffffffff8, 0x9, 0xfffffffffffffff9, 0x6c07, 0x100000001, 0x9, 0x1000, 0x8, 0x2, 0x4, 0x1, 0x2, 0x4, 0xd7c, 0x4, 0x4, 0x77, 0x3, 0x8000, 0x3ff, 0x4, 0x9, 0x8, 0x200, 0x200, 0x3, 0x6, 0x2400000000000, 0x6, 0x9, 0x5, 0x4, 0xfffffffffffffffe, 0xff, 0x66, 0x5, 0x3ff, 0x3, 0x3, 0x5, 0x3, 0x0, 0x7, 0x1ff, 0x6, 0x8, 0xffffffff, 0x1, 0x0, 0x4, 0x5, 0x400, 0x8000, 0x2, 0x5, 0x6f, 0xffffffffffffffff, 0x3f, 0x0, 0x4, 0x8, 0x7fffffff, 0x704, 0x800, 0x1, 0x73c0, 0x93, 0x1, 0xffffffffffffff7f, 0x8, 0xfffffffffffff001, 0x2, 0xdc38, 0x8, 0x5, 0xd0ab, 0x80000000, 0xffffffffffffffc0, 0x800, 0x7fffffff, 0x7, 0x9, 0x7a5, 0x81, 0x100000000, 0x9, 0xff, 0x75, 0x7c21, 0xfffffffffffffff9, 0x3ff, 0xaa, 0x10000, 0x7, 0x3, 0xe, 0xebd, 0x200, 0x10001, 0x8001, 0x6, 0x400, 0x0, 0x8, 0x0, 0x1, 0x3, 0x4, 0x7fffffff, 0xffffffff00000001, 0x9, 0x9, 0x1ff, 0x6, 0xfffffffffffffff4, 0xf28, 0x93d, 0x3, 0x5, 0x2, 0x4, 0x2, 0x5513, 0xffffffff, 0x3, 0x9, 0x879e, 0x1, 0x0, 0x4d, 0x0, 0x7, 0x7ff, 0x19, 0x9, 0xfffffffffffffffb, 0x1, 0x6d, 0xffffffffa862cdc9, 0x708, 0x8000, 0x99c, 0x6, 0x101, 0x800, 0x0, 0x6a501b90, 0x7fffffff0000000, 0x2, 0x5, 0x8, 0x7f, 0xffffffffffffff09, 0x8, 0x7fffffff, 0x3, 0x2, 0x100000001, 0x7ff, 0xc9, 0x400000000000, 0x4d4, 0x3, 0x0, 0x7f, 0x1, 0x7, 0x9, 0xfffffffffffffff7, 0x8001, 0x1, 0x100000001, 0x8, 0x1, 0x4, 0x1, 0x7, 0x9, 0x3, 0x48000000, 0x20, 0x0, 0x1ff, 0x7, 0x22, 0x5, 0x8, 0x86, 0x4, 0x3, 0x0, 0x100000001, 0x0, 0xffff, 0x8, 0x7a, 0x3, 0x2, 0xa63b, 0x8, 0x5, 0x6, 0x81, 0x9, 0x8, 0xfffffffffffffffc, 0x3, 0x7fff, 0x101, 0x8, 0x4, 0x40, 0x852f, 0x5, 0x8, 0x526, 0xfffffffffffffff9, 0x3, 0x9, 0x1, 0x0, 0x0, 0x2, 0x7ff, 0x5, 0x6, 0x7, 0x401, 0x7, 0x0, 0x9, 0xff, 0x401, 0x5, 0x6, 0x31b, 0x3, 0x0, 0x1, 0x74dc, 0x1, 0x6, 0x10000, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x2d, 0x5, 0xfffffffffffff801, 0x31b, 0x9, 0x1, 0xb91, 0xa8c, 0xfffffffffffffffd, 0x0, 0x80000000, 0x0, 0x98000, 0x80000001, 0xffffffff, 0x7ff, 0x4, 0x2, 0x2, 0x4, 0x3, 0xff, 0x0, 0x0, 0xc33, 0xffffffff, 0x2305, 0x7f, 0x6, 0x7f, 0x84, 0x5a, 0x0, 0x3, 0x8, 0x7, 0xddc, 0x7, 0x3, 0x4c38, 0x2, 0x10000, 0x20000000, 0x81, 0x81, 0x9, 0x2, 0x6de9110e, 0x400, 0x1, 0xff, 0xffffffffffffff40, 0xffffffffffffff42, 0x6, 0x1, 0x80000000, 0x7fff, 0xf97, 0x9, 0xf3, 0x449, 0x4, 0x7fffffff, 0x7, 0x20, 0x80000001, 0x9, 0x9, 0x8, 0x2, 0x4, 0x7, 0x100, 0x490a9516, 0x1, 0xb221, 0xb0, 0x6, 0x3f, 0x0, 0x4675, 0x4, 0x10001, 0x1, 0xffffffffffffffff, 0x80, 0x80, 0xffffffffffffffbd, 0x9, 0x4, 0xfffffffffffffffe, 0x8, 0x12, 0x80000000, 0xe359, 0x9cd, 0xa6b, 0x100000001, 0x5, 0x7, 0x21, 0x9, 0x6d, 0x0, 0x3, 0x3ff, 0x5, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2, 0x5, 0x9, 0x6, 0x1, 0x1d60, 0x10001, 0xae, 0x8, 0x9, 0x4, 0x2, 0x1, 0x100000000, 0x8, 0x7, 0x2, 0x9, 0x74f4, 0x4, 0x9, 0x4e5, 0x76f, 0xffffffff, 0x3, 0x5, 0x7c000000000000, 0x6cd, 0x3, 0x0, 0x40, 0x6, 0x73, 0x153e9417, 0xf, 0x4, 0x92d, 0x0, 0x8, 0x27, 0x8, 0x9, 0x6, 0x400000000, 0x5, 0x8, 0xa4d9, 0x100000001, 0x1, 0xb6d, 0x3f, 0x5, 0xc000000000000, 0xfffffffffffffffa, 0x80, 0x5, 0x6, 0x80000000, 0x5, 0x3, 0x2, 0x92fb, 0x1, 0x3, 0x4, 0x100000000, 0x5, 0x7fffffff, 0x9, 0x7f, 0x5, 0xfffffffffffffffb, 0x4, 0x8, 0xfffffffffffffffb, 0x20, 0x8, 0x6, 0x0, 0x0, 0x80000001, 0x100000000, 0x3ff, 0xfffffffffffffff9, 0xcc, 0xff, 0x100000001, 0x5, 0x401, 0x2, 0x3, 0x0, 0x6, 0x3, 0x9, 0x0, 0x7, 0x4, 0x8, 0x1, 0x2, 0x3ff, 0x8, 0x2, 0x8, 0x2, 0x5, 0x9, 0x3, 0x0, 0x7fff800000, 0xfffffffffffffff7, 0x1, 0x7f, 0x9, 0x2, 0x3, 0x59a11bf3, 0x5, 0xffffffffffffffa1, 0x0, 0x9e8c, 0x7f, 0x3, 0xfffffffffffffff9, 0x8, 0x1, 0x6, 0x2569, 0x8, 0x0, 0xffffffff80000000, 0xfffffffffffffff9, 0x9, 0x7f, 0x1, 0x3, 0x1, 0xe0d, 0xffffffffffffff81, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x9, 0x401, 0xffffffffffffffff, 0x1, 0xeea, 0x8900000000000, 0x8, 0xfffffffffffffaee, 0x7fffffff, 0x0, 0x5a1, 0x6, 0x5, 0x200, 0x0, 0xefd3, 0x6eb, 0xd8d0, 0xfffffffffffffffb, 0x8, 0x1000, 0xffffffff, 0x0, 0x7, 0x1, 0x8, 0x8, 0x333d, 0x6, 0x1, 0x91, 0x3, 0x3, 0x1, 0x1, 0x9, 0xff, 0x7, 0x0, 0x1, 0x1bef, 0x8, 0x5, 0x2, 0x5442, 0x9, 0x2, 0xfffffffffffff04d, 0x4, 0x8, 0x0, 0x5, 0x397f, 0x7, 0x3, 0x2, 0x8, 0xffffffffffff837c, 0x5, 0x80000000, 0x100000000, 0x3064, 0x8, 0xfffffffffffffff7, 0x0, 0x100000000, 0x2, 0x84db, 0x8001, 0x9, 0xfffffffffffffffa, 0x6, 0x81, 0x9, 0x80, 0x100000000, 0x800, 0x7, 0x1ff, 0x30, 0x1000, 0x80000001, 0x8000, 0x80000001, 0xfffffffffffff514, 0x1, 0x80000000, 0x0, 0xfffffffffffffff9, 0x4bd5, 0x400, 0x2000000000, 0x7, 0x8001, 0xffffffff, 0xff, 0xbb7, 0x1ff, 0x8, 0x20, 0x0, 0x80000000, 0xca72, 0xed, 0x1, 0x70, 0x4da, 0x6, 0x80, 0x8, 0x1, 0x2, 0xe5be, 0x800, 0xedb1, 0x6, 0x3, 0x8001, 0x0, 0x9, 0xfff, 0x7, 0xa4d, 0x721a, 0x9, 0x1, 0x7f, 0x5, 0x8dc, 0x0, 0x7, 0x8, 0x10000, 0x2, 0x9, 0x3, 0x6, 0xffff, 0x9, 0x80000001, 0x100000001, 0x1, 0x4, 0xfffffffffffffeff, 0x5, 0x7, 0x3, 0x3, 0x72d9, 0x1, 0x4, 0x1, 0xa89, 0x0, 0xa720, 0x1, 0xda9, 0x4, 0xffffffffffffff00, 0x6, 0xfffffffffffffe01, 0x0, 0xf1eb, 0x9, 0xfffffffffffffff7, 0x81, 0x5, 0x4, 0x5, 0x2, 0x3, 0x6, 0x5221, 0x800, 0x80000001, 0x20, 0x3f, 0x0, 0x3, 0x7, 0x5, 0xdaf9, 0x8001, 0x1000, 0x7fffffff, 0xffffffff, 0xfffffffffffeffff, 0x5, 0x8, 0x0, 0x2, 0x9, 0x3f, 0x5e39dac1, 0x1f, 0x5, 0x2, 0x3, 0x1, 0x0, 0x5, 0x5, 0x5, 0x6, 0x4c8, 0x1, 0x8001, 0x101, 0x0, 0x0, 0x5, 0x8, 0x7afa, 0x1, 0x0, 0x1, 0x1000, 0x0, 0x6b3, 0x4, 0xffffffffffffff01, 0x8, 0x8, 0x6d, 0x2, 0x5, 0x2, 0x40, 0x7, 0x7fff, 0x400, 0x3, 0x1, 0x1, 0x3, 0x0, 0x3ff, 0x9, 0xfffffffffffffffa, 0x0, 0x8, 0x40, 0x80000000, 0x898, 0x1, 0x100000000, 0x7, 0x400, 0x2, 0x5, 0x3, 0x2, 0x80000000, 0x9, 0x8, 0x200, 0x6, 0x3f, 0x7, 0xba8, 0x1, 0xcd7f, 0x0, 0x7, 0x5a53, 0x9, 0x80000001, 0x5, 0x10001, 0x0, 0x1, 0xced, 0x2, 0x1f, 0x0, 0x6, 0x80000000, 0x6, 0xac, 0xb0, 0x7, 0x1f, 0x38d, 0xf95, 0x7, 0x8, 0x0, 0x9b8, 0x45, 0x1ff, 0x9b3, 0x9, 0x8001, 0xff, 0xa3d, 0x80000000, 0x4, 0x20, 0x4, 0xfb4, 0x8, 0x7, 0x81, 0x4, 0x8, 0x4840, 0x100000000, 0x2, 0x4, 0x0, 0x8, 0x5, 0x6, 0x6, 0x3ff, 0x4, 0x8, 0x4, 0x3, 0xe2, 0x1ff, 0x3ff, 0x5, 0x1, 0x8, 0xfffffffffffff951, 0x40, 0x8001, 0x0, 0x2, 0x9, 0xde5f, 0x1, 0x4, 0x8, 0x1, 0x2, 0x7ff, 0x0, 0x1ff, 0x1, 0x0, 0x1, 0x8, 0xe37, 0xd783, 0x7, 0x5, 0x61, 0x2, 0x0, 0x1, 0x20, 0x5, 0x7fff, 0x8000000000, 0x800, 0x0, 0x0, 0x10001, 0x3, 0x50, 0x9, 0x10001, 0x9, 0x876d561, 0x4f7cb5f0, 0x54, 0x1f, 0x8, 0xa373, 0x2, 0xffffffffffffffe0, 0x400, 0x401, 0x2, 0x1, 0x3, 0x20, 0x7, 0x3, 0x13, 0xffffffffffffff45, 0x2, 0x60af, 0x1, 0x5, 0xffffffffffffffc0, 0x56, 0x81, 0x0, 0xffffffffffffff15, 0x9, 0x0, 0x1, 0x1, 0x4, 0xf82, 0xffffffffffffff03, 0x2, 0x1, 0x2, 0xffffffff, 0x0, 0x3, 0x8, 0x8, 0x3f, 0x3ff, 0x7, 0x8, 0x4, 0xea0c, 0x5e, 0xffffffffffff7bee, 0x8, 0x5, 0x8, 0x80000001, 0x0, 0x4, 0x3, 0x80000001, 0x3, 0x5, 0x7fffffff, 0xff, 0x60a53327, 0x9b4, 0x3, 0x9, 0x401, 0x3, 0x1, 0x3, 0x1, 0x9, 0x3ff, 0x9, 0x7d, 0x800, 0x5, 0x2, 0x2, 0x101, 0x5, 0x0, 0x9, 0xffff, 0x80, 0x5, 0x1ff, 0x1, 0x4, 0x401, 0x2e2, 0x10000, 0x3, 0x10000, 0xffff, 0x7, 0x4, 0x1, 0xffff, 0x8, 0x2, 0x79e, 0xc1, 0x4, 0x20, 0x7, 0x100000000, 0x1000, 0x6, 0x48, 0x0, 0x81, 0x8, 0x0, 0x5, 0x4400000000000000, 0x8, 0x7fff, 0x1, 0x80000000, 0x4, 0x5, 0x2ed602be, 0x7fffffff, 0x54c, 0x8, 0x9, 0x4, 0x7fff, 0x3ab, 0x100000001, 0x1, 0x3f, 0x3, 0x100000000, 0x1, 0x8, 0x37ce, 0xfffffffffffffffd, 0x2, 0x5, 0x3, 0x100000001, 0x4, 0x100000000, 0x80000001, 0x1f, 0x8a46, 0x31d2, 0x4, 0xfffffffffffffffc, 0x3, 0x1, 0x4, 0x6, 0x0, 0x9, 0x4fe9, 0x8f0, 0x0, 0x5, 0x100000000, 0xd6, 0xa9, 0x2, 0xaa, 0x3, 0xe88, 0x1, 0x2, 0xccb3, 0x60b5, 0x7, 0x2, 0x8, 0x7, 0x0, 0xffffffff00000000, 0x1, 0x1ca, 0x1, 0x5, 0x9, 0x8, 0x0, 0x8001, 0xa1, 0xd2, 0x2, 0x6ab, 0x7c86, 0x8, 0x0, 0x3, 0x2, 0xffffffffffffffc1, 0xfffffffffffffffd, 0x7f, 0x78, 0x3, 0x7, 0x800, 0x7, 0x100, 0x3, 0x6, 0x2, 0x4e7, 0x0, 0x5, 0x0, 0x8, 0x6, 0x101, 0x9f, 0x100, 0x400, 0x0, 0x8, 0x6, 0x2, 0x7fffffff, 0x7, 0x6698309, 0x100, 0x4, 0x9, 0x600f, 0x10000, 0x1, 0xff, 0x2, 0xff, 0x3, 0x9, 0x3b4c, 0x1, 0x6, 0x3, 0x9, 0x8, 0x0, 0x3, 0x3, 0xbf7, 0x8, 0x2, 0x401, 0x400, 0x1, 0x7fffffff, 0x9, 0x43e, 0x4, 0x71ec, 0x7fff, 0x20, 0x2, 0x3, 0x10a, 0x3, 0x101, 0xfffffffffffffffa, 0x20, 0x3829804e, 0x81, 0xe1, 0x1, 0x9, 0x286, 0x9, 0x2, 0x569c, 0xa4d9, 0x76dc6955, 0x2, 0xfffffffffffffff8, 0x0, 0x6, 0x5, 0x1, 0x0, 0x200, 0x3, 0x2, 0xe4f, 0x6, 0x1, 0x0, 0x7, 0x2, 0xe52, 0x8, 0x401, 0x3, 0x100000001, 0x80, 0x4e, 0x7fff, 0x7fffffff, 0x1, 0x1, 0xc4, 0xecca, 0x9, 0x5, 0x2, 0x510, 0xd9d, 0x3f, 0x6, 0x9, 0x9, 0x2, 0x8000, 0xa1c7, 0x7, 0x1, 0x6, 0x100, 0x8, 0x5, 0x77a6d9d8, 0x20, 0x3dab357e, 0x10001, 0x800, 0xfffffffffffff000, 0x80000000, 0x100000000, 0x0, 0x7, 0x6, 0x0, 0x400000, 0x7, 0x2, 0x1f, 0x10000, 0xffff, 0x636, 0x7fffffff, 0x2c00, 0x4, 0x10000, 0x9, 0x61b, 0xa6, 0x0, 0xffffffffffffffff, 0x3, 0x207, 0x80, 0x5, 0x2, 0x8, 0x0, 0x1, 0x4, 0x8, 0x6, 0x101, 0x3, 0x8, 0x7, 0xfff, 0x83, 0x2, 0x9, 0x101, 0x1000, 0xff, 0x1, 0x81, 0x70, 0x5, 0x10000000000, 0x401, 0x81, 0xffffffffffffea3a, 0x80000001, 0x6, 0x0, 0x5, 0x80000000, 0x9, 0x100, 0xffffffff899b0a14, 0x5, 0x9, 0x100, 0x1, 0x1, 0x7, 0x6efee7f, 0x1, 0x9, 0x5, 0x9, 0x9, 0x200000, 0x0, 0x5, 0x3ff, 0x0, 0x17aa, 0x8, 0x7, 0x10000, 0x0, 0x7, 0x9, 0x0, 0x10001, 0xd0c4, 0x80000000, 0x3f, 0x10000, 0x1000, 0x7, 0x40, 0x8, 0x2, 0x9, 0x9, 0x3, 0x400, 0x6, 0x6, 0x1, 0x2, 0x2271, 0x5, 0x3, 0x4, 0x1, 0x7, 0x3ff, 0x100, 0x20, 0x40, 0x7, 0x5, 0xfffffffffffffff8, 0x589, 0x80000001, 0x10000, 0x1, 0x9, 0x3fdc2ef9, 0xffffffffffffffc1, 0x3, 0x1eb8, 0x0, 0x9, 0x260, 0x2, 0x0, 0x10000, 0x7, 0xab9, 0x6, 0x8, 0xffffffffffff8000, 0x6, 0x7, 0x8, 0x4, 0x80000001, 0xffff, 0xff, 0x15, 0x7, 0x1, 0x8, 0xa9, 0x91dd, 0x6, 0xfff, 0x1, 0x2, 0x1, 0x10001, 0x400, 0x6, 0x7, 0x3, 0x0, 0x3f, 0xb5a, 0x0, 0x8, 0x0, 0x20, 0x9f, 0x5, 0x2, 0xffffffffffffff12, 0x4, 0xfcd, 0x1, 0xbe, 0xee40, 0x2, 0x3, 0x3, 0x51a0000, 0x6, 0x2a, 0x6, 0x8, 0xff, 0x401, 0x1000, 0x8001, 0x80, 0xd9, 0x7, 0x7, 0x8, 0x200, 0x100000000, 0x3, 0x0, 0xa7, 0xfffffffffffffff2, 0x0, 0x20, 0x7, 0x400000000, 0x87, 0x3ff, 0xbbdf, 0x3, 0x1f, 0x3, 0x5, 0x7ff, 0x1000, 0x6, 0x7, 0x3f, 0x1, 0x8, 0x6, 0x7ff, 0x33, 0x9, 0x4, 0x100000001, 0xa0fa, 0x7, 0x9, 0x3f, 0x9, 0x1000, 0x3f, 0x1000, 0x7, 0x9, 0x8, 0x5, 0xfffffffffffff87c, 0x269c, 0x6, 0x5, 0x6, 0x71, 0x8001, 0x6, 0x8, 0x24c0000000000000, 0x20000, 0x0, 0x9, 0x101, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x1, 0x1e76, 0x0, 0x15ecf238, 0x0, 0x5373, 0x400, 0x45b2177c, 0x100000001, 0x7fff, 0x81, 0x0, 0x20, 0x40, 0x0, 0x8, 0x0, 0x81, 0xb1a, 0x4, 0x2, 0x0, 0x3c, 0x1, 0x9, 0x1, 0x34, 0x2, 0x1, 0x5, 0x0, 0xe49, 0x3, 0xc7, 0x3, 0x1, 0x78, 0x600, 0xfffffffffffffff7, 0x4, 0x8c, 0x200, 0x186, 0x2000000, 0x10000, 0x80000000, 0x7, 0x8, 0x5, 0xd5e, 0x1f, 0x0, 0xc2, 0x15d54000000000, 0x5, 0xfc5c0e8, 0x6, 0x10001, 0x5, 0x4, 0x400, 0x5, 0x0, 0x4, 0x4, 0xffffffffffffffb9, 0x9, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x1, 0x8000, 0x9, 0x9, 0x100000000000000, 0x4, 0x4, 0xffffffff, 0x6, 0x6, 0x10001, 0x7, 0xfffffffffffff000, 0x66d2, 0x400, 0x2, 0x1, 0x1, 0x6, 0xb4f, 0x80000001, 0x1, 0x1000, 0x6, 0xffffffff, 0x2, 0x3, 0xd9, 0x6, 0x8, 0x3c, 0x2, 0x7, 0x8000, 0x8001, 0x4, 0x400, 0x200, 0x8, 0x1, 0x3, 0xffffffff, 0x7, 0x0, 0x30, 0x100000001, 0x1f, 0x4, 0x20, 0x2, 0x1, 0xa9, 0x5, 0x9c6, 0x3ff, 0x0, 0x7e3, 0x6eee, 0x3, 0x9, 0x1ff, 0x70000000, 0x7fffffff, 0x59bd, 0x0, 0x5, 0x0, 0x80000000000, 0x20, 0x401, 0x6, 0x70206495, 0x800, 0x0, 0x4, 0x8, 0x200, 0xa5, 0x7, 0x10000, 0x82f4, 0x2c, 0x9, 0x5, 0xffff, 0x76a, 0x6, 0x80, 0x12364b2b, 0xffffffffffffffc1, 0x5, 0x7ff, 0xb70, 0x7f, 0x5, 0x7, 0xfffffffffffffffd, 0x800, 0x3, 0x3, 0x7, 0x1, 0x480899, 0x7, 0x3, 0x9, 0xfffffffffffffffb, 0x80, 0x2, 0x3, 0x101, 0x3, 0x0, 0x4, 0xf2, 0x40, 0x0, 0x20, 0x9, 0x8c, 0x1, 0x3ff, 0x95, 0x615d, 0x2, 0x4, 0x7, 0x7, 0xffffffffffff8001, 0x9, 0x8000, 0x1, 0x9, 0x7fffffff, 0x100, 0x3, 0x9, 0x1, 0xff, 0x8, 0x9, 0xfffffffffffffff9, 0xe25, 0x9, 0xfff, 0x7, 0x1f, 0x2, 0xbd1, 0x5513, 0x0, 0xc1, 0x99a, 0x49f8, 0x200, 0x100, 0x9, 0xfffffffffffeffff, 0x3d20, 0x1, 0x80, 0x401, 0x8, 0x8, 0x5, 0x4, 0x3, 0x5282, 0xf15, 0x3, 0x5a, 0x1, 0x0, 0x5, 0xf9, 0x7, 0x1, 0x0, 0x1, 0x3, 0x1, 0x4000800000000, 0x2, 0x4, 0x8d, 0x9, 0xffff, 0x1f, 0x2, 0x80d, 0xff, 0x0, 0x8fc, 0x1000, 0x6, 0xc7c, 0x0, 0x5, 0xf9c9, 0x936, 0xffffffff00000000, 0x401, 0xf26, 0xffffffffffffff81, 0x5, 0x3, 0x20, 0xfffffffffffffffe, 0x5, 0x0, 0x7ff, 0xda, 0x0, 0x9, 0x4297d763, 0x9, 0x7, 0x0, 0x1, 0x4, 0x3, 0x8, 0x557, 0x3, 0x400, 0x5, 0xffffffffffff0000, 0x9, 0x1, 0xff, 0x401, 0x9, 0x1000, 0x3, 0x1000, 0x3ff, 0x7ff, 0x8001, 0x4, 0x200, 0x0, 0x800, 0x200, 0x400, 0x8001, 0x99e6, 0x20, 0x1f, 0x1ff, 0x57e, 0x6, 0x3, 0x1fa7d38f, 0x3f, 0x7fffffff, 0xc0, 0x200, 0x7fff, 0x800, 0x8, 0x8000, 0x401, 0x1f, 0x8fa, 0x21, 0x0, 0x3, 0x5, 0xfffffffffffffff9, 0x7fffffff, 0xc6, 0x3, 0x4, 0x9, 0x3, 0xd7, 0x2, 0x6, 0x100000000, 0x3, 0x5, 0x6, 0x9b, 0x3f, 0xffffffffffffffc1, 0x0, 0x3a, 0xa127, 0x1e, 0x1, 0x4, 0x8, 0x2, 0x4000000000000000, 0x71, 0x9, 0x4, 0x1c2, 0x1f, 0x40, 0x1, 0xffffffff, 0x7fffffff, 0x100000001, 0x6, 0x1, 0x11, 0x27b9, 0x4468, 0x2, 0xfffffffffffffffa, 0x653, 0x7, 0x0, 0x73, 0x0, 0xfffffffffffffff2, 0x7f, 0x0, 0x7fffffff, 0x2421, 0x0, 0x6, 0x3f, 0x4, 0x0, 0x10001, 0x9, 0x24b5, 0xfffffffffffffffd, 0x2, 0x7, 0x5, 0xfc, 0x9, 0x1, 0x375, 0x0, 0x2, 0x0, 0x9, 0x0, 0x10000, 0x3, 0xb4e3, 0x5e0a, 0xfffffffffffff000, 0x6, 0x6, 0x81, 0x100000001, 0x7ff, 0x7, 0x7, 0x7, 0x4, 0x40, 0xc886, 0x0, 0xfff, 0x4, 0x1, 0x1, 0x4, 0x4, 0x8f18, 0x3, 0x4, 0x6, 0x5c9e2309, 0x0, 0x80, 0x10000, 0x0, 0x72, 0x81, 0x3, 0x0, 0x80, 0x6, 0x1, 0xad6, 0x10001, 0x3, 0x401, 0x9, 0x5, 0x9, 0x34, 0x800, 0xfffffffffffffffa, 0x5, 0x36, 0x81, 0x1, 0x0, 0x0, 0x9, 0x8, 0x1, 0x401, 0x663d8000000, 0x0, 0x4, 0x5, 0x40, 0x3, 0x1, 0x1, 0x40ea, 0x6944, 0x1, 0x4, 0x3ff, 0x5, 0x0, 0x8000, 0x7ff, 0x401, 0x0, 0xfffffffffffffffb, 0x3f, 0x3, 0x0, 0x4b1a, 0x3, 0x4, 0xff, 0x7, 0xffff, 0x7, 0x2, 0x0, 0x9c0b, 0x31cb, 0x0, 0x0, 0xfff, 0x6, 0xf7, 0x9, 0xc00000000000000, 0xd6e, 0x4, 0x3, 0x6, 0x40, 0x3, 0x4, 0x7f, 0xfffffffffffeffff, 0xd412, 0x1000, 0x2, 0x5, 0x0, 0xff, 0x400, 0x9, 0x0, 0x4, 0xa0, 0x15d, 0x9, 0x8, 0xfffffffffffffc01, 0x16, 0x2, 0x6, 0xfff, 0x8001, 0x8, 0x2, 0x1, 0x9, 0x0, 0x180000000, 0x0, 0x0, 0x401, 0x3, 0x1cb3, 0x40, 0xfffffffffffffff7, 0x1, 0x7, 0x3dd8, 0x2, 0x8, 0x3, 0xfffffffffffffffc, 0x9, 0x4, 0x1, 0x100, 0x4, 0x1, 0xffffffffffffdb04, 0x1a, 0x9, 0xfff, 0x1, 0x7, 0x6cf, 0xd5, 0x2f2, 0x2, 0xae8, 0x1, 0x100000001, 0x5, 0xffff, 0x6, 0x6, 0xbc, 0x3, 0x800, 0x7f, 0x8, 0x100000000, 0x3ff, 0x6, 0x7ff, 0x5, 0x4, 0x5, 0x7, 0x0, 0x1, 0x4, 0x0, 0x4, 0x4, 0x7fff, 0xf8ca, 0x7ff, 0x3, 0x4, 0x7, 0x7, 0x4, 0x7fffffff, 0x4, 0x10001, 0x8001, 0x7, 0x9, 0x8, 0xffffffffffffff81, 0x100000000, 0x81, 0x8, 0x35b4, 0x2, 0x18ba, 0xdbe, 0xfff, 0x8000, 0x8, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffe0, 0x33efb82d, 0x0, 0xbf, 0x8af, 0x180000000, 0x756, 0x6, 0x1f, 0x1, 0x10001, 0x6, 0x3f, 0x2, 0x7ff, 0x5e, 0xe70, 0x10000, 0xfffffffffffffe01, 0x2, 0x1f, 0x0, 0x1, 0x20, 0x6, 0x4, 0x2, 0xb4e7, 0x0, 0x1, 0x7, 0x8, 0x80000001, 0x0, 0x3, 0x2, 0x9, 0x800, 0x8, 0x7d0, 0x7f, 0xaac9, 0x1f, 0xffffffffffffa4c2, 0xd9de, 0x80000001, 0x101, 0x9, 0xffffffffffff0892, 0x8000, 0x8, 0x1800000000000000, 0x401, 0x4572, 0x1, 0x100000000, 0x80, 0x7fff, 0x7a, 0x1, 0x6, 0x4, 0x2, 0xf28, 0x800, 0x100000000, 0x542, 0x7f, 0x11b, 0x5, 0xe1b, 0x0, 0x777a, 0xff, 0x3, 0x1f, 0x8, 0x8001, 0xfa25, 0x0, 0xa6, 0x4, 0x7, 0x1ff, 0x1592, 0x5, 0x80000000, 0x80, 0x40, 0x667a, 0x100000000, 0x89500000, 0x80000000, 0x7, 0x80, 0x3, 0x9b, 0x2, 0x6, 0x5, 0x15, 0xf11b, 0x1ed, 0x8, 0x101, 0x2, 0x240, 0x400, 0x6e, 0x80000000, 0x0, 0x100000001, 0x100000000, 0x3, 0x33, 0xffff, 0xff, 0x9, 0xa529, 0xff, 0x2, 0x7, 0x6, 0x8001, 0x3a0000000000000, 0x100000001, 0x800, 0xc0000000, 0x6, 0x9, 0x343, 0x7, 0x8, 0x9, 0x3, 0xff, 0x125, 0x8, 0x80000000, 0x7fff, 0x80000000, 0x1, 0x2, 0x9, 0xca42, 0x1, 0x6, 0xfffffffeffffffff, 0x1, 0x100, 0x400, 0x1ff, 0x5, 0xfffffffffffffffa, 0x5, 0x7, 0x3, 0xa174, 0x6, 0x3, 0x80000001], "f3933ab20c399d12a27502d54bd79e04dbdee73fe7391e5a4eeb459bde6ce55c45a3aad9ccb0e0741e313dd5aa0412243ea99b7ca5efc9348fd20f1fbe0935d6f6076cbbbc70dd106c7fbc26d11ad0bce6909d6cafb5ffa1a803850396e5def44d73a28eee2540f208e009e10a20454da72ea6ea56acac6d20efb8dc18afb1412731a19eb99578ca898351292d64c8f0849fc4e5a9690c39d69868f4da5d893ec171a82c7985396dc8ec7b71fba9ef14f0900ed18044c30b6b9bf032ea3afcc100aa3e7a6fc3e2ff9394338e1e99ef6506776ae7fd87194cabc0abc906f30f28144f2bce723271"}}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = getuid() setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001980), 0x4) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000440)='./file0\x00', r1, r2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000016c0)={0x0, 0x9a, 0x7f}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001740)={r3, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x8001}}, 0x134, 0x4}, &(0x7f0000001800)=0x90) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001680)='/dev/audio\x00', 0x200, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f00000019c0)=0x30) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x3ff}}, 0x10) 03:33:55 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x1, 0x436c, 0x4, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x8, 0x1}, 0x8) r2 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000900083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 03:33:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x3c3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x100000001, 0x0, r0}, 0x2c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000001c0)=""/142) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x2, 0x3f}}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000003c0)={r3, 0xb2, "7deb0c1bf7afdea9a1a81f13a083ad9c481c1ca6a1fd5a1a5a4206238029323c001005a5f8fb0b00a966e12b0ef7da4ddaebddea454e453f188b0318a33cbeb72a19876d781beae96f56ca53570ca0e2e802aea2c87173a975c1ec75ae4d90de199d3831162b3d8471fa54a6cdd6810dcaeb0ecb52c4262afc49b526c541186012f95e4e0ff823fc98936ad644cc0d3e442ed4db0f456964da2b49052d95bb199537adb9919c3fc81666e27c91aaa0477926"}, &(0x7f0000000480)=0xba) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffd34, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000004c0)=@int=0x6, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/129}, 0x18) [ 465.364387] binder: 12576:12578 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.372201] binder: BC_ATTEMPT_ACQUIRE not supported [ 465.389443] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 465.448938] binder: 12576:12578 ioctl c0306201 20000280 returned -22 [ 465.458895] QAT: Invalid ioctl [ 465.462330] QAT: Invalid ioctl [ 465.466110] binder: 12576:12583 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.473924] binder: BC_ATTEMPT_ACQUIRE not supported [ 465.481902] binder: 12576:12583 ioctl c0306201 20000280 returned -22 [ 465.484496] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:33:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x89) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'bpq0\x00', {0x2, 0x4e21}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 03:33:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x20000]}}, 0x1c) 03:33:55 executing program 6: bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='schedstat\x00') ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0xfffffffffffffffe) sendto$inet(r0, &(0x7f0000000340)="883a7c845600b91c99acfa70516878886c7c16824ffd868e29111261785d7dd2eaa98627bda3af0ef07506468abcd51227222ede419784246a7497dd580db9409605f4b14c5bced0b552576a43df4ae12bb0a72f99c4db69d4095c7f2b8db32c0c6903b9304b99bb4ac29a", 0x6b, 0x40, &(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0xfe5c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x82) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @loopback}, &(0x7f00000000c0)=0x8) ustat(0x7, &(0x7f0000000040)) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) [ 465.493219] device lo entered promiscuous mode [ 465.496560] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 465.506828] QAT: Invalid ioctl [ 465.519262] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 465.526231] QAT: Invalid ioctl [ 465.534199] device lo left promiscuous mode 03:33:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x400c630f}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x44) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="020000000100000a000000000200000000000000", 0x14, 0x0) 03:33:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x8001, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x5, 0x9}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 03:33:55 executing program 4: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='modI5']) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f00000001c0)) [ 465.597195] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x55, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f0000000000), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f00000001c0)='/dev/rtc#\x00', 0x1) write$P9_RRENAMEAT(r5, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) r6 = dup(r4) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xff, 0x8, [0x100, 0x81, 0x4, 0x82de, 0xff, 0x570b, 0x2, 0x400]}, &(0x7f0000000440)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000480)={r8, 0x6}, &(0x7f00000004c0)=0x8) fcntl$lock(r5, 0x5, &(0x7f00000003c0)={0x0, 0x3, 0x2, 0x7, r7}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000000)={0x7fff, 0x14, [0x7, 0x5cf466a9, 0x35, 0x6, 0x5]}) sendmmsg$unix(r3, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r6]}], 0x18}], 0x4924924924926c2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000180)) [ 465.664337] binder: 12623:12628 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.672141] binder: 12623:12628 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 465.717552] tmpfs: No value for mount option 'modI5' [ 465.729315] binder: BINDER_SET_CONTEXT_MGR already set [ 465.738687] binder: 12623:12643 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.746496] binder: 12623:12643 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 465.747971] binder: 12623:12628 ioctl 40046207 0 returned -16 03:33:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00900200", 0x101}) 03:33:56 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast1, @rand_addr=0x3}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x9, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1000, 0x4cfc66ef}, {&(0x7f0000000080), 0x0, 0x80}, {&(0x7f00000000c0)="8ed4671886f414416f280d298eb37ecac361f86ca4eb145f0fd0e3062c1e939cb548ec9b3ec40329783169b42318f2ce3dc8ad0be8899051d27234d15d2e90d4c562773b70ad1949d94d0c16b0d8cf3db49ccf71a5b6d192e129dd94e1e2cedc598fbd2e97009b98a9724de827add89aac2e76b8209d", 0x76, 0x4}, {&(0x7f0000001b00)="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", 0x1000, 0xdc}, {&(0x7f0000000180)="20847cf53b1a8094bbf72d2e06dad8d1e426c2be7c8dbf419a39e7111992b017ad586efe3e2fe58024c96f13c5", 0x2d}, {&(0x7f0000000400)="c0af9f6561c53ab94fd30e273da8e95383fb6a6321e802c499d572aca9fc8dda9f6d4c5f3a756fe4dbed446bb65fe2ef8e5e97ba5d3913e343552864cf9affa3bebd3d457400736bc5d3c1df897226b397533dcbc7d0eace97a72a9aa86b99e0cb9987e1bf30b0c4536df8a0ad92faa4a5d6455ba4824d5800fceb1c83ec4eb511d36f2b", 0x84, 0x200}, {&(0x7f0000000340)="28ff6ac8820faef585fd0bda2ff9d1e57200e69cb2030d3289085b32a2e44a6d871da0772e69845e76a07999872c14afbb738b6759070b1f472c3e5c", 0x3c, 0x8000000000000000}, {&(0x7f00000004c0)="d8d4cd7e8f0a594f3bd4f3b5f7be281aa2ac49271f766af5a429ac480e5f565e18740fca2a22f857fc3d30f87a3c9fee4e8a6289ee2536f60b6a8ee3d47deac58a212ce40441eb11131ebe004cebea1a71670ce9d01fbd87d33f837f2a831311e6a4c5052ecdba98c24ceb0891c4e62a43ab4da9472b7ab591f538fcede6f1231cba45e2c7386547998be2c6e49d65065434352a8cb504581c8d886584a50860a56ed3a63038c206ae02a0c7ce79630fddc0b67e87c1c030616381d624a50b228a9f004ac2d6436769e22ecee515cefa2c974a086ce1b6124fb1e3ad5c3cfd0da1a5dc9bc80c000e", 0xe8, 0x5}, {&(0x7f0000000380)="d87096e89c312b6f53", 0x9, 0x31}], 0x20400, &(0x7f00000005c0)={[{@nolazytime='nolazytime'}, {@six_active_logs='active_logs=6'}]}) 03:33:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), &(0x7f0000000080)=""/248, 0xf8, &(0x7f0000000200)={&(0x7f0000000040)={'rmd320\x00'}}) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x20) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) r1 = gettid() openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x20) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)=0x0) rt_tgsigqueueinfo(r1, r2, 0xa, &(0x7f0000000280)={0x3a, 0x5, 0x1, 0x9}) 03:33:56 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x40020000]}}, 0x1c) 03:33:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/229, 0xe5) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000280)=""/188) 03:33:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="c72d41306481132ecaeb0899d24a27f34ad9c2a595ed4d828aa9a28776149310e5d900bc8e9817fac75fe4905f0691c0936a2e6861e3f39169d5023f6612cb257dd7fcc4c6719a367290779f6f3561249e98b84e71fd7aa50511f56c4e20878cdb0dea555cc536d58c2456cfed122f905a04e1f5c9926268d040202601de66556f40ddb1b1c9b7fe72c3334c694ff71b0bda3831c879551793c506eb86849a0e60f89e5a2a6a739d309d49ad0fa344d12b8a5597941ac3bd9eb306f9b3fc1d51f592046357f35ab82a95ec9a2c3908f6f6", 0xd1, 0x5}, {&(0x7f0000000240)="c75f7e0aecf7ee32058f024098fe29f290a6addd73df7510593223448a903a217b53b7c11802f51b993c5f99488646224de4aebb7184c0c3c4706ed976d1f815db4ebcec835443feb69710d61c083af08dda737d7545c9170e566bf1cae75829c7a39d7ef729279276457265568d20416d658c5e5990f4f4264a11cb53afd134940082b9969ecdbbecb6fbb0878e45", 0x8f, 0x9}], 0x1, &(0x7f0000000340)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@balloc_border='block-allocator=border'}, {@usrquota='usrquota'}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f3f083415a0066b8bb000f00d866b89d000f00d0f20f219a66bad104b800780000ef2e660f38820d310c00000f01c80f32d8f166bad004ec", 0x38}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010141}]}) 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046305}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x24) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6(0xa, 0x801, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x64, 0x800) getdents64(r2, &(0x7f00000000c0)=""/194, 0xc2) [ 465.911477] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 465.918207] device lo entered promiscuous mode [ 465.927440] binder: 12655:12665 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.943012] device lo left promiscuous mode 03:33:56 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x7c6c, 0x20c0c1) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0xfffffffffffe, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x7, 0x2}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0xfffffffffffffeff}, &(0x7f0000000240)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x101, 0x6, [0x5, 0x10001, 0x1f, 0x5, 0x200, 0x2]}, 0x14) sendmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)}}], 0x4, 0x0) [ 465.960997] binder: BINDER_SET_CONTEXT_MGR already set [ 465.968603] binder: 12655:12677 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 465.976713] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" [ 465.994030] binder: 12655:12665 ioctl 40046207 0 returned -16 03:33:56 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40106309}], 0x0, 0x0, &(0x7f0000000180)}) [ 466.009680] binder: 12655:12677 Acquire 1 refcount change on invalid ref 0 ret -22 [ 466.037082] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 03:33:56 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2180) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") recvfrom$inet6(r2, &(0x7f0000000140)=""/86, 0x56, 0x1, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @mcast2}, 0x1c) 03:33:56 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000]}}, 0x1c) [ 466.123092] binder: 12704:12706 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.130936] binder: 12704:12706 BC_ACQUIRE_DONE node 306 has no pending acquire request [ 466.142063] tls_set_device_offload_rx: netdev lo with no TLS offload [ 466.161293] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x801, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000140)={0x5, 0x7, 0x80000000000000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000018000000ff00000000000000"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r6 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x454, 0x0, 0xa, 0x20, 0x70bd2b, 0x25dfdbfc, {0xd, 0x0, 0x1}, [@nested={0x178, 0x7, [@typed={0x8, 0x34, @pid=r5}, @generic="25aecb63061ff08c3bc76d77d0ec510d513e3dbcade6fcd230737ce425c67227f540caa54033d6c6464fec9ca66d4b15fcf0e7ee83dda938dfc9ef2364ea2595f7673c4d18b7625af5b380e91d025aac83c24f7cb49392ef112ca29bdb91081d0f32c6e8f033922b2f316eaa", @generic="8e1f0c7b370ebb3e192233b0c22c073233fc11e595fef5118d57aed4b981c080bb6383115263780899245460feb8799a1da39f75b98bdb7c5595ab3eee49e086e9bd767873e5a6bfe53b7bbb9854ccc5e8d7ec4967e42209a0c587", @typed={0x14, 0x92, @ipv6=@ipv4={[], [], @loopback}}, @generic="95f83922547ce25fb0285a3e876d9a3059e7971ab5f84e6990f9cd61430b49ce9ded48e08608763ae31e7249ad93381bd9e3df0ddb0a739dfd7fc36084ab07525167cd3ab925f5d3b6ea18428f7d35a524845f58eab5c91ea58d9149c2dcade338b78c9122da5dc9fd11f48ce702092c1d3a85c2ef017d3636c9249084d772c6a5b95623b459845eeaa09b5122eb4a"]}, @typed={0x4, 0xd}, @typed={0xe4, 0x1a, @binary="447254415f1efcbe52d7eca1121fb846f73ac2439525506e692138d28ebdfdfcd192697734da0390ccad55bc07e1cf41276a71eda57b3250d066499cae3077d546d84d6b6d6cb31ae2f7e44cd54d36cbdd10fea83a1b55c521c8d7fc55d2add2480b3f30de6a3b34bca6351fcba49a1d17a0b4b49c578bb0c7b07278051660351eaad9b1cc5020400f5866306c814c309ab2b717a35658d8099e394bb025c9851d2b8162fea377a93ad208a7c890b5c4bc68f190c9fdc8ea979916d272b001e58c9bd0476fcddf62ae72ff093e886de8274e0ca40896136da6ab71bb64"}, @generic="565f58f14f43b3f6c6a862f1163144e673cbc59fd07085deb3c0d50ec3e2c187158369c868df", @generic="1e9546c0fee91616233b4364c3092154493f28ef2ad71ba1edee422db328ab1bede3874e435190ebe3bf0b12106c0baedbe01ca5f714626c579bdf974e338edfef72c5d4bdebb5ee690bfe2e9973e54dde09c9e1d343485934bed361bcdbd580854be84eb8", @generic="6d5fa02e97e3d6526045abd956801772ac4bf2a2e53811998526ebecebbc201a5925954a211de628e645b09751a456d05f3ad99ee492fe6374e9013a225be13b602605f1949cb1cb8e4eeb0779b80f0244d68cc023e560044d92643c02aacf46cfa719160dba2743347a7544", @generic="31d4e144c0e27af37b82b6e55861021987da0b5f43a0ab803180cd58c4cd1c5c290248fa45f5f4e5369e759f2d697053d0d86016aca097169287f9f210be0fdea2fe26457082fe8fe4444bbd5f25f3fbab25c56109d26c7fcecf4768e539e4ece20ecf09cb7e9c37a0f2f982aa5547517b4823d4fc4d9d55323ec1edd0419b302743ab6b1c2a58c5bd3a801be9991a3b831b7854f9b22a45f7b857daa64cb41c47d5e4947b3128af84a71d4d8ca997a781e399f16ed5360878e221d51c63c003f967c59202fd3cffde0d321afece1d8166cf0774f4f3a9b3c63b703fd4e7f5", @typed={0x8, 0x40, @pid=r6}]}, 0x454}, 0x1, 0x0, 0x0, 0x8014}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [0x485, 0x0, 0xffffffffffffffff]}) 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40086303}], 0x0, 0x0, &(0x7f0000000180)}) [ 466.162238] binder: BINDER_SET_CONTEXT_MGR already set [ 466.175104] binder: 12704:12714 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.181334] binder: 12704:12706 ioctl 40046207 0 returned -16 [ 466.184820] binder: 12704:12714 BC_ACQUIRE_DONE u0000000000000000 no match [ 466.262302] binder: 12724:12725 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.278139] binder: 12724:12725 BC_FREE_BUFFER u0000000000000000 no match [ 466.293218] device lo entered promiscuous mode [ 466.299189] binder: BINDER_SET_CONTEXT_MGR already set [ 466.308529] binder: 12724:12727 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.325096] binder: 12724:12725 ioctl 40046207 0 returned -16 [ 466.344252] binder: 12724:12727 BC_FREE_BUFFER u0000000000000000 no match 03:33:56 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:56 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3]}}, 0x1c) 03:33:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000002b900", 0x101}) 03:33:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40086303}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:56 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x7c, &(0x7f0000000880)="ec859b18bb8491b5cd660a21e62045093c0a97dbd8c41b9312f8ffffffff4d71e84f2e4efcefa01fcfe48b0345899191387b7da6372cae41b54c495b031614a4bcc9332731c05d9a292057b8a7ad9f7a515c4ff77600bd656bdc5cd5e50df3631156776a2711e5b4864f0374c78582ebb957b15463870f2f264cad0ffd626f45c0b5bb28715ea507215d4632db40a51df7dda0ff06e1f7a4e73dd68b64c3c245a10b04fe1dc3313fa26316f8eba8f5920719af6d0465f32c76e289dee7d613ee411676b625a26930cfc929381124bff71f9c61514c1bbf9c53041ab99dc28a692e171ff87bb60789660222276b0e2e9e9f6c1574a1253010a189941d9ba75435dd6ee4d911b1adebfafe95cc96ba35dd9fb2477a0407d55a44ced32467635ab4503dfab3f58a852acb86495a00a2f3946f3693ed6d152d26d5bead3435fbbd2b4b9ce18b6eba9541fb98f9b07ba8f8912eb530f25abac19539bc60e1edd2677873a12c15794325de02e3bfaece", 0x316) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x271eca7deeddcada}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x81) getsockname$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) 03:33:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x400c630e}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)="6367724ab826f53a518b0900726561298600bd1be27b63097146fda1a3a3068aa239dd98232b3c3fef49c5bc538b4130d4c300ff7f091c8ce0c5c006c579a04574dbc7f1d7c5789425f70de40a2f40bb970dda3a320239a00202ab00b318056ce86a842e746b20add8ea21673dfb9ae87a5adf169650fd1053f3dc33cfece64f4e4faa3d1e37189a94eb2f4a92680d1fb7e80d977bdc023affa51170f228e2405da74a7ce2f761ed177634a8e2", 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0xffffffffffffff42) gettid() r3 = memfd_create(&(0x7f00000001c0)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r3, r3, &(0x7f0000000080), 0xb516) statx(r3, &(0x7f0000000000)='./file0\x00', 0x7000, 0x4, &(0x7f0000000300)) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000002c0)) [ 466.591398] binder: 12741:12750 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.591757] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 466.614617] binder: BINDER_SET_CONTEXT_MGR already set [ 466.621526] device lo left promiscuous mode [ 466.624173] binder: 12741:12750 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:56 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:56 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21}, 0xd0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) geteuid() sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:33:56 executing program 4: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x5, {{0x2, 0xfffffffffffffffb, 0x100000001, 0x1, 0x62, 0x80000000, 0x6, 0x100000000}}}, 0x60) [ 466.644808] binder: 12753:12755 ioctl 40046207 0 returned -16 [ 466.649934] binder: 12753:12759 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.694646] binder: BINDER_SET_CONTEXT_MGR already set [ 466.698850] binder: 12741:12770 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.720033] binder: 12753:12759 BC_FREE_BUFFER u0000000000000000 no match [ 466.724394] binder: 12741:12750 ioctl 40046207 0 returned -16 03:33:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x3, &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000001, 0x0, 0x17b]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x1000) 03:33:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40086303}], 0x0, 0x0, &(0x7f0000000180)}) [ 466.742235] binder: 12741:12770 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:57 executing program 6: r0 = socket$inet(0x2b, 0x80802, 0x5) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x76a, 0x400a00) ioctl$TCFLSH(r1, 0x540b, 0x19800000000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x404000, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="42093a2bc1b8400cc9664e696212d956b04eba794b8c19f61dc8a729869ccc78d0547b951166ce33ad7d46db4341b378c7541cf181d9") setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000000c0)=""/126, 0x7e, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) ioctl$KDMKTONE(r1, 0x4b30, 0x10000) 03:33:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe0ffffff00000000]}}, 0x1c) 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40086310}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') dup2(r0, r0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/111, 0x6f}], 0x1) pread64(r0, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000000)=""/107, 0x213) accept(r0, 0x0, &(0x7f00000000c0)) [ 466.867494] binder: 12782:12790 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.893843] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 466.918315] binder: 12782:12790 BC_FREE_BUFFER u0000000000000000 no match [ 466.933982] binder: BINDER_SET_CONTEXT_MGR already set [ 466.953740] binder: 12795:12797 ioctl 40046207 0 returned -16 03:33:57 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x80040) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) dup2(r0, r1) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0xfffffffffffffdb5) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000040)='\a', 0x1, 0xe802, 0x0, 0xffffffffffffff0c) [ 466.965880] binder: 12795:12803 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 466.973678] binder: 12795:12803 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000000000c0fe00", 0x101}) [ 467.043544] device lo entered promiscuous mode [ 467.049210] binder: 12795:12803 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.057005] binder: 12795:12803 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 467.148202] device lo left promiscuous mode [ 467.266721] device lo entered promiscuous mode [ 467.276771] device lo left promiscuous mode [ 467.391690] device lo entered promiscuous mode 03:33:57 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='em0trustedwlan0em1*]\x00', 0xffffffffffffff9c}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x3, r2, 0x0, 0x0, 0x1}}, 0x20) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)="6390a2ea34e8e2b2e94ef2431e2e89ecd4dac1caa5f9cfb99ca1151821a4cb52af9f659884483d6073468e14dc33daa77e427cdd5c167540e1b2c924b60587ec57f12c7272c57484914924b1feb9111265a7782fb280ed39c9c7e7ceb3e21e88c386de5b13df6db793920247fd426230d7820fe25f2998c2e6ebc627c8b9f06bfccda05877c8064b3337c8bbcaa7ff2c65ae3d553bf007ba49", 0x99) write$P9_RREADDIR(r1, &(0x7f00000004c0)={0xe3, 0x29, 0x2, {0x7, [{{0x6, 0x4, 0x4}, 0xf8e4, 0xffff, 0x7, './file0'}, {{0x1, 0x3}, 0xfffffffffffffff7}, {{0x0, 0x0, 0x3}, 0x953, 0x7, 0x7, './file1'}, {{0x80, 0x2, 0x2}, 0x1f, 0x1, 0x7, './file0'}, {{0x21, 0x4, 0x3}, 0x40, 0x6fa, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0x5d84, 0x200, 0x7, './file1'}, {{0x4, 0x0, 0x3}, 0x5aa3, 0x4, 0xd, './file0/file0'}]}}, 0xe3) write$P9_RREADDIR(r1, &(0x7f0000000340)={0x2a, 0x29, 0x2, {0x80, [{{0x8, 0x4}, 0x6eb1, 0xce8e, 0x7, './file0'}]}}, 0x2a) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write$P9_RSYMLINK(r1, &(0x7f0000000380)={0x10f, 0x11, 0x21, {0x0, 0x2, 0x6}}, 0x14) 03:33:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40086303}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:57 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) clone(0x66000, &(0x7f0000000400), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x3000) shmdt(r0) 03:33:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1100000000000000]}}, 0x1c) 03:33:57 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000028000008500000000efffff9489f501647ce493dfe0841877c7ef0a77b407990834e91100b3a42b79af4d606de7723096b8bc3a19cb79f6931a09d75e5c6c4814ce3df9f5cce1f62db281edb642061df73d5dcf1acb8a48f2bd3de089b6238dd0c586c146de9dc000b30d362a2d021228"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x101002, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000600)=""/26) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000005c0)=0x400, 0x4) r3 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x10000, 0x423d) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000380)={0x77445e32, 0xffffffffffff7f37, 0x6, 0x8001, [], [], [], 0x4, 0x6, 0x3b4, 0x6, "dc327f04a9614218ee0544cbd4f3c69c"}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000280)='GPL\x00', 0x1, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) 03:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000500", 0x101}) [ 467.497480] device lo left promiscuous mode [ 467.503692] binder: 12823:12837 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.508851] binder: BINDER_SET_CONTEXT_MGR already set [ 467.511466] binder: 12823:12837 BC_INCREFS_DONE node 311 has no pending increfs request [ 467.523695] binder: 12826:12833 ioctl 40046207 0 returned -16 03:33:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0xbf, @tick, 0x0, {}, 0x0, 0x0, 0xfffffffffffffbff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40bc5311, &(0x7f00000001c0)={{0x80}, 0x0, 0x0, 0x0, {0x7f}, 0x4}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) [ 467.548924] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 467.552004] binder: 12826:12844 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.567417] binder: 12826:12844 BC_FREE_BUFFER u0000000000000000 no match [ 467.571252] tls_set_device_offload_rx: 3 callbacks suppressed [ 467.571260] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:57 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xd26a9e) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r3, 0x0) openat(r2, &(0x7f0000000440)='./file0\x00', 0x101180, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x3}, 0x8) fremovexattr(r4, &(0x7f0000000380)=@known='security.ima\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x4961) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000003c0)=0x9d3c) fdatasync(r3) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in=@remote}}, 0xe8) 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046306}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00i\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0f0000000000000000000000"], 0x24}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xf, "3b147c5ddaf269d995c0c28f6b427a"}, &(0x7f0000000140)=0x17) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x10001, @remote, 0x400}}, [0x2, 0x5624, 0x4, 0xffff, 0xe61, 0x3f, 0x0, 0x0, 0x6e7d, 0x0, 0x1ff, 0x5, 0x9, 0x7, 0x9]}, &(0x7f00000002c0)=0x100) [ 467.603036] binder: 12823:12851 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.603566] binder: BINDER_SET_CONTEXT_MGR already set [ 467.610883] binder: 12823:12851 BC_INCREFS_DONE u0000000000000000 no match [ 467.629217] tls_set_device_offload_rx: netdev lo with no TLS offload [ 467.638888] binder: 12823:12837 ioctl 40046207 0 returned -16 03:33:57 executing program 0: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000100)=""/83, 0x15d) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = accept$alg(r2, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r5, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f000007d000)="b3", 0x1}]) [ 467.706206] binder: 12863:12867 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.714081] binder: 12863:12867 Release 1 refcount change on invalid ref 0 ret -22 [ 467.744290] binder: BINDER_SET_CONTEXT_MGR already set 03:33:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046309}], 0x0, 0x0, &(0x7f0000000180)}) [ 467.753068] binder: 12863:12876 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.760878] binder: 12863:12876 Release 1 refcount change on invalid ref 0 ret -22 [ 467.770321] binder: 12863:12867 ioctl 40046207 0 returned -16 03:33:58 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_dccp_int(r0, 0x21, 0x15, &(0x7f0000000000)=0x40e30c01, 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x6, 0x8, 0x3f}, &(0x7f0000000340)=0x10) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:58 executing program 0: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[]) r0 = semget(0x1, 0x0, 0x104) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000240)=""/101) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001440), 0x30, &(0x7f0000000100)={[{@resuid={'resuid'}}]}) [ 467.804601] device lo entered promiscuous mode 03:33:58 executing program 2: setrlimit(0x8, &(0x7f000000a000)={0x0, 0x8000}) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) creat(&(0x7f0000000000)='./file0\x00', 0x110) mlockall(0x2) 03:33:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00`\x00', 0x101}) 03:33:58 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 467.901595] tls_set_device_offload_rx: netdev lo with no TLS offload [ 467.915531] device lo left promiscuous mode [ 467.922285] EXT4-fs (sda1): re-mounted. Opts: resuid=0x0000000000000000,,errors=continue [ 467.935382] binder: 12884:12896 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.943166] binder: 12884:12896 unknown command 1074029321 [ 467.949851] binder: 12884:12896 ioctl c0306201 20000280 returned -22 [ 467.981456] EXT4-fs (sda1): re-mounted. Opts: resuid=0x0000000000000000,,errors=continue [ 467.991153] binder: 12884:12900 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 467.998958] binder: 12884:12900 unknown command 1074029321 [ 468.010131] binder: 12884:12900 ioctl c0306201 20000280 returned -22 [ 468.038734] tls_set_device_offload_rx: netdev lo with no TLS offload [ 468.123123] device lo entered promiscuous mode 03:33:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffff00000000]}}, 0x1c) 03:33:58 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x180, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:58 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 03:33:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)) 03:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x630b}], 0x0, 0x0, &(0x7f0000000180)}) [ 468.406897] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 468.406909] binder: 12923:12928 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.406924] binder: 12923:12928 ERROR: BC_REGISTER_LOOPER called without request [ 468.418974] tls_set_device_offload_rx: netdev lo with no TLS offload [ 468.425322] binder: 12923:12928 unknown command 0 03:33:58 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200200, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c}) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000006309aafb0afbc563c59d0c6412d3f20000000090730000000000020000000000000000b162c4ab2bc58bb1ef34f6b166a6fe76000000f84edc25984dd002bc82dc93ebd385d6fce0ac7b1be67feb8f0f068314aa325a0b9c138850ace60b4148786f58d4c7920c405f5a0a9f44098add337cc69e06210f22f5cbd4c610e37ffb770b2a7af2015770bf3ed29cb7bbdbf4ec52b6c7623b5abde85b0294d548b39c0a50032dbe1254836af8682197a21dfe681bd8f0e2b06cdb196f7ebeca8790084d6fbace5e9b25a6"]}) 03:33:58 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00`\x00', 0x101}) 03:33:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000003c0)={0x30, 0x0, 0x1, 0x4, 0x8, 0x0, 0x6, 0x58}, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000340)={0x53, 0x80, 0x200, {0x648, 0x6}, {0xefe, 0xfff}, @const={0x6, {0x8f, 0x1f, 0x1, 0x4}}}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x418, 0x248, 0x248, 0x248, 0x0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000240), {[{{@ipv6={@remote, @local, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff], 'team_slave_1\x00', 'team0\x00', {0xff}, {0xff}, 0x2c, 0x8, 0x5}, 0x0, 0xc8, 0x110}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, '\x00', 0x1}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0xf90a202bd0dd72f6, 0x4, 0x4, 0x7, 0x0, 0x84, 0x40}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1d, 0x8, "0674d6532c09dab2b71367079db492f9cd620dac0969db7626aba6ddf72d"}}}, {{@uncond, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x1}, {0xff, 0xf361, 0x7ff}, {0x100000001, 0xffffffff9c5bbf19, 0x4cdc15ef}, 0x6, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) unlink(&(0x7f00000000c0)='./control/file0\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8001) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mount$9p_virtio(&(0x7f0000000140)='+self@mime_typeppp0\x00', &(0x7f0000000280)='./control/file2\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000440)={'trans=virtio,'}) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r2) 03:33:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)) 03:33:58 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x101000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x2, 0x4) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 468.473406] binder: 12923:12928 ioctl c0306201 20000280 returned -22 [ 468.484248] binder: BINDER_SET_CONTEXT_MGR already set [ 468.491696] binder: 12923:12937 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.499536] binder: 12923:12937 ERROR: BC_REGISTER_LOOPER called without request [ 468.507111] binder: 12923:12937 unknown command 0 [ 468.511838] binder: 12923:12928 ioctl 40046207 0 returned -16 03:33:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xff000000]}}, 0x1c) [ 468.513305] binder: 12923:12937 ioctl c0306201 20000280 returned -22 [ 468.518709] tls_set_device_offload_rx: netdev lo with no TLS offload [ 468.538976] device lo left promiscuous mode 03:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40406301}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:58 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:58 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @broadcast}}, 0x6, 0x2, 0x9, "48d8c879c83971ed74dbdb59b8b2263ccc62789ffbf26aa0c2118efc862f3f1da2ec6e49ed23dc9859b510119ea417c5f396741f19d3735436dbf2bc0b2bd7321dc9a84819d32df8bc6a98524749cee2"}, 0xd8) add_key$user(&(0x7f0000fd9ffb)='user\x00', &(0x7f00005c7000), &(0x7f0000c51000), 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') [ 468.640321] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 468.666188] binder: 12965:12966 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.674052] binder: 12965:12966 got reply transaction with no transaction stack [ 468.681666] binder: 12965:12966 transaction failed 29201/-71, size 0-0 line 2761 [ 468.682183] tls_set_device_offload_rx: netdev lo with no TLS offload [ 468.692233] binder: BINDER_SET_CONTEXT_MGR already set [ 468.701684] binder: 12965:12972 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.709580] binder: 12965:12972 got reply transaction with no transaction stack [ 468.717076] binder: 12965:12972 transaction failed 29201/-71, size 0-0 line 2761 [ 468.725982] binder: undelivered TRANSACTION_ERROR: 29201 [ 468.728946] tls_set_device_offload_rx: netdev lo with no TLS offload 03:33:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x600000000000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 468.732454] binder: 12965:12966 ioctl 40046207 0 returned -16 [ 468.745751] binder: undelivered TRANSACTION_ERROR: 29201 03:33:58 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x4, 0x7f, 0x8, 0x0, 0x6, 0x5, 0x8001, 0xffffffffffffffff, 0x6, 0x7, 0x6, 0x6, 0x0, 0x7, 0x5, 0xffff, 0xfffffffffffffffe, 0x0, 0x5}) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delrng={0x10, 0x14, 0xc09}, 0x10}}, 0x0) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7a000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 468.827224] binder: 12986:12987 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.844902] binder: 12986:12989 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.845559] binder: BINDER_SET_CONTEXT_MGR already set [ 468.858078] binder: 12986:12987 ioctl 40046207 0 returned -16 [ 468.899133] device lo entered promiscuous mode 03:33:59 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x94000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/169) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x80) 03:33:59 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x4, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x27, 0x101, 0x0, 0x0, {0x9}, [@typed={0x8, 0x4, @u32}]}, 0x1c}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x800) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x40) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0xff}, 0x3df) 03:33:59 executing program 6: r0 = socket$inet(0x2b, 0x800, 0x5) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6(0xa, 0xf, 0x1) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:33:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00b90200", 0x101}) [ 468.965815] binder: 12996:12997 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 468.973651] binder: 12996:12997 IncRefs 0 refcount change on invalid ref 2046820352 ret -22 [ 469.039442] device lo left promiscuous mode 03:33:59 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 469.065732] binder: BINDER_SET_CONTEXT_MGR already set [ 469.071457] binder: 12996:13019 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.079337] binder: 12996:13019 IncRefs 0 refcount change on invalid ref 2046820352 ret -22 [ 469.089333] binder: 12996:12997 ioctl 40046207 0 returned -16 03:33:59 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x12) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x80000) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'mime_type!trusted'}, {0x20, '/dev/input/mouse#\x00'}, {0x20, 'md5sumselinuxvboxnet1'}, {0x20, ',\'wlan1#$'}, {}, {0x20, 'trusted'}, {0x20, 'tls\x00'}, {0x20, ',-selfbdev'}], 0xa, "c1856697157170ad803d2f90a19306f2f227920342938d816d6cc73d69e180632edfd112a87600e703fa69b9c2e3700387dd0010653fa908d83bba7a375a9b30bcc607187e6a5407988487001204157b873511468660562972aee4be2f9f74f92facbf547b391bca1c5b9a400ed87196020fd74b1405ff1e55b1cbde126df5b144fce4f4167ec632dd97c31814048c4857873d3f2e8279eba5256694dc3d197b8d888b2bc0ac04d970792bfa20663bc2cded720cace2e7a3b319aa2f2b"}, 0x126) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 469.110548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 469.179242] binder: 13033:13035 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.187116] binder: 13033:13035 IncRefs 0 refcount change on invalid ref 117440512 ret -22 [ 469.195754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 469.205930] binder: BINDER_SET_CONTEXT_MGR already set [ 469.207731] binder: 13033:13040 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.219030] binder: 13033:13040 IncRefs 0 refcount change on invalid ref 117440512 ret -22 [ 469.226705] binder: 13033:13035 ioctl 40046207 0 returned -16 [ 469.314864] device lo entered promiscuous mode [ 469.321653] device lo left promiscuous mode [ 469.416689] device lo entered promiscuous mode 03:33:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffff0]}}, 0x1c) 03:33:59 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) prctl$intptr(0xe, 0x0) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x6, 0x4, [0x6]}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000005900)=0x14, 0x0) signalfd4(r0, &(0x7f00000000c0)={0x100000000}, 0x8, 0x80800) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0xa0, 0x3ff, 0x76, 0x7}, {0x6, 0xffff, 0xbe6, 0x1000}, {0xbe, 0x3, 0x191, 0x465f955b}, {0x401, 0x80000000000000, 0x2, 0xcbd}, {0x3, 0x9c, 0x80000001, 0x3f}, {0x8, 0x8, 0x1000, 0x6}, {0xa9b4, 0x3f, 0x8, 0xff}, {0xc86, 0x1f, 0xbe0, 0x11}]}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000009) 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x600}], 0x0, 0x0, &(0x7f0000000180)}) 03:33:59 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:33:59 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x10000, 0x0, 0x81, 0x1, 0x9}) sendto$inet(r0, &(0x7f0000000300)='\a', 0x0, 0xe805, 0x0, 0x0) 03:33:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00b20200", 0x101}) 03:33:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) [ 469.524485] device lo left promiscuous mode [ 469.529516] binder: 13051:13058 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.537334] binder: 13051:13058 IncRefs 0 refcount change on invalid ref 1536 ret -22 [ 469.539753] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6}], 0x0, 0x0, &(0x7f0000000180)}) [ 469.569804] binder: BINDER_SET_CONTEXT_MGR already set [ 469.575352] binder: 13051:13072 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.583161] binder: 13051:13072 IncRefs 0 refcount change on invalid ref 1536 ret -22 [ 469.593657] binder: 13051:13058 ioctl 40046207 0 returned -16 [ 469.669190] binder: 13081:13084 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.677034] binder: 13081:13084 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 469.726959] binder: BINDER_SET_CONTEXT_MGR already set [ 469.736371] binder: 13081:13086 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.744226] binder: 13081:13086 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 469.757741] binder: 13081:13084 ioctl 40046207 0 returned -16 [ 469.772147] device lo entered promiscuous mode [ 469.818321] device lo left promiscuous mode 03:34:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f0014f9f407002c04000a0007ed07000100feffffff0800000000000000", 0x24) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e22, @local}}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='veth1_to_team\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x100}, 0x8) 03:34:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe]}}, 0x1c) 03:34:00 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x680300, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfefffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6174, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000380)={0xb0, 0xfffffffffffffffe, 0x5, [{{0x4, 0x3, 0x7, 0xa3ba, 0xfffffffffffffffa, 0x6a, {0x6, 0x4, 0x9, 0x9, 0x100000000, 0x800000, 0xa0c, 0x3ba3, 0x800, 0x40, 0x2, r2, r3, 0x0, 0x7}}, {0x0, 0x6, 0x6, 0x6, 'md5sum'}}]}, 0xb0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bridge\x00', 0x10) fcntl$setstatus(r1, 0x4, 0x40800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)="d7dc59a26c925bee7f043a45858b6cce5b0883b0f328f3d0a5fdf3e728e7ab29e46104ad0cd3165aca156b7c7c0655b0c687c7bb5161369d35bc229673fb40d918adaef28d506ee996bca7e6eab4cb8c017114859bd347a371de2210349bac7d82527702bc95443594eda26ad223230000101ec5d6eb33be05b103675888a96b01c8f2d375ee1551b28a28f5bf77aba9257a6f8115d15fffc005b8bd91b2000000000000000000") 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x500000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:00 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f6e655e7e8c329e7a83a6742f697076342f6e0000000000000000", 0x2, 0x0) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) uselib(&(0x7f0000000140)='./file0\x00') 03:34:00 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x202, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x5) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:00 executing program 4: execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='!vmnet0\x00', &(0x7f0000000100)="6272696467000000000000000200", &(0x7f0000000140)='\x00'], &(0x7f00000004c0)=[&(0x7f0000000240)="6272696467000000000000000200", &(0x7f0000000280)='systemem1selfselinux\x00', &(0x7f00000002c0)="6272696467000000000000000200", &(0x7f0000000300)='bdevvmnet0\x00', &(0x7f0000000340)='wlan0&&mime_type\x00', &(0x7f0000000380)="6272696467000000000000000200", &(0x7f00000003c0)="6272696467000000000000000200", &(0x7f0000000400)="6272696467000000000000000200", &(0x7f0000000440)="6272696467000000000000000200", &(0x7f0000000480)='-\x00']) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x8, 0x0, 0xff, 0x4, 0x800, 0xffffffff00002001, 0x37}, &(0x7f0000000040)=0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={"6272696467000000000000000200", 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x3, 0x0, &(0x7f00000001c0)={0x11, 0x8035, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:34:00 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xfff, 0x4) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x11, 0x0, @local, @local, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000180)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2800, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x101, @loopback, 0xf806}, @in6={0xa, 0x4e22, 0x80000000, @local, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x100000000}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in={0x2, 0x4e22}], 0x68) [ 469.947809] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 469.965250] binder: 13102:13108 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 469.987819] binder: BINDER_SET_CONTEXT_MGR already set [ 469.997453] binder: 13102:13115 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.001325] tls_set_device_offload_rx: netdev lo with no TLS offload [ 470.008638] binder: 13102:13108 ioctl 40046207 0 returned -16 [ 470.022763] device lo entered promiscuous mode 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x101}) 03:34:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) close(r1) 03:34:00 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 470.046617] binder: 13102:13115 IncRefs 0 refcount change on invalid ref 0 ret -22 03:34:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000000]}}, 0x1c) 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7400000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 470.147267] device lo left promiscuous mode 03:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x8, 0x80}}, 0x28) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB="05c9f3757d4e2d315cdf2165"], 0xc) fdatasync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) accept(r1, &(0x7f0000000180)=@alg, &(0x7f0000000100)=0x80) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}) [ 470.194933] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:00 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="230f6f5dc2b695a6b032", 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf"}], 0xaaaaaaaaaaaac60, 0x0, &(0x7f0000000100), 0x330) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x101}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 470.236982] binder: 13149:13153 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.240022] tls_set_device_offload_rx: netdev lo with no TLS offload [ 470.275100] binder: BINDER_SET_CONTEXT_MGR already set [ 470.275973] binder: 13149:13160 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.295699] binder: 13149:13153 ioctl 40046207 0 returned -16 03:34:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xff00]}}, 0x1c) 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x20000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:00 executing program 0: sched_yield() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) ioctl$KDSETLED(r0, 0x4b32, 0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x18}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x5, 0x9ae, 0x0, 0x17, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x7fff, 0x0, 0x0, 0x70bd2d, 0x34ff}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0xffffffff7fffffff}}, @sadb_address={0x3, 0x7, 0x2b, 0x80, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in6, @in=@multicast1, 0x0, 0x0, 0x14}]}, 0xb8}}, 0x20000010) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1e, 0x4) [ 470.420605] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 470.427098] binder: 13178:13182 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.438815] binder: 13178:13182 IncRefs 0 refcount change on invalid ref 536870912 ret -22 [ 470.458073] binder: BINDER_SET_CONTEXT_MGR already set 03:34:00 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x40, 0x2000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x0, r1}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xffffffff, 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x9}], 0x10) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df704011100fe800000000000000000000000000000fe8000000000000000000000000000aa00004e2004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431e37ce28fac1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"], &(0x7f0000001780)={0x0, 0x1}) [ 470.464044] binder: 13178:13186 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.471952] binder: 13178:13186 IncRefs 0 refcount change on invalid ref 536870912 ret -22 [ 470.484741] binder: 13178:13182 ioctl 40046207 0 returned -16 [ 470.486648] device lo entered promiscuous mode 03:34:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="81002700ff1a0000000000000000030000000000"], 0x30c}}, 0x0) 03:34:00 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e24, @local}}) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xd88a, 0x10000) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x8004, 0x4) rmdir(&(0x7f0000000000)='./file0\x00') sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 470.539289] device lo left promiscuous mode 03:34:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f007fffffff00", 0x101}) 03:34:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r1 = dup3(r0, r0, 0x80000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x11103e, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="34000000060000000000000000000000020000000000000002000000470000000b000000000000002f6465762f617564696f0000"], 0x34) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000180), 0x3}, 0x20) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x9, 0x4, 0x0, 0x100000000, 0x0, 0x400, 0x1000, 0x5, 0x101, 0xfff, 0x0, 0x8, 0x1, 0xed, 0x0, 0x3, 0x7fff, 0x8001, 0x5, 0x7, 0x9, 0x0, 0x380, 0x7ff, 0xffffffff, 0x7, 0x5, 0xffffffffffffff80, 0x2, 0x0, 0x0, 0x7, 0x6, 0xd2, 0xffff, 0x6, 0x0, 0x55ee, 0x2, @perf_config_ext={0x0, 0x1}, 0x2306, 0x0, 0x27a3, 0x0, 0x1d6, 0x4, 0x9}, r3, 0xa, r4, 0x2) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='com.apple.system.Security\x00', &(0x7f0000000300)='/dev/vsock\x00', 0xb, 0x2) rt_sigprocmask(0x0, &(0x7f00000001c0)={0x5}, &(0x7f0000000200), 0x8) 03:34:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa000000]}}, 0x1c) 03:34:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') getsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000200)=""/132, &(0x7f0000000140)=0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='mountstats\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x29, 0x38, 0x4, 0x18, 0x6, 0xfff, 0x3, 0x45}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4cd4d394cb3c9f695ae515eff31cc50a53b945a51964f0df30e63409", 0x1c) sendfile(r3, r2, &(0x7f000025d000), 0x734) 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xc57, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7fff}, 0x90) ioctl$KVM_ENABLE_CAP(r1, 0xc008aeba, &(0x7f0000000000)) [ 470.740902] device lo entered promiscuous mode 03:34:00 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x28800, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0xc, 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x8000, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xeb1, 0x2000) write$cgroup_int(r2, &(0x7f0000000080)=0x30000, 0x12) [ 470.767194] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:00 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x41) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2fe9676d507aa6f5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x11, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint}]}) 03:34:00 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 470.817427] binder: 13219:13227 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 470.825323] binder: 13219:13227 IncRefs 0 refcount change on invalid ref 67108864 ret -22 03:34:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0002b900", 0x101}) 03:34:01 executing program 2: r0 = semget$private(0x0, 0x0, 0x40) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000000)=""/135) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'teql0\x00', 0x1}) rt_sigreturn() ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x1f, 0x8040) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1f}, 0x200}, {0xa, 0x4e24, 0x3b, @empty, 0x4ff}, 0xfb1, [0xfffffffffffff000, 0xffffffff, 0xffffffffffffffff, 0x5e, 0x3, 0x1, 0x4]}, 0x5c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)={0x9, {{0xa, 0x4e20, 0x3f, @empty, 0x1}}, 0x0, 0x6, [{{0xa, 0x4e24, 0xfffffffffffffffc, @loopback, 0x3f}}, {{0xa, 0x4e22, 0x0, @mcast1, 0x40}}, {{0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}, 0x3}}, {{0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, [], 0x1e}, 0xffffffff}}, {{0xa, 0x4e24, 0x100, @remote, 0x1ff}}, {{0xa, 0x4e24, 0x4, @remote, 0x8277}}]}, 0x390) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000640)={0x0, 0x6, 0x8, 0xc83, 0x9, 0xfffffffffffffff7, 0x1}, 0xc) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000680)=""/191) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000740)=0x4, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000780)=0x7fffffff, &(0x7f00000007c0)=0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000800)={0x3, [0x1000, 0x3, 0x9]}, &(0x7f0000000840)=0xa) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0xf1) sendto$inet6(r5, &(0x7f0000000880)="f0fa0cb8a88675a871ecc296e3cc8741486b807e8e0610db14b7d7772961229569b4d5f01f8fdeb519f46e104ff21fcb1ce91d2e21f2bb83ca5ff3ac75f6e34da8ec5496daef23b821e505a48e9165d4cf69510784d4c0e840680aa712d9cdcb9af2a51440331c01491f3f541b9190b55a14e01e2936e350c2082ca7177f16d8b5155d64fd0a972c49afae178b29ce4738eb8e4c5419976becd0cd3022e37600212e8d3ceb08c4f4216613e88cec1553f6c9bee3485e288920c391aa1f32467f4bfecd72022b7f59e7fe95006e9712046977fa4593c5b24025bc7afd2a6531734c45cab2b7d57abe566b335941de33154a5cd04ede6505b68fd9a5feb0c0c22b9bfb693857d063468b135bb46e5746b12a098a11374b1e0e518dab01a5413a4ac33bda538abca2599e4198dccaafb67082ec0e5ef7c63276f159e67df58c5f31aca2f76ba1a05b62170b5414b4587d51923a3db0b6a677dae9d394cdc8d875ad9d1bc192ed11a6e3094a83d7b29afda7a1d150c191bc1ec6561955aa606e2772a2d28b6cbe0dfd6dfdc4b82f6d0802d23648014267b68d825a6009027ba5aa966ceeca673096b5e06a9803e85a05865370f83b60657fd7f3279ebd692ed5d7f3252fd6e01913915997239d223e14dc4e7162f8192f7c51a9cbea472ada3c09748f4bedc29d63ceaf6f6395c96ea6d120ac01fae0a40c494d5c5fcd66ee5af39d5f1cf1121ab6fbdbd712f964dea8b3579685cae0292aca52504b59b39c21b3db5e307ec4320569658e3d2340aadfd2b93a37ec3ebb7aab384a0be9851659e9681d2ed355620d34c1c9d5a0bf1b22f8422324a2715347d6ea1402313abb1a1f6d4c9ef3e6362c4fe8c7ac6977995019bd191e995099feedba9ae1c1ad38d52f665c76c16f51707237bac52aa49d803a435bbf00ac5f7a91c7ccf1702e255155aabf8adfdb318b6faf6860049793e17a7a00bef54e3cf17ef648744015c128d02045150c7c948180211266f3d9fbbf8b3208064d0016fd645462c3cab5a255ec9264cfc7f624c7a89b597a01d253a88441601e9742dc34cfba803d93b8ace4a7f24f393de5e869016ab46f475a5303aee9661d003971433f1c9f69bc19972528fe5563f8cd0ba883b151e54bc74bae261d535975128ae4468e21083b4ea5dc531ffe04e9a414353902a37e652a644a6f34c4ed7db2bb68c3c49b6ed45080dd4e933e8d5cf941b78e61fd6fb79f9102cb4977d7b02a31553ba07672ad0fb8d49adcf8f371240c3b588bfc32bd8c5cee45b2536ad5b93684e76491a1422031fcb1e6e6532ba24dbadca8d221062486a3a3e8e4fd3b9682a8655983fd2dcd6f098f1795c251e360e2d48840cc4bf2afbfd071f296d79e39b247d73b6711544823312e0494720c0e136a61181bf338bda42722da66112eacb24a03fb627d7d77fe3ff02f2b86c8d8921439538325eebd323817eb8a9aa365c05c290971d976302af7d3193dfd194d029cd7403c8cfb2d747499614e7d284a5d524f9c980f25045423b569411b13765994b6f2b7d1aaf476fd0021f9e58eb15d83956271e5548557e7ce50b6009769b7439bd795d2b3f93335e419096d85230c09deac572354c145de2a7af59be2309bbac9de9ab258ef8b8dd514e5322d9fb874a297e5b7d4e6465762e027c037c66b45b03932605d42293fd40a89c47ee923a4f0ab035bc23fa510ef87d8e371c2d1912d05ec74c61e88c6a8362f12eae14e9d6e69027984c8de252ce8b406280eabea029c650caed482668dee0541d2869fdb375388491989134ee6adba4243ba1c61b36300fa105ff1783faf2579c2ba57885dae9398e7168e537e2df7072e25e6e16e8ffd4ad435bc5d00da663e1316b156ff9a0af22e501906d8682844a1eff2f8acca9d6a63ce889584d40084f847451314f386707e8f9c694c3a5fdecdf7b3c73704aacc385833414eec51ef71daa9d3e20493ae6ad821328b4811d6782ea7bd5bc3f81f6e03e7623283f00825c7762adcd219e8583443ab8cdafe894663d8ba1721fd0f1b1e557a1c4f5ed97c9f892fe11f0e83e13b90bd7e61678206357885a26063a3edc50bef87c7370314c7fe71089fb3fc2d9ab865bf9ca7531f263ad999a0278fd6720d917897bd6d3cacf50f7ca4df853dab85694de119a78e8d6348ad5859adcfbc2dfc33e4e850c4eb2075e4b090ce6919ee090e020009daa58edfc92af98648a6e6004514049640e16dbd1dd6a15192f767ea61954d724c2780136e1a8e43afd2773ce13f7a57f15339f6f40e471be2610d79c5af5ac95d8a5c7f679818742db0c7b454d7d402438e54dcd1a9dd20fc6350075a8be96a3c737780131f908edcde4dba94d9c53a20d681f659f3d31d23c3269dcb749e037e7e5b2c1c94a3c4ddce3143cd85bf8c3aa4e66d1c89065195720624cbd250f54333e3250676f2c17c157075d787ceeca6123f5632f984b76432a335697d621933b081c850a3520bebb9288e79a4cfd4f3d79adc717e58fb751cc970729f58f533a7f2a649ae053cc767ea5a73d6a59891b23154f3b1b41ced74cc1d830cc75a12967d4d7ad12457ecf2e0973f3d14ebeb2842fc49cca37d4e26cb13e8f91a2ca5eccb6f5982e24f25155ef5d866d61ff9eb02b866f763a7ccc3215eea9b81bd110db4ec59f408577ad3da4d28eb291d83b413ba2efa31ff8abc0445e14cde03272970c26bcef4b256b8c050e1c0cafd81edca761b1e11bfdff6e42523bd1e662913ce2dc1f75e36ecac58ab71ccf8964bc4927020a20422537a387e7d2c638d84ed6c1e72c6553ea9c8b354101cc1c1d0ec07c6299a245c9a9d47fbbde95e471b4ecf9b1a2a19f2ba4c95d6b8598688e1aada5e9a698caa402f64b468782e1637cb92b2fd6e8e741acb97e6c0d079d495bdd6d3c65831e678582568bbda59acce0937d4b55654a1e1f86454e4ba0fdc21110786ed2ecd52f2a558a033e79134112502db9d705b7af05bb744aaa66656d99bfc4714390820faab7eacd6f10e64ac5c33b010c0a53263f9c05542d3eb46a93283989ceac2727168dde84f29f403c21294dce4288079a671bd495ae6e31ee494e78d980c1f86aabda322e52e33162502003990a961c1925732c5659d1510b96309c33c08124098f9251d5acc965621a843f909391632d21a2e8d55522fa71bd8c93dc750e752a2f9cf0ee0fa87fe35486c1be6ba29003ae758dcd583237f1e9d44298eee483db6e1e9614b575d04073cd7f7f23e2e6a7972723139270468ba1e39af3b03bf23e620f062b810c6bc0878e2dc49b819aefbe9cdfcf08ac700be0e606ace390eb9d4852ecdd246d4428ca3d957293f39b90b1a33d14503bb840cac02735af66cd096bacc2ae4039b99fecb4146f61976d087e505f2837c8aa016deb02762c4dc92a7301743610a2dfedc267ffe6ac141af6552001d266414df2c040fdea888a5cea07184a6427413880baf04400f7b5c459c08b37b89bc4e2d0228ba6731f3512e85b3b61d60e65b261e6e5063b745608d1473474e0983e91a0a346271f43a39a1eed66010da335557d18b9b350cbb023d0b634ab1cfaaf808ecffbe883af87908f61e0d7b99f4ea4d92edcb0521ec2535e90e8c5b2d44eea8c899adf799f66081e4b2f0f05e9db48956263cab76914269ec9a75007f7ad196a90f3f0c776e15b34b43e48be54ed2e34e8ea97a95e72cc8066a5be62758cfb5ed670173c1b6ea7ae870ce9b497319f3509e5e00e1e86a869b2ea08cfa5dd73057d49f079e27ffee28ad4dc1ccdd2858a94eb2667eb666be8b0b84fbfe71e64f0fe4ad6c2c37143454bdf23404b79826052ee0ad4e0302962a58b62f4ca9cbec2307f7187a179b56f11ab5896d9820fb8935d9ca28d626b5284509f9f04c2d0459a106ed4d7ab8d1f6f25c9678fd87ab2c9f11479974b3df12ab20baf6bd523aecb81933422b42adfbae8530e002c11e0aed384f319bb90b5f29e47219af04a3b09cb0070e332cbd2e0f2ce627c49a10500c93b630b028339c133f45428d44d0611f6404fb5de4e563bca956fb067806df152b25c6a06f4f9ba320ba0e09cdf08093b83768de25e2a9f0cba73e845cd6f2c45ef3b2f02064ec5ba208c24edcd4118a4e9a04a10c51a78b90589dc01ae0a939b1e8c0b7d5fbd7f5a93e4c94dde76709b9819f8c703a43b9d95742d3b472f3e93cd7ac66f1204e888f3737c03ca4d207a13aa3bad49950f6829a32e843c9b8654ded32f0e7233bf60c3805f73837d93a5d3b8f0569cee53f896b031e4a0a2bd89f71af8f2a1d23f60f82fa8dddb3af3c7eb9d03f4354519752632f09455ee9f1f928af9e71deb6ae2a0fec2e30c346c454694383ca3fbf1547445974d6231201ff684c6ec14131765e356a11dea544b37e87f16952170afc23197998e5165cfc5470c0fe9bef48ae6d7801f40f65069d9d651d40a8666ea81fb9aff85660de4b99d9248d130ef1364bf9eb2d2c2570a0bbf8ea12710516dc4b01a577d732fb4e35c42b460bf8ec1c8c10d36e57c3efe8452957d56b213ebc818f8d1e772c7510844e68cb5577a59fa000af1188a1d9f45cfe8d96e0da911d23d9aa50b38c43310783230d4170c7f1837cf809199a9e576cec1531de10d089b8d9152d50e2858ca0dbf2f5c3f5d96a3a88dce96e5aeed845cca9c3c47fda162a133a93b3e2e290e9ccbdd2d66dac07c69e0cfaf66965e10973404bf462f96b3897a70d29b9f91f8f7d406938f385c90e379086782fc419ee4de30540b7338d0cd633f2bc0b4455fa18fca54864c32ab719d6cbd2d1ce7530969c02ab979ecede4e7bc2121a523eedcf01d74c0890521a3869b49c07fc8e53a70d514b421e1d1d73bd853d7d320356eca813450d1855228e8fea4839515f533122102c6eb4957388174b7536d91b0e0cc9c72406c45e7790985b0ff8bf2e48ec2d8daeff677046df850ce77b6538e80eeeaefacd353426e6288625c51691cb0b252f5ee8fc584a203c13e9c2d450402ca3ea2cb5067ac8046ef314b7eb3e0d4068623007afb3c17d5b905c61432baff1329ae313076a4d61d4763786ea84ca8c87926c27642fa2f8864fc4aeceb3ce3c63286e305906a33d8edf4403f4565a1f82aa371d320f341156db91a307648a9ddd0d2263ad420f076310a66c48c20fcb5740f99afc158de6231c29bcc2c79edf350de16146c8ddcb7cab8659dfa7a83052cb160b1ed79773ad3fd7af08fcf69f15ce927cb87c5388849c2a8130b08b4856fb2a4f0a3b6f9b277400a435a6cf1330be00741c220d747d26b07bd477802b4c722d93aee4182689eebbed4358076c7a409c9f35b26a310cb231571b2130d3215fb311a98135cc5effb920144c55f75230284a0589681d8f93d7d9ab197998020f0c6b7287095523e61f8ac76f8d760cbedad5a64fb3708ee4313656a0293d88137575312a43f8b288037ab7f207ed9ac9023318e8ab9b029fea62063b9fe36d41393fba11e0b96bdec1c98f95324c15459f11886d9710fbc4357f7c4c303360a28cfd7ad756499b16f388fc318fcd9d2eada6a1c2b49ae119858f9dcc3ade2a2970dacc7e5f84d8a6657f786e24e99a8abe9cd42d0f28fa256e9bc8f64ad9a55685c509c553867a41a86fd72bc887ed9f5fee7ac2554566fa46ce19653d6c15db559e43fb7088378f4003bac1478202997abde6c91c81db26f6b87c970014bdc582bbbd532628b7492f635b720ed9e6666dcc66cb10c4b6a6380a7f677e78077e9fdddf79127f69", 0x1000, 0x8000, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000001880)={0x2, 0x4e23, @remote}, 0x10) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000018c0)) r6 = add_key$user(&(0x7f0000001900)='user\x00', &(0x7f0000001940)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001980)="e0aba957116b7fd74d1a0c82fd2d1df8b2ff8b6308e8afec62beb3476743ce9af73fb982154eac7f95ad089cd59baf454c4fc44aeaf3a0572679ab2b3d63ce44b59367c7392abfd39ddd0dc7be175f095512d544bb3ae9a5c854436c089d07995ac9e170bbee641ca959d5d38ea693d2a8f1ab093e65048bc97500529328e7c7b93307", 0x83, 0xfffffffffffffffa) r7 = request_key(&(0x7f0000001ac0)='rxrpc_s\x00', &(0x7f0000001b00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001b40)='/dev/full\x00', 0xfffffffffffffffc) keyctl$search(0xa, r6, &(0x7f0000001a40)='dns_resolver\x00', &(0x7f0000001a80)={0x73, 0x79, 0x7a, 0x2}, r7) ioctl$KDDISABIO(r5, 0x4b37) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001b80)=@assoc_id=0x0, &(0x7f0000001bc0)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001c00)={r8, @in={{0x2, 0x4e23}}, 0x5, 0xfffffffffffffffa}, 0x90) keyctl$get_keyring_id(0x0, r6, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001cc0)={r8, @in={{0x2, 0x4e20, @remote}}, 0xe9dc, 0x9}, 0x90) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) futimesat(r5, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001e00)={{r9, r10/1000+30000}}) 03:34:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1f4]}}, 0x1c) 03:34:01 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7fffffff, 0x4) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x8}}, 0x3, 0xfffffffffffffff7, 0x5, 0xa95f, 0xffffffffffffff7f}, &(0x7f0000000340)=0x98) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = getpgrp(0x0) r4 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r6, 0x8, r3) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x9, 0x1, 0x20, 0x4, 0x0, 0xae, 0x80800, 0x2, 0xffffffffffffff00, 0x2, 0x3, 0x3, 0x8, 0x4, 0x2b, 0x0, 0x2, 0x1, 0x5, 0x20, 0x3, 0x8, 0x6, 0x0, 0x80, 0x6bf, 0x4, 0x7, 0x400, 0xbd1b, 0x1f, 0x100, 0x317ff1ae, 0x6, 0x10001, 0xdd, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x10000, 0xffff, 0x1, 0x6, 0x4, 0x5, 0x7fffffff}, r1, 0x4, r4, 0x2) read$eventfd(r4, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r7}], 0x1, 0xfffffffffffffff8) r8 = dup3(r6, r2, 0x80000) tkill(r5, 0x16) dup2(r8, r1) 03:34:01 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'security.capability\x00'}, &(0x7f0000000200)="0000000201000000000000010400", 0xe, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'security.capabimity\x00'}, &(0x7f00000003c0)='user.', 0x5, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0xc2ce, @remote, 0x2a}}, 0x6, 0x4}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0x6, 0x30}, 0xc) [ 470.924850] binder: BINDER_SET_CONTEXT_MGR already set 03:34:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f000035dffc)) [ 470.994768] binder: 13219:13227 ioctl 40046207 0 returned -16 [ 471.001442] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 471.020598] device lo left promiscuous mode 03:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x2000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:01 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:01 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x3fd, 0x0, 0x1000}, {0x2cb}, {0x8ef, 0x0, 0x3}, {0xb3e, 0x0, 0x80000000000}, {0xc001102a, 0x0, 0x8}, {0x9ff, 0x0, 0xfffffffffffffff9}, {0xacf, 0x0, 0x10001}]}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x6, 0x0, &(0x7f0000000040)=0xe80}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 03:34:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x103080]}}, 0x1c) [ 471.132579] binder: 13287:13289 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 471.140421] binder: 13287:13289 IncRefs 0 refcount change on invalid ref 33554432 ret -22 03:34:01 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0xc035}, {0xffffffffffffffff, 0x600}, {0xffffffffffffffff, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 471.207918] binder: BINDER_SET_CONTEXT_MGR already set [ 471.211803] binder: 13287:13297 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 471.221084] binder: 13287:13297 IncRefs 0 refcount change on invalid ref 33554432 ret -22 [ 471.236212] binder: 13287:13289 ioctl 40046207 0 returned -16 [ 471.237427] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0031e7ffff00", 0x101}) [ 471.270171] device lo entered promiscuous mode 03:34:01 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x6}}, 0x5, 0x4, 0xceea, 0x9, 0x7}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x6}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x2, 0x0, [0x9b93, 0x8, 0x6, 0x4, 0x1, 0x3, 0x1, 0x1163]}) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x3b0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='\a', 0x145, 0x0, 0x0, 0x0) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x857}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:34:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4c00}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x40c0) 03:34:01 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0xc035}, {0xffffffffffffffff, 0x600}, {0xffffffffffffffff, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 471.391852] device lo left promiscuous mode [ 471.392068] binder: 13313:13318 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 471.404135] binder: 13313:13318 IncRefs 0 refcount change on invalid ref 19456 ret -22 [ 471.459827] binder: BINDER_SET_CONTEXT_MGR already set [ 471.474301] binder: 13313:13318 ioctl 40046207 0 returned -16 [ 471.485380] binder: 13313:13335 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 471.493227] binder: 13313:13335 IncRefs 0 refcount change on invalid ref 19456 ret -22 [ 471.610051] device lo entered promiscuous mode 03:34:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x801) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='/dev/loop#\x00', &(0x7f0000000100)='/dev/loop#\x00'], &(0x7f0000000240)=[&(0x7f0000000180)='/dev/loop#\x00', &(0x7f00000001c0)='/dev/loop#\x00', &(0x7f0000000200)='lo\x00'], 0x100) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x3) 03:34:04 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xa00000000000000]}}, 0x1c) 03:34:04 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0xc035}, {0xffffffffffffffff, 0x600}, {0xffffffffffffffff, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x2000000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:04 executing program 2: r0 = socket(0x15, 0x80005, 0x7) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x40) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x7ff, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x800, 0x4, 0x3, 0x0, 0x8, 0x5, 0x8000, 0x1342, 0xc528, 0x80000000, 0x5, 0xfffffffffffffffe, 0x0, 0xffffffffffffff80, 0x3, 0x5, 0x80, 0x2, 0xfffffffffffffffb}) 03:34:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x0, 0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000200)={0x0, 0x1, {0x2b, 0x19, 0xe, 0x1e, 0x2, 0x4, 0x1, 0xd0, 0x1}}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001060000e8ffffff00000000000090e2c1e059f6351e507d2f271d7faa6ded6621b4fdeed3f7e496d56de4cf250e8e7985b74c67aa4cc863e915883d591ff70ab9bec343f05f63bc597cecb18ca85bedaa83436a33d0b8010862044daeda0b548912f2d1d6c01ca195120a68ece6c27ed189cd242859c1ef27d57467b425c285b340d8eb64fd82b34ce8a6a5957109990e43cfc234716942128411f1b6f262573ce75e4ffe0e9e900b12daf525578b7d59f25b0eea57e5655799f46ce5d37a5fbbfce5ab67fc40f34e53ad6b6aa4ff2d336e10852828f5b40a816979e84ec1db424e8f6f0f6ed849cc261e3c6ee19c641c86b45f506a1a27", @ANYRES32=0x0, @ANYBLOB="00000000000000f21b0012000c010100626d1b6fff671310e37a38406e64000000000c00fa7f00000000ffffffff"], 0x3c}}, 0x0) socketpair(0x17, 0x3, 0x100000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000080)="d0e644b7674dda55a945153e44ceb1541ff8fd99a325df77614ae10ab5f9caeae39a3c1ce916306c65baa33d3d15ef66d39bb80184fa4607d39a0f8e38bbb7368bb2ee6769ad6cd64f562d462016b37f602ddc44718ca5c273f8911864c22ebc50ed0960e080a2b44914001acdd667ae93649d39acb0923087cb896a24d6210dcc9f8fccef40b6bde4d1219c1480ae2ae4ac260d78a7aabd3e9e639ef9a9e4c91dec624d380738") 03:34:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\a\x00', 0x101}) 03:34:04 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) socketpair(0x4, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x4ee0, 0x4, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x8001, @mcast1, 0x2}}, 0x1, 0x5, 0x3, 0x5, 0xf1}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x80000001, 0x1000, 0xffff}, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 474.061023] device lo left promiscuous mode 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:04 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1f00010000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'team_slave_0\x00'}, {0x20, 'vmnet0'}, {0x20, 'team_slave_0\x00'}, {0x20, 'team_slave_0\x00'}], 0xa, "062cfb4489213b6a67b771e0d9149ea488631fd9f28b2f5b3c63c0de6f9d0af6b4b37bd6b409ba3df212351c74e05fccfe61820409aac3b8a44eef882934a3269c1c63ce412c779a5e828a83fd368f3c8f0338e3d67e5ee8881c1a1a613587c7290c577d5da9e30706c79e52094601b1c8df1ecb9c259d9c85db10f04eb789dd"}, 0xbc) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 474.084995] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 474.091372] binder: 13357:13363 IncRefs 0 refcount change on invalid ref 4 ret -22 03:34:04 executing program 4: exit(0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) ioctl$VT_RELDISP(r0, 0x5605) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mincore(&(0x7f0000a13000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/26) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 474.143382] binder: BINDER_SET_CONTEXT_MGR already set [ 474.151188] binder: 13357:13376 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 474.164496] binder: 13357:13363 ioctl 40046207 0 returned -16 [ 474.168410] tls_set_device_offload_rx: 2 callbacks suppressed [ 474.168418] tls_set_device_offload_rx: netdev lo with no TLS offload [ 474.184378] binder: 13357:13376 IncRefs 0 refcount change on invalid ref 0 ret -22 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4800000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:04 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe8030000]}}, 0x1c) 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 474.277873] binder: 13393:13394 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 474.309704] binder: BINDER_SET_CONTEXT_MGR already set 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 474.320070] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 474.320544] binder: 13393:13400 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 474.344037] binder: 13393:13394 ioctl 40046207 0 returned -16 [ 474.384695] binder: 13393:13400 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 474.415397] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. [ 474.424124] device lo entered promiscuous mode 03:34:04 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x142800]}}, 0x1c) 03:34:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 474.439443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. [ 474.456884] device lo left promiscuous mode 03:34:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) getpeername(r0, &(0x7f0000000080)=@pppoe, &(0x7f0000000100)=0x80) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:34:04 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000400)=""/95, 0x5f}], 0x4, 0x0, 0x0, 0x7}, 0x10100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x6}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @rand_addr=0x10001}, 0x3}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x8001}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x7}, @in={0x2, 0x4e23, @remote}], 0xa4) socket$inet(0x2, 0x800, 0x32) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) sendmmsg(r1, &(0x7f0000008080)=[{{&(0x7f0000000640)=@ipx={0x4, 0x3, 0x6, "2ac788a24fe2", 0x7fffffff}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)="b7e50b26091fc55385d7779f774c69d45dc9200fba6a1dfa04964b588734285c093f072655b5f9d0b8f9d970ca4be6848fddf52a857f001476ee9dacb85cb4eaa18da006fcb0f8ebcf3c060ec9a362a44005e700e4492a182b697f291bcec556ac72a5185be314d49314dec18b4e7f4c2f9f2153a5399c0fab0e0040cc006ca2c958a365ecc0029aa4b6756866d295f076f875badb6050db21aeecf29d61f038438fc6d0f74d7ed7a806da57a008d2253421745b830e73d95be4484de94d8ffd293cf94ecca9ed313c0a04e86e5f5776741c37acf4c5a16408f08226a5", 0xdd}, {&(0x7f00000007c0)="0b3242fac00491bef80be919d09eba65a67cfdab27e302a611b279cfca0b007b41fdbdc2298ff17cfafe659f353339e94d164a47231ce56c19234fc2d493580a0555680bad75b87af765709354c8a23c1671caa72d16c320ec1b4e6b97f6936159897bcfb02aa96dc0452793a6d6a222daa74d7ff6823e8109e8bc8afaaafd5579e5ea948a9b1a9e3eac7b0914c35b3aa6097fa062a2cae1", 0x98}, {&(0x7f0000000880)="62d549a2dbab2d80458d315df9f33a776d50a68b45693a01a249cabf93fef105c2c519036e53a97555f3097f30fc4b006b0d886f8ec4994892d67e822e9d0b79082d026c9b09b4d786c06b68b763be7e045480d74e97d711360df89c247444fe073be8765712800d1fc95b9e1e1a85b9f204e1209ea5ae55f685447c2b12c78fe2a434ea0ca998e91907d0d375ac55165cae00dfd16cc1f52cddd4fd1edea92d138d05a808d50543e8686e0dbc7628d0d3cdf43398aad79275e0e14a60412085e65083f95c241f", 0xc7}, {&(0x7f0000000980)="52700a379f76408e1a817a2cab0684510372ff0c45e4b5f5aa20168e7fdac0b3748916479106e1605b014714d1b34305fa4ff5b814a3d5f8d49149ebb843e510a6f5189b9b9ad9a0d29f9589603b0a767013b15e0d692914190803402f0bc7a1a8467bb77ecd2e0bd18ebc651393ae5c55d853a94928b48094295635e4710bedaa32619602312058c9b950eb", 0x8c}, {&(0x7f00000003c0)="53f8d966a405c60fcd7e45208044f0612fb59cf9b89ebe18fb746fa1ba0b47897982daa4bceffa3c34a5e5a24211d6e83d1bc77d91fa02bbcd", 0x39}, {&(0x7f0000000580)="453dbc31deb95e748ade464f08395faa974d6fcf96fdee7aaa7dea4f1bb331fcfb64007f49227b955c34af217f1853f9738ccba4dd1a8c35e5", 0x39}, {&(0x7f0000000a40)="584d099eb7ef3e5f", 0x8}, {&(0x7f0000000d40)="1c6ab43673b14851ef10592681f66ea8c4467b92637b06444a542ade5affdc952407d7906e8360b555a334ee595119261b4fb36f0770af7a13684c9c338601290d8d3ebcb83888b6e84538c933f6e2eab6da269abc1f1e5390bcbbf0aa251ad75847982a84fcc1668ab8067b8c12dff87e43e7f1f2f2e8f5a4be95578490dcedf1ab4f4cfd4376ca93f5a26c94fc19687ee12a3760973f3e7c1d24d065ea7ef2", 0xa0}], 0x8, &(0x7f0000001b00)=[{0xa0, 0x113, 0x0, "73100db4bcde6c8c59d5b83afba7422d553006aa1e7a149a49ab2f067cc3fb6ba6e0467009657ac9dd424205cd0d8edf81e5e547e0cd0ae717cff12f4e22ee19725276808c69ebd7347b4f35da721d341a113279fad3a0d1b11085cfe72faed3a1fce8f7ecba243b87ac20065fae9d1039f8eeb763d4a11a78b141253357d859d3e72f051f7e8d76e44de5ab3188"}, {0x48, 0x113, 0xfe97, "6164ec46f857a5c0b660fe48f458aec94502c7b3f6defd673bba4c25a60203d3493bdcd17f2affda8acdd0ae711602a2c6e5ba4d8f"}, {0x18, 0x1, 0x2, "95bded784fde43"}, {0x1010, 0x10f, 0x4, "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"}, {0xa8, 0xff, 0x1, "623f315b1d39a894625c9385bbce5b87fcd5ab6e0d83ebde6a2e3a24e9b7ca6004914287d437bde1645baf971d9b6c52cef64fb36456f11658511fb05498b14a91dc4eca1c8328a5975ea7a4037c8bb997af1666ec54fe26c4d41302cedb3a1dca47d4d51efddfb71d9f6862a1a07786c20e85e94ef785b8689afe414356525e2a2d1f6bee996690e201bea7cd3ed06976"}, {0x70, 0x3a, 0xb0, "a0e019df0eb9c8763c58a8a94b91872a856c41c4bd3c3b1189bdd09e80b48725c7335693547e7cb4949efb51e8b257457b5721a55f345b426aeb8233904e216e1d7a84dcc38a18e1ebf04f9d00bbf1cabb5d977b9eb3f7988b1c"}], 0x1228, 0x20000800}, 0x2}, {{&(0x7f0000000e80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x2, 0x1}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f00)="5ed8709e1d760efdb4586a111649fc1526c2112c091f1209ed9708bf64290dd6a6f0e2c50996995b512c20ec7acbe8e961506d7726accf2a076cfc31ffe2ddba8064dee2ff7a45ec80ef0ab7775267207aeb3d4574909aa08f7aefadbeaea1d769ef3b4b5af1c71eef899a5a2814eb4363934dabe12379418f2dd5738b096d861e0ef010c4bb8f58e4370b479c333bea260a52f3102cd954c89a5c66beeaea5b89d9abfbd7fbbe0d02f6ee5887a104aa240de28096937fb5a3af63dd8e19d3ef410c64e7b631bb2f28d1d7901055c22540c2b9097264d249d3293e4a95989938a85b53099df115d6da32052ab53fa39f3ebbae30ad7932", 0xf7}, {&(0x7f0000002d40)="05dd85953e05dd4537035eca7b536b3b004c8d8eba94d30dd2c30a44170aaefd1561eb932debaefedae0ffca9de674e84c1f2256f5a69f38e5213ee2423e2dbdaebfa6a8492770e537fbdb84aa97ad9535a7201ab7ad3dbf12a766b636372750dc9fa1d513bfbaee713af1a9ca82b0f9e09aa002575fec68463d0668de1a6cb54e313f5da59fa5da13a9b4983522a0056440d74267438b5065e2c52ec19b4775839f6de93daac1ad35903b4108b191bc63999daa143c4885b7f916e970614eef03b59626c6726d200fd15cdd01c78671dbb366ffe9b9b409201b1db02c6e13d7d11c69173adb2f66047ff64483ed901a72aaf2d1ba5fcc8e3bb0d1865285b4d22b1bb881fabbfac0e31ae38befe31e1739952ba7035c806221fb8d77ac6643bbd801077f5875f26b89707601dda227d69b5962cfb3f38d3a57134270a821c5c8d4b0f97da0a2f2077f1a8ddb2050e2d6fa29421d8008869f4103e875e0e5e1a065574dbc14ae0c1630b0c4dcc434ec80baeeb5ebd129e57c009d4410bbd4704701a0fec9102d05dc4b0b479c013a6b98d63bab0b468e01f5478acf60685f290d01953fba2022c4f02f47e23f74ae1b377f3b17c0505d24aceb7a04ccdba8410cab11574b4beca637c1025408b08e51d8895edeaa1209d5016ebab280564257b3464e3f6f6d70d7c3f931dfd94084524be318b89c53250239b8f790231ed8b62a76d968dcbc15e8a6393787cd445f88aac084a25985a5df08a364b1760ba486cd7a1723447af39d8dc709b1bf32db8f159268115d427eb6b52592e3dbd326765014e5eefa69eb9be98d61b034857ffbf8cdfe6539213fe0adb6afc7060eb556e7b47fbe81225e4dbea2a0ce63c94b21e2ecf3e50751e8bcded93af5dbe7733101e1a681e2d68027c05dff68e1f630bdbc6623f6f470af65ebfe89ee89db2ff819587ce4f432b67438f0230f79f716f55fb522aff7685ee2d69796fe18779cfef8d621102a7f0b4c96e7dc23ce4e8ba221a64c13aeab3854ec75c76b32221d44a00ac9bb834ab7e3e9aa2253e7a2f747bbf41e91a7b3f8c03da6bf5fa17587f9d6ea5101f54714d237c9f43998d5b09419c414837d19059ba09f5020f72e934e8c6057aa69cbf3c6eed90041b23e91166181e1160cfe2ffcbea8e5badd2e45b36031fc804c3871e4bb351bd767c96340e9fa06b7a85a3679d7995fe702ba3a512713867f60f51b00c3c89a3bb7ea2ccc8f7cdf26c2dda3c16fb92f177bca0d07fae4f4723e7d4353464f503bd27e0e49cd5b447634d664bb7fd3a06f1103bcf8916c60a1969662b7e5058b650ed9bd05f2439a9964fdb955b63cd999f05fd9b75ab602dfc4a6747412865c72c24c641cb9e68c0de25365884c342beddfa3bed3a3c1a41524dcb0149ff8bc646c6c8db51adcb6d402124cac2b737a83bc47cc04495134d9b2c977e9f08588ffd44f90bf7911011152536cc1beb2cdc1144116bc402b1b60cf69c03d5da2f358d186806cd8ea3e02bd72a1f435a98b8197f495455db0c050837cd6f3f6ef88bffa6280919778ea99d3713baa9db2c53ff63f7f8eb7c263e374be43dcb30e212c2c6143e512acb6e00506d424a4287911465b71fa46a7a024a1b57a3088796aef495659229a62f551b4bc34f978d9322c0ff9f45f5db3493fdf20714d49e084d5f590ffb4c68fd29ac2d676106e94cd9273c32fa4b971011bbcc34b77f7560b3c623c80bca44d9b0a30ac62534e4c7c385a367e66fd60676ee3637b25e54c9c0de30f607b39c6b89986d3429c1329e6463f9b64a70e97c0ab06b887849d4e83f37ad33c2bb96c012b4110ac4d818783a076704e88959b222c915e9f02a89bd59c0fa0e338638c3eca0b07bdacb2250d267befca2077a1a6c14c74558a9f57fd73238f3c50397b4267037c3d1399b64f2a34815c577be87adfe0e844727492ec5e15a6d39952cb45e0fd795ae37b042f195bbfb0cf456a571facf9ccc3fea4692b4fd872d27b27bdad23d1b238d96d33481d8f0ab95496e3428a25a1ef2e94b099f5733ade5a646bf29a159a49e7a9c7868f30e226c74d0f328fded63ad908d0857ca090bf209997c4f85f84bb30276d860770437aa098c0da887400a9a29e884fb669804cc142d79c45471ffaf886bcad109f08f2e89a684e2fe98b27a29f8ef51ffca156eaa83025a8bf0e3dc176e77353548a97e1bc4bc5d1b685bed4ddf946edda8c086f21a80580f6e6ec36d488b540ce7386f908a163a7bc1c5da46f897a9208a5e5fd2d75a8d4982181fe19dbb9baef9385a26e55f4317a652e9921b52379c540d6697df9cd334caa0225415300a02b6313c46e2c144abdb6b7866f5c009fdb2c88ba836c14914dee016c8a250120e41ecf833c78412af9c4a927622c2daa9d20a1323e2fb7b3c5d03fa1f3d4a7d97501f1a0be47dfb1ddf24d5709d5f4e8d315f5d37d2d153864027a63521917e0ed9bd766c0be397973900c349b16b6dd6193dddd96ea7596bc6d7982d5cb9748abc8ddff0a82b7bdb79568db7d5bb13e1053ce81ba352a25a6f9f9bc6f3102b94fa05bc8ecc4ede8f4370593ccb34aafd4102ee47dc67b723409d30b5016537c6b408a68d6908c68fb1bcc38d2e16bc5a14aad4db1a12837e9582f868bb6c815f7b0b37dbdd87c605b1dbfcf810d558df61b4df2a3999604dec8e6b51cc22c93c84dd6718baa8b2bd34e529efbde63a18364c69f0339381b086a69dc9495d7ef6afca32a6045b888e7d78d596afd49905c35584bc5a47bbd680d5e5f768c60af06f59b89ad1e0f9ff83844d18d52e94dac0e54bde59f45580bc16d52862231b399a35a5f2a9cd90f0528011fcc7e68f053c016fe246de10a2cab6a7967e33345e71ae773c0d8749b38ab9b0d336ec00a828923426afd1ccc57007d11a303ebe121371b1c91edc508fbe1d2028cf4ada2490fc1f560b0bd4d6caf672d0052bbbbf24eb0c7a5574ff073ddab72939fccbdfcb702cc4073d5d488f51452f480f20bcd933248b500d011c210face1580d6c5b74e9b5bade2813c6e99de36b7f460a9188dfd093d686b4c8a9c9cc4af62af071fd0bdf81a902a8112bf852726b01f32150a5dce4166e0f437650ed9660e28e09450fad0a0091a51aa68d6a63423b83924e1d7c6a0bad6f62296a68014990625f0dd5e19837a515b49fa5d86258ef215b0c0d3c3e9fae9020fc247dcae86c10de0215ddecc3e2e27fd07948b45ce9e4d0e224353776598dbcfd5d3cda6958ed165894d25a3778c3a6b774d8fe2da48360c7429e1894aaefabfa55786e797ecbef7160a9949a7262a0a7644251ba4d59b3d207682b3992a30de78e30344b72f1c4ed02c46b11aee0b5eec60813d2be87885dab70d4ff7308d69f0d191aea6be025f9c14ec7ee025770bbccc6a0017392565121788209bca7573742daae902a434ba47727ad0b9dba0565da8edda03df1a48a9399388a6f9259ddef858099275c07cc3580f6f699dca4d67ec9a8f2e24209147cdb7a91c69766e693857b38ab1ae5471d47a6037bfb4bf094cc342412cce73c74ee9c40fa624aa9c985865883076797660d6fd2115f16c789fdb7286762c0a834cbe2484c715fe8a61fe898f5efa82676e09f8f32200e82d344a5a074495c60113fa43b2178472af49dae1cb27f54561310f81cea2b9bb2cf7dda8184b85615176343523b62b520c9611a38494295b541f9af094a457dc48f24be678fc17373543ed1f25b526b6f9fa93effe366a01a91c220a6bc4888de70274959988df397ab8a6d943e82158ddbe595faeba823527077739dde83725dba22dfda4bd97836a0e17d21faa4e7e01cf3b8da6c0dbd24a7679075e7a811bb131edd8fb9d4353ae0c0e103f7b60da4736011a65f3db6e2da37b9a2a59d80f4d9ff04c1434c93c527a11e3cb8349515bcdfc25f1484c9f30bf687aee90b8e330c3bf0984bb4681d744a23dde164d577b5105ea9a670b7c0454ecc73ed6727ed531962241c983dc592d0ec4ceea45968fad49e4602d3572251b9775950e617fd0366e69d4e0d8b518251b096ad1b17b0209a6646a262ba7bf304273644ab333e798dcdf41d2a34c9fa89600886f732cb01699e0744961a0845be665ab60219e0389dc6d383442de2b8aa66cb966832de46eea0b82587ff64413024d006df3989d03dafd3449f7a2aba9bb11640ec6b008dee6e42cc00b67afb1bf32c12b083bde830d66751f46b68957c57038ebe472ec43df9397fefddf689b8aee36b7861ca7b23619538b59ee86b6c31665a0cd4d3cf789f2f148ef10afcc4bcbbe6cd9a6f949a7ff040c90f5d8c4480e74142e96dc88cd517e443709dae6b40cdba863b54415e1330ebaf95349bcfd0931b444dbb62ce421d4f01df4b0d48e468383a94fe352f08a112fa1fcc00edfa61bb9b9fd18299bf79a4a5a4f16ef223d1f5c3d2a1ade7c2ddb9630aff37d54c73b79493d95e6216b3e3c540abaa9a089228858a161fa70a025091063b37f9f997d2fd2d0e8de6ba7952d79a4103b0c750e7221b025c217035607bad16c794925042cc0ff2faea65f925da54cc1469a4fb5bbea0fa254c55ee144f841ab9dd0e5e7e8e1013572720b9cdf21efd2ab623134c079cb7560d9791c773877980e75cdd7580f64db0011e4d3d6c080f6fdefa1ff9cc5a9f06af52daf88cb591ec79f6a750deadb7634d64ec0e0dfdb6c52cca789f62fe0c7c961c9eec297e615e8f7f4873b83abeb462f4627ea2927f6c45628630ac4917ba679f8569d2d706fc2b759c9cdd4051cdf78e1d35dced2bb2989cd36d49de9c1d7321fb2e0cc3194b82c00536db4b97c1fc81695e6123403e045929dadf71e6f2b096234c118ae38c96d6f74681fe74eabded1cd5a7c357e4af534a8deaea30756483f886ee292c92b457646c0ee24bacb27812981af7901aeecad6fb75fa7970b8de83135aa44f5584622bf29e89a253c343aa842e47c9d91027c450886e58b11dfaa40dfbe4d7a79181b97b8ee5d3a606b5bd19b6e7c8b9a5c753bcaf0ac67b6fe462dcb796c2ab20f53afc54cce88d64f22eebbef7b0bdef960957d49c85e849b4b6e0696683331c204926d691c23a75cf9c7eba2ff82a0d72dab0d582a5d215f83d181d9afddbadbbcc93058008904996a4145addc3cba8d76c5a374cd4ec4df7cee6353a7970338fde1646a79718e28b163eae9a61848c408a9b723f8ce5d53d7d08e3a5cf001e97646e289ae4a534ddd5352b5c982c60ff1f21db7023a3e35ef006f563d445df011ed61dcc6cca24ee28ae2bdf981ec6964d384ea090236f902185a30a3f755762827b8f5f58db977cb24864064ee95e269aa17ca499595dc5a44b9a698fc3c2b7fab18d96ec4f6b975d8ba83ce8886ee268eb96813205164c2638c6cdaf5d5bf60a1fcc91f5b0e1690a4d3183bb3c401c40f9ad5ef224d343066e7fc9a18dcc4e049777f7e3ad190372b8ff569149563f7c50b39de7dfc20787000633a0ef86dae85bb72342b6f06335a9201d0adcc5bda598fd9486b7f3248f20c9ecca3dc250284b07eeb0224139f5dcd3fbff963aac1f411453242d3581773fbd0ff8f0f3c4c432c630e3efea47bc2fab53021472a4c810a740455c44ca37a80c2258b3a20d9bec722d4e2b220094dcf411266ce2b27e58b4a9e9effc200c3561351b1aeedbdd2873d6729cb4c8ee92b8e34833ce713d61fd66421961bac8c3d34782e5c0456d2caff19f57366aab4c0ef24e2f270d35d5abce0c50d3541e4ba4c4dfacdfd", 0x1000}, {&(0x7f0000001000)="7cdd22df47d38d4412056e89e2832e1801a3612be8f647c64e170d93f9e7c0edf735fb2b5788dd734b649a2c1b580ae9cf5d0a8f1a7cd117eadc70e22cb0fbb0b369733fe957f214df7defd56a6da9797668d9ea2ab534ffd3ff2c82bc200ba0a55d621ebaa12104e287aaaa9d3dbb80cd78dd6f9e7081a5f43672f1bc683d2e5d2e68d99fcc1f0316fb539f663de8599c56c0309e8276fc9ba992eafc04f37dd90bfe09ee2e8de8275dffdf19b0e67c32957198c12f0f6da077d8169fcc0d8c5004bc2dc6b026ebadfc2b9a76b69674f5800bc47ca31d1c23887f366db32ef560cd21b86e746f", 0xe7}, {&(0x7f0000001100)="06b73f3d4df77389cc39572b6367190bfd3482d3035e343a20888313f0c023a1b4cd396432d0b8d285e059d849ebe874b6fcc3ff0baae70df6311aa2b41bcd06b206", 0x42}, {&(0x7f0000001180)="6391d8b841ca9108b1cc9619e360d6579a0422c23e22004990548b9bb965f6d1533fb418c789c4a3abbb7e81b972c495cb0fa54396c3e700bb5907170eb2f1848130a5759580b053eb0708017da0876f7d8633ff4cb3afffd69c109b5e4b0854b42d49673cab65f9183d206751094b0d15c3a3ccd1", 0x75}], 0x5, &(0x7f0000003d40)=[{0x58, 0x101, 0x7, "d65d825721777d3b37219a87f301dc051b3596fb1d9796ac618cdcac5f703bc060c01ed182479085de2421bcac8b3bd7c2fac2d804be0a68f86517d254a9c760ba34396a6523"}, {0x20, 0x0, 0x1c, "be965eafeb7834b0375a1d64"}, {0xc8, 0xff, 0xa20, "1637f3657b26210558f539afaca566331776a93a39ab13e2c9bd7217c8364e4158027fe162a8cc355cd7d1363ef7b3668d853ec553472bf85edfa30430368a740fd7e8b333f3053bbb923ba7d09731efcd83ef435548c4e31149a4c1acdd4881a81f25a2abd8446f27db70c1d738315f526c9ba9bbdf7967569109dcce2bd0ed86ed0b4078b94f64e1b2da7b94bdeb2d1c9d572674b9b78f390ba5bcace56bd0b0072aee1380517603e0b940321e5d3c032232"}, {0x1010, 0x89, 0x1, "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"}, {0xc0, 0x104, 0x2, "9c880ea0b6e215a0b927e856fa8c0309ed81cd65f7ac97f37fdf067c97e3770a95b551d3ace43f3768d6da71e79a5e08511ee4dec9bbf8bcaac8cef43ffec2759870204fe0ee23377f8c102c854659037a7f8c3e36aee566afc1e70b9df18d13f74936cbd3318f663b338393bc21b1d029c792c255104126bbb201ecc1b20306b3a03f413fb193bf60b9d3c40916957b192b69cb6353a7478aa97c888f619eae2770780e8811c1d9ea9f9c05"}, {0x28, 0x29, 0x0, "80f96860b1d2bd2629b5ce13cf40b745b816b429f4"}, {0x38, 0x117, 0x100, "1cb9280381dff85184ad57796d2c0f9556099dbf23bf36be4388a571c94c63afdb"}, {0xb0, 0x84, 0x40, "2379466758c3f23ec54fed9a466313e073a1620f51cd45bee5a349938be6c61c2f66e09b34926a87f0be27a4acafc2a23581efea93f0e67d90329cae0701f1fefd9ee44c804e1c65f269ded99e4a2b4ecf2b14c014da79dde2187a81b90bdc5c2318c5489faeb86d0373ed74d72c8cf3610bdffde7994854fe08caa650e3fe67390cb06a8bd06211434f4c13168a15cfaf978ca9945cdf21ccc16380dd"}, {0x1010, 0x11, 0x1, "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"}], 0x2330, 0xd0}, 0xfff}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000a80)="1b44b55839e199b1e319a81787fc98cb", 0x10}, {&(0x7f0000006080)="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", 0x1000}, {&(0x7f0000001280)="3147378ede9029897aa2cab36b55a54de53b00d5d4af76b6ab70c195", 0x1c}, {&(0x7f00000012c0)="5c67821a0399feeeb7fa39bff712dcc1b052f4ad601c02acf854d0b4a96a563bc363bcbea7bf8aa15815aef60128b95ff5d9ce20662ade4d2a04055a521f2416e20478e4f1e3a51a4f009ff706c3c7912bef7fe21b6e42b393cd8e0e9ae19f4ddbc6074404638a29d7cdd7988eb71c667794962266f3de27ea0a47bfb6106ec434ff3a26381794bf87b55cb609ebd6821a015b744c23664a527bc538df9ba158523ee4caf450ddc4d461f35f31a22574e6a101c631ae04046466e2771d6798ab5b5acadd9a78a26f1b3ff46970a0151b", 0xd0}, {&(0x7f00000013c0)="10f82daf4ff5f052993b78bade1e6a5ddba0af0ff5090246b4d9d24079dad4dfb6d7ba937ba1ee3c94297314dd6c59317aa3c0899e0c95a6f53cc8b5a80239d47a9f48626369aa06a9722d1e1ad7f9e567f994799bde4ccff9cb215eaab461e5ffa46090ac9d267c8a76e5223e5c2697831ed526e148e1a5c7b9a5ccbcafd1e47de84c557d8c0889958b54d1283f7fac7307e3521136b8d21af5184aa4fc30454e2e230cde091bfb387a22f7bd9b05", 0xaf}, {&(0x7f0000001480)="d7da2ea9d398a20dd45432f48fde2dcf73be71539fe17620e8ead9ce361e6d8e", 0x20}, {&(0x7f0000007080)="8b3320cb18a7c7628612a13c1d631932fbbeaa44e7f0f02df07f80e7b7c13251982deac0496ca271c24844a21fd0928beaedf56aea10f5521fde0e9617a566f13dd03d3f0fd810d35963fc4308b6accce741388aba4f9c4e018abfe8c27307565f3cfb2f2b69b33ad4c988c1dee1131bef2766ab936a99042cb443e4f62e8a5e097ede97bd88c96b488751025d73cae5952bfb659725f1a6e7b59bd0932d36323e20d527a01f54295077e3aa0cd283f4a9d657fe8d16894ec09d181753fe81814a43358642488c9e3193d9917459d323e5fe098a8986c4606f85675fec04f5edaeae361fc9f13aa3dc56b274d4778602b87cd4d79dfd60f37948d6945711c057648ba2a0816d27acb16bfa269e4fa91ac03fc6ee5a2742a801d3ee684461687dbd2496781b7f7fa74a56f7157eda272630c018f4080822b3df877c43dc4509aa1fa975aac6a119e028a2f810f18cf28a578723b90547b8ac74b2b53a28d2abfda9ab169a7d1a813f73767061e988a5b55a63a06111a3871bd38024e28cbc7c8cbd5f43a69ffcdb391a48b9f2f5ee5b3aaefe6f3031f800844967f1afddfe22d9db9e2e411971f8311fc2897b876ae7caaddf0f12bbca936907bdd11524af930d93b66bfef4cade3ff7c2d7ed92f347e3e5b4ed3c30b576abb8088cbff86dee4dbfc34ad98454a7220a23e74d5e9064859a4cd4b3a940d75ce1387d4af8f24dade3015e799f57a32db02919bb123f5e16d4f0942b360cc2f9d5f1eaa699a632fc2bf6f8980850408c4cfd0333b67285755bc73f92b096a27665e55c4e3555b556d00359bb02dc5d54a76f65aa134f047afebf8bebcbaf8bf2af5fc0659e9d0a7dbe78533c61ccaa3ebf15efd29e4105a6bb54effd8b6d4771bef45d28221cda3ee34523eacdb4144963172244b31f486679b3c92eb6954ffa1828ded1985ce0990bec3d7e0942cb5ae845aaf9658aca091b1428e991b6c0fabcdeab4cef8ec14606a80e3a7c6f0567328f7fb0f638ca8335f961ff698dce0bf43aa7cd1b1c525162c34cabc4f920be32090bea32c3538379ba28e2fe75fa8fd8a6f47a7a95c2a2a6707375d3fd6a28d4c5e3891d7ce7f6833bffeb9029a663cbc8406dba93c0a8590a77d774c3aaf38cae825e006dca18fa3580811fcdb0af12b45def38ac60332392e60983eb397ecd185a30c6bb576ed2a4daf7b863d0d69d7e04bcbcd4a76906a0600c58f25b3c5da9855fb548b7cabc8567ae63a375ac11ad7e343406bec3ca52cc0b7d0a1592c8b609dc034a420afefb3a2bf3f068f4d0df5bff8abcca6810ef5d90cfd075789c1039d05d8ae738212ea642c6c1ee3f0c9d80d3cc108774b531afa60313f534702d4094d494441ba9a70a20dd038ad9e857720c6c73c488e278a001fb44c7e853ae2d9dbc7757014fd1f37da4c47d692623b8e9e8549d2f22a8fc4254f7a6195262217be561607082b5822f40666672e6a5da0839b0897aadef3af4b56e689d25a2b6d2600176a55d4746a78cea6e63fc186d7bcceeba89dc450e05d5c7efbbd3fa01bc7f9c32fa7ff8458f4a5b481bb74a62522313693b6f311e794e5b918000b73916fb1aea7b599acc96191beb312d48501e05e744e3c1b41e70fea430c1aa14e134a7b97b1a8a0ae47da21f817a7824043e31b8a0120d58b63d0850450f6436896f4f8f36c8279bda283f5ac325d75d76d76d6708a5b0746a070f70ffae55fc701e15d2b643c9a52f3a144b84b428ce5563b0afd22761cd91d8d5f24cedf00b9c252bb5da3e3caca656964b3fdf11317fc5f99c1062ed8d50fdbf701f65afd01d1e73b35eb9444b918ef814f163f8fdae100aa6a7671991f0fe9f46ce99026555d1410333be730feea38183795dd8cc70d1efb252d968a9f30ba1aca9a16c07039f3f2072344405270d7acf56c761c7747c52423fd86af36e198db4831ce19ad380ce0a0aed766f1caea2f5bf5c494024f3a9bcc34486d171405ac30e77dfb0a7508ccf003e1942363d3dae544376070319e107ed9eac70136869dc9d4e93d255cbfa892673b7e74f6fa0d927e38d68f34643f6f83c6988a7331b9b9621ce5dbd2b1f2532c52a1723ceaa841d105bd331a525d395819596b0ac452add4c6a32aa58adf3b9d1239bf884c93de61dcd4c0a26e1f51dea2d993c76260cc4dcf04a02dc50e1d5319093d017beaeb02c0330a3e92ffb2714ebf3f294a1ee486190399182a54fc2510e24b2cd02291fb6f17471c244068c16371311eae7486ccd0b056a2c4946b3a2aa5c2697d01f15cfc425f1ebf4dd5094dc41477c0421e9a829834359ddb2b2c28eed23ae7ff42769c2bba30c315884b8dcb063d21d0b92e4fe001284f52061208ccd79fd2bc9270b904d2c733f4759dc8427470b042c6a273d78c383b513026c96f2ff5dc3b1f75499f52578df63c496a4d5619ecb315a279ac77eef602e7252d7351ec14e07ccc4691e7bc2136309f47a48872172db46c7253c08d85ea0ee1f8b791453ccc7a556716f70dc114e05c629d9d901d50f4c4b5457bb59b617bd448608c27bd0e9319c3966216f44598685a6fa9bdf88bd5c0528744eb8bce53ef1b91b2e06df26a27130e59c42317876231ea0fc87bf4e1710c28d999c771e44c9c3de6aa83627287dfe8acb64c959a8a12ffb59e507ef84c5a0e244649e539694e06dcf4091f584e2a5d8944dff8519cb537eecc2f44e8e29cf188de4106417f8c8cb54e55697686ab16fd2023748f9cac97fd81aa9d46a941394ed6b94b17b9de1ac35c2db5bf4cbeeb2f415c5f5ec6d60050b8d1247ced8ef6c76f483ea503b05c08404938a8ea468bfbb28ab2372f823487679845d7fac75106f089214a22237b086c4d0c61ebcce2955e9e04b3f9a8f9fe27d2f6a153829c63a6b6538c1bcae784979dbfdf2dab3479dff50af5326cd2e3cde16670a00f9f7924195771eb19dcac94563a5ceb7d95919748c5167d3876ac87331bd720ca3db3e4a35eb4999bf1725c6c4a66ce55cccb47a9295097262ff5491b4fb0318c801671c459e8b383500131893b71b88f544cc735fc6678288d202712ed957141b375b3a9cc1d628ef054beeec14047f9d40dad1ea9d7b4f0cd9b63c2ec26474701b9b1b48eaeaa427ef16a939bfa42fb9047fe248e44658de282839e4c5031e4f320cd2c878b77a5b83b38a8139b191949279a74d08a22dec6992a10f266f8ca47b43b0480d44fec59c46a142ab6910f9a184af4febf026497fbb8af13aee5c3592ac0bfde3b8d68c8ffda62f26bfae2e4e3f1acf29ce6592101715ab35248ca23236fe2ec2012b5cebef8be5e32b741f75b9a6a59e6b99f925eb3b21a96cf4f4e23278157b70f34d9bbd943bd613e47b14b74f983bb273739819fad511f1c13d18266a924fda8f7b257b257be6973d7fea70ab75cb243233d0df9bd6f0bd44fd44fd88599eb7209db6d9e297d04b87fab87a8cb213e5f5c9ec8c0b3d0424c60c36dd52f02f663e2d7681ed63564063fe3b7f6574f08c1aa081d51e98be844411fe691e35df7826c5ae69b92f68a8a9f6e4800c57e2440af84746a8d80f6380a92177890c64006bf9404ee838789121fc767d7bf842d70d7e9eb7f076ac3f7ca4e70d1861ca89d1d27e4197e5e506dc0f29a87201e95018db971c0fedfdffae1ba443c3042065d4261614aa9f39da8d4b5d5ae222a0ba2573d36574e9648fa1848f7d4cba48c0a24980e9bc0240663b1d4acc12c4541500922f18ecfe500e3cabb6801c8859f861ecbd12f4f7c7eca508db18761ae676a7bdb803928c86e79134112b0622947dc1fcfc164341a4a7979e16b88ad9c0713f8b652a0a9f0adcef623902b078fbada40ceeb351b2aaea8193c1b170e7f9a2c93e820836e8666e08646658c5030029c21ab39969d6b4467a88dd71c8e59c6100f9c8209793867dc3e0511e1dce2e0b340f443633bcdd8e00c184f3622787b30d44b07c7cab9dec013d9791c565e3e6fefd9547f0b01adcf98023c955fca82268fafbb8255ce904560f1bfb71eab864ab9c8f229e499f8f9341944b90cba74e513db9b824d00fc67e088f0ea2ef669f80c2ba74a72052758942083ecc37aa6f0a21050adbf7f09c9bcec956c9f57c2aa2908fd54813beff3d8bead04f4656be8b7103d2bd2a1c548fd73fd946381b11d393ac43e975b8fa0606edb8d1a48e2d76e6e83837ecad989c7ad08fcd054ab4bfda48fa65e0b3ee58031a889aeb2a6e213d25e88863a46b279ab92c43bfc1891deeb9a7831c7fa3edf3d512cd9128325d92fa4e6f5993f943be8566cb669dbdfeb7d2aab768de0e777c5bded030b323d4209c507438e1a49b379fd6e3918dc6e183c59de0d2eb00eb3dbdfd06b6f2fd8680d3b3e0ae355fedf8e942fe3475cfe81764b4e78e0493fa3a8f2753532ec25df3e337fbadac2038b5b91e57f4cb1248928ba2f19c6130c2f5860a06e5c7731d1f79abeb5460ce19714f21a097c17c4289639cf0c1fecdacc5763b57b34695063aac9fc346136c1be1cfaed570ac2ae5a286ad72f704a9a0ec3222fbe7f34185a6f8202c4e05597f9684397219653077f7d0a43b7753e9b6e746e353211b4b46eef335f9b6eff09a0e843610f4e48b5bde4f1ae04f504a7403b2304629366946d5f24c34090410d7ff1edb34620ee92e5aa93d8f14012b975a760f3f8cd8dc4863e1dd4ac245cd71b07f0b56ccde5830c2d3ee031e2262375ce90fbedd335605638cfc864641f4645195820107e0b4183a193c8995f4afe8cb69b2289b9675c8b037fb476e0cc8744c58acf6815e62d2a12a17f4d83cade2bca81b45dfa8d857f80f074d8e89626e5a874c70eacbc571b267695b0630594f3d3aa51d48b92a773d4189f9dac554dcc7c0e7260f17f232955d4be862d5a7aeb02d5f797cbefd679e5aaa7e81bd83b230fad511618774033f1b9f407fc38e9c88d550711d886f527c01ac9c2b14eeb77f3d0fd9cf4cbedbd6c43b49b7b62c7c85ded37d67b370fd5eb00c44fca4df21b3dcf969613a09fcf319dbc2ec040b17c5b7ef80c39085d01693e12a3dad9ea567e943158a4097b7915e47befdb19dd18b3919f7813bff9556ab5c51a7894afcf1892ccf80665145be0b0f1905e92fe73a63631329393e47138889961d8e386d6d313519c558942d9b5bef64267d8345cf2a28ddaaa533836ff29e50d57dd8e581938cadd3a6895c1c96efda398f74a02b578e0362e852454466471791651e52387f39da9217a241dbf22917fe6ec08f6cef143b55d274e616cd58f895830d5c67ce8554458f0690f3404c47dfb28078383a01bad8d5a5937dea06f4a04edc00eca975e7339acaf8b619f26d9af9c0b32ebb94c21f6553f8887588815d23d10e4b33b34329919812830b230348a644cb54d5d8e05ca3bfb0f4144629c74683a19bff2a09e5f4077ca1bbce597d266385eb4b3d6530d68786aac657fdadee4bab55c24a0edb0d96dde5708baca1f2fd4daf22cf5606e9ad26370b40191d16c12e061598c521136798f050189d97492593e37d71c1f2a2a0f80f78a6b2a9f3ee34c4da81f5bb02d6f6575df5bc7238b435ce915169e12aabede9191c361c2df4c535ad5995e317018c5f81f0dd0c404deabceba8d47008e05378d7399723c7e20ce718e5969ab8a515102dc130354265c905831465fd1ee6ffa0fb8ddbd04220da0085abeb859e4658fae6460c24fa9d193a91c6bea15d11083a3f13cd33efd6887415e2a4d91297e855d35eea5604d2823babac300227f937", 0x1000}, {&(0x7f00000014c0)="89a5c1cb5974c629e73a68d0a7ffcb9354c5ec56e30b76ec7147925546847d4d57fa6d6cdee3c2fb240cb2eeb1", 0x2d}], 0x8, &(0x7f0000001580)=[{0x40, 0x88, 0x9, "3fb2c14c0af48ef1b488508014b12aa88b319110e5a13f12cd2c1d282e86e6f6965b56a6e37e2cd17b"}, {0x110, 0x114, 0x1, "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"}, {0x50, 0x116, 0x1, "fa2af87daebbdad9ba8cc3d2881004f8ad54e492aff11a3cb9ecad0fc6987d9d2d5f508f440be4c98d5168bc7e59a77539124f39e17a1b44c1"}, {0x98, 0x100, 0x3, "af5791d992398db2f60fcefd44f4541ae45403dcd18cb805b19212c39271fe6bf0ce6243f678aefb1212b774641cb2c6f2f45f0a18f98b236c25d564430caf1f0b18c02d08c14248db61b69617c334fc7ad91d00665b5e1febef1c6408dc76df0237d32e67bd6525fd10a70858e7059545ab781b44175bb4695e55655e0b30deacf0b0e29160"}, {0xc8, 0x29, 0xccf, "952281fc975709ed3d0d32bebf7204082360b06e6f903d91cbba8a57b7c9880a12916e3df1b87b4f8b6e0a4b28eb56ac40b6f75791d196e2a0d291f498655b917ed5fec73fb284e65bea09bb08befc7f7c437c6badf919ba276f52b6b0d0a3f5358d54bee278a21f99ba4365307767686011da1db58879b4e720df84d1e5461f57b9cc8ab4806900549b2af87e2a197d4baf5ebb366c2b3f6546209bb1ae030902f1da81cc4582216d5d4ed4e63d098e33b1ba0ef28e"}, {0xd8, 0x1, 0x6, "7b49fac5af76e097314580fe941122e6cf377751ee5bb92b306cb65a0d8c105fba8bf9ee4e31838baa9ee8bdcc00898ec44ed39f69884142e024a00a0851f03d867c05ccd47fb9a0df5fed93c478e2610b2e1e73b873e54fb8a3ebda262c23d43e59e460a22f78472a08852ff3aff80d19b9da742e4cff1da03a5df6ff5ef14225612b8b9c39ee1f9380118d84e8c6856731d59342394499beb92f5277ed8ea6b283bab1e4af0758a7bad96550e5451d0c7c38163c9333387cd41ff6d8d9d14131ee7010566d"}, {0x30, 0x115, 0x100000001, "f91146905d3c916df901ef0e8b2d1c33ba059b0ccafc04a9dd93a6712bf5b9e7"}, {0x20, 0x11f, 0x8, "c8b724d2f5109ca42849d24ea7b2"}, {0xf0, 0x189, 0x401, "269a9ae3e815ffb75cef7c02806d7dbea26a224bdcef5455323af40060e8f8f0c750aeafc06094a6bedaf60b8f5da686edd3c01621111d4547be4ea7363650b8a394e90e9d96e2c7668c3d5fa88f4957941acadc5dff513bfbbf0a5db2d6819f120e1b749f27145231148ede8ca2647bab6b3ca3ef0fd4d386dcd5009e2b54a8cf324e7b66b27d1a89b2d12b994332d6ccebed11e9f296ca1234282074ed98246244301c196d4f2f9deb7508f50f83c4eade6a1fc4307e81e8e6c7a22703f54cd180d6e33d5c111ff6f7d98542e122ed5702bdf7cd87ac9877367149"}], 0x518, 0x40000}, 0x4}], 0x3, 0x4008081) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x5, 0x4) sendto$inet(r0, &(0x7f0000000ac0)="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", 0xfffffe6d, 0xe805, 0x0, 0x305) 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000acf000)={0x5e9, {{0x2, 0x0, @broadcast}}}, 0xffffffffffffff41) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x100000001, {{0x2, 0x0, @multicast1}}}, 0x88) close(r0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x6, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e21, @loopback}, 0x240, 0x3, 0x1f, 0x0, 0xa23, &(0x7f00000000c0)='irlan0\x00', 0x1, 0x6, 0xeef}) [ 474.504902] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 474.522937] binder: 13417:13419 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 474.530742] binder: 13417:13419 IncRefs 0 refcount change on invalid ref 100663296 ret -22 [ 474.610663] binder: BINDER_SET_CONTEXT_MGR already set [ 474.618280] binder: 13417:13436 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 474.626075] binder: 13417:13436 IncRefs 0 refcount change on invalid ref 100663296 ret -22 [ 474.645769] binder: 13417:13419 ioctl 40046207 0 returned -16 03:34:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000038ac800", 0x101}) 03:34:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000080)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000480)) read(r1, &(0x7f0000000380)=""/42, 0xffffffffffffff4b) 03:34:04 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:04 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x6, 0x1) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 474.780465] device lo entered promiscuous mode [ 474.824386] tls_set_device_offload_rx: netdev lo with no TLS offload [ 474.839709] device lo left promiscuous mode [ 474.954377] device lo entered promiscuous mode 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0xa000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030d7b91f877cde350b23702a5eb9a5163030303030303069643d0000000000000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x7ff, 0x800000000000000, 0x7, 0x1a6b}, 0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x2f) 03:34:05 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0xfe90, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x80083313, &(0x7f00000000c0)) fadvise64(r0, 0x0, 0x40, 0x6) 03:34:05 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)='\a', 0x1, 0x0, 0x0, 0xff22) 03:34:05 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r3, 0xf}}, 0x10) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x2) ioctl$fiemap(r4, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r4, &(0x7f0000000000)={0x7}, 0xfffffd37) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f00000004c0)={0x80000}) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x0, 0x1, 0x2}}, 0x14) [ 475.184879] tls_set_device_offload_rx: netdev lo with no TLS offload [ 475.197884] binder: 13475:13479 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.205785] binder: 13475:13479 IncRefs 0 refcount change on invalid ref 167772160 ret -22 [ 475.227268] binder: BINDER_SET_CONTEXT_MGR already set [ 475.227283] binder: 13475:13486 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.227303] binder: 13475:13486 IncRefs 0 refcount change on invalid ref 167772160 ret -22 [ 475.233848] binder: 13475:13479 ioctl 40046207 0 returned -16 03:34:05 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xf4010000]}}, 0x1c) 03:34:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00000000ff00", 0x101}) 03:34:05 executing program 0: r0 = eventfd2(0x6, 0x100000800) perf_event_open(&(0x7f00000000c0)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000800)=@sack_info={0x0, 0xfffffffffffffffb, 0x8}, &(0x7f0000000840)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000880)={r2, 0x3}, &(0x7f00000008c0)=0x8) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x808835f, 0x400) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x8b0}, &(0x7f0000000140)=0x8) recvmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000600)=""/191, 0xbf}], 0x6, &(0x7f0000000740)=""/104, 0x68, 0x8}, 0x10040) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000900)=0x200, &(0x7f0000000940)=0x2) 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:05 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)=0x1) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/148) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r2, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x700}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="6e816ab8349c15074eb75dffb7079c75bff74ea0701369fd190ceda03e2e9cf11f42d6ef9e47e215649bf2ef67cbed0b9a5e4605bdcb4a76cb3133aa389d6560bfc82c8e987814006130d8464dfdf8778c23a3b231787496da4f3315bbc6f5cb701288c39a653d39096c5813374293182e75c9c6f9edb4812d5c351bbdbe7b61c9b24fcc0b25c615ea7cfb34a8fdd54f1e7c289f642afcbecb84765d417861b855b81b1a9a4ddb80312b372b8d6bd63d88eb3fe6aaef8b0a5d630c2bb44d2cea92a51364502e937e65bc05ff76dcd4392b86bb", 0xd3}, {&(0x7f0000000000)="1acdd7d76903fc6f9a799967b7b6a6ee51ea51a14fed10fe1b2c", 0x1a}, {&(0x7f00000012c0)="b9b8dba060c358548a5d6af78d115d0f91faf4ab4603c867eb95e86dc467ed1e3396384a65c417a68cc26fd9d449152e22762c37199687e3777c6e04428035e82a666b8f9467b1d1194427cbeb2dbe45b1b41e6987fb5b9a6514249529fc2cb366c47862c63b359f10abce7f482d6b30695bb99a2c5b83bc154131610d0eed746bd643f4df572d95773198171a58c5ce794187000eff1e82da142a83891f3f4b1f3be86911110c7e", 0xa8}, {&(0x7f0000001380)="5db8ad0462645bf162d3dedf0634173f2f1be6f6a4824321ac86c35eead52534e75df14e379d5a2e677e46e621ecac294ede467dcd2897a2ab7bfeaffb4a3f243f8bdd19b221092dc32bea2061af413316cd6505cd8e68e32c7a5474171d50d60530c83591efd006265427334db703ee803ac906db29c1fbdb7974516d6509ae6eabc7ff1d84b5bbeda28fd3442a6547ad9cd407", 0x94}, {&(0x7f0000001440)="9514dd7556df343430beeb4e59e77e5dde6289a09ab44ac7f0197399e33e03e10f39cd6d4f65bdd95de5c1044bfd6bae1d1ff81478cd8aecfd1062d61bbeed627e0acbcd03297590a9b57f5ffeff2e2f4a5a748ad7f5bcc9876798630525f323147ffe524b85ca50b5844cc8e9e9df0778aed4607e12733d57abe25ab125908607", 0x81}, {&(0x7f0000000080)="db4875ba56682cfbf511b266b70a06bb12c3fd68562d396b29f0097cad6621285432", 0x22}, {&(0x7f00000000c0)="7d21c8e60c5aa7467f7763aed1421399784573", 0x13}, {&(0x7f0000000240)="612d372e4aa991ed27a8ece5259e748f2e1e5b86a9827e7956d4a543557c63710606be7d2eb7b115df3291b1c42ea2cd66b499803d254b090cf2b72a", 0x3c}], 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40001) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x10001}, {0x80}, 0x0, 0xfffffffffffffffe}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) [ 475.401739] binder: 13496:13502 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.409572] binder: 13496:13502 IncRefs 0 refcount change on invalid ref 1792 ret -22 [ 475.417685] device lo left promiscuous mode [ 475.438601] binder: BINDER_SET_CONTEXT_MGR already set [ 475.441499] binder: 13496:13512 IncRefs 0 refcount change on invalid ref 4 ret -22 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r1, &(0x7f00000002c0)=""/177, 0x2ec7c3d94b72d464) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x8) close(r1) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 475.451750] binder: 13496:13512 IncRefs 0 refcount change on invalid ref 1792 ret -22 [ 475.460147] binder: 13496:13502 ioctl 40046207 0 returned -16 [ 475.481452] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 475.492065] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0xa00}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:05 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2000000]}}, 0x1c) 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 475.640096] binder: 13532:13533 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.647960] binder: 13532:13533 IncRefs 0 refcount change on invalid ref 2560 ret -22 [ 475.667597] binder: BINDER_SET_CONTEXT_MGR already set [ 475.678379] binder: 13532:13538 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.686206] binder: 13532:13538 IncRefs 0 refcount change on invalid ref 2560 ret -22 [ 475.697171] binder: 13532:13533 ioctl 40046207 0 returned -16 [ 475.704936] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6800000000000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 475.730815] device lo entered promiscuous mode [ 475.748857] device lo left promiscuous mode [ 475.823371] binder: 13547:13550 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.862827] binder: BINDER_SET_CONTEXT_MGR already set [ 475.873892] binder: 13547:13554 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 475.886197] binder: 13547:13550 ioctl 40046207 0 returned -16 [ 475.898475] binder: 13547:13554 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 475.983082] device lo entered promiscuous mode 03:34:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r2, 0x302, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) signalfd4(r0, &(0x7f0000000200)={0x800}, 0x8, 0x80000) r3 = dup2(r0, r0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000280)=""/73) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x2, 0x6, 0x6b7, 0xd5}, 0x10) io_setup(0x5, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x5, 0x5, 0x5, 0x80}, 0x98) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') r6 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000003c0)=0xc) kcmp(r6, r7, 0x6, r0, r3) utimensat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}}, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) 03:34:06 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2}, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0x44b}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x10003}, 0xffffffffffffffaa) r2 = socket$inet6(0xa, 0x8002000000002, 0x0) sendto$inet6(r2, &(0x7f0000c21987), 0xfdfd, 0x0, &(0x7f0000824fe4)={0xa, 0x4e20}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 03:34:06 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xf401]}}, 0x1c) 03:34:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="7026f2c5", 0x4) sendmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f0000000100)=@ethernet={0x0, @local}, 0x80, &(0x7f00000002c0)}}, {{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[{0x18, 0x117, 0x3, 'h'}], 0x18}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 03:34:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00t\x00', 0x101}) 03:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x300}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:06 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 476.232199] device lo left promiscuous mode [ 476.245427] binder: 13564:13568 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.253295] binder: 13564:13568 IncRefs 0 refcount change on invalid ref 768 ret -22 [ 476.265499] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:06 executing program 4: unshare(0xc000400) r0 = shmget$private(0x0, 0x2000, 0x1200, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="b70000000000000007000000000000219500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000008ffc)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000080)=r1, 0x4) [ 476.289070] binder: BINDER_SET_CONTEXT_MGR already set [ 476.298674] binder: 13564:13584 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.306447] binder: 13564:13584 IncRefs 0 refcount change on invalid ref 768 ret -22 [ 476.328840] binder: 13564:13568 ioctl 40046207 0 returned -16 03:34:06 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x4000000000fffb) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40000, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)=0x0) migrate_pages(r5, 0x401, &(0x7f0000000080)=0x2, &(0x7f00000000c0)) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x400, 0x40, 0xb8, 0x8}, {0xffffffffffff8000, 0x3, 0x8, 0xfffffffffffffeff}]}, 0x10) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000400)={0x10, 0x0, [0x34]}) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000100)={0x8, [0x7fffffff, 0x3, 0x10000, 0x2, 0x1, 0x8f0, 0x5, 0x7]}) 03:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4800}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x218]}}, 0x1c) 03:34:06 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 476.463334] device lo entered promiscuous mode 03:34:06 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @broadcast, @loopback}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x208102, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) recvmmsg(r0, &(0x7f0000001ac0), 0x0, 0x4000010020, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:06 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x88d, 0x18}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x24000, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x57, 0xcce9, 0x8, {0x20}, {0x6, 0xffff}, @period={0x58, 0x9, 0x4, 0x9, 0x0, {0x8, 0x8, 0x9, 0x1}, 0x4, [0x7, 0x6, 0x6, 0xfff]}}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x1, 0x80}, {0x8, 0x7}, {0xc228, 0x8}, {0xce, 0x10000}, {0x1, 0x280}, {0x5, 0x1}, {0x3, 0x1}]}) r3 = memfd_create(&(0x7f00000001c0)='/dev/ppp\x00', 0x0) syncfs(r1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x1e}, 0x4e20, 0xbe1, 0x4e24, 0x1, 0x0, 0x0, 0xa0, 0x3c, 0x0, r4}, {0x98, 0x91, 0x3, 0x4, 0x19, 0xcf3, 0xfffffffffffffeff, 0x5}, {0x5ab1, 0x8, 0x4, 0x800}, 0x9895, 0x0, 0x0, 0x5148044ab2144ee2, 0x2, 0x1}, {{@in=@rand_addr=0x1, 0x4d6, 0x3b}, 0xa, @in6, 0x0, 0x0, 0x3, 0x4505d88, 0xfffffffffffffffc, 0x5, 0x4e4}}, 0xe8) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$cgroup_subtree(r3, &(0x7f00000004c0)='cgroup.subtree_control\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000500)={0x40000000}) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000540)={0x5}) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000580)=""/41, &(0x7f00000005c0)=0x29) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x8, 0x3, &(0x7f0000002740)=[{&(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffb}, {&(0x7f0000001680)="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", 0x1000, 0x7}, {&(0x7f0000002680)="2f0d94ccce16cc300d9e62cb588d4f9a1a5aa12c46ea113cd06d4d749788a9c77c369ad88e87e9e59d13b91d82eeb8fe84d4da9a6069d81ea3e58a854249dc7c8ac8ec0502413bcd45b4dbe2a2ba42fd4362917278a590ac4ab5514a8636c9457daf9907781a5c2cf363efeee07366962ee32f139331805b9c18ec1fa151cf174e5c2c4caa93fa1513d8897855266b5afc4daf776d4abe4f1f50e5", 0x9b, 0x6}], 0x122028, &(0x7f00000027c0)={[{@noauto_da_alloc='noauto_da_alloc'}]}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000002800)={0x0, 0x7f}, &(0x7f0000002840)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002880)={r6, 0x4}, 0x8) sync() fcntl$setsig(r1, 0xa, 0x33) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000028c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000002900)={r7}) r8 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r8, 0x2, &(0x7f0000002940)=""/81) setrlimit(0x8, &(0x7f00000029c0)={0x3, 0x8}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000002a00)={0x7b, 0x0, [0x4, 0xfffffffffffffffa, 0x4, 0x6]}) getresgid(&(0x7f0000002a80)=0x0, &(0x7f0000002ac0), &(0x7f0000002b00)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000002b40)={0xa0, 0xfffffffffffffff5, 0x2, {{0x5, 0x1, 0x9, 0x200, 0x400, 0x5253, {0x2, 0x8001, 0x8, 0x4, 0x401, 0xff, 0x10001, 0x7fff, 0x4, 0x7fff, 0x8, r4, r9, 0xede5, 0x9}}, {0x0, 0x3}}}, 0xa0) 03:34:06 executing program 4: prctl$intptr(0x26, 0x1) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xedbf, 0x102) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x10001}}, 0x18) 03:34:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\r.\x00', 0x101}) [ 476.488116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 476.504968] binder: 13607:13610 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.512838] binder: 13607:13610 IncRefs 0 refcount change on invalid ref 18432 ret -22 03:34:06 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@can, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000040), 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x10000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000001c0)="c4a3e2fd3c5c4e95f5d40d4d1a8706d72f35339eb10bcc3ffa5118ae938c6ec544f93b2902049170e1bcbb8c8860eaef4c688c7f8a00b6de6b0f0c577ba96ae990e535df0146b65ce5c73c50eef230275106eaf898d970952f1cf60a88cf3eede301f63adf670fadca82a633739f888fe0331efa47145dcebea8d5a8f5cfc2cfb638b1f771bda85caf5660c89bb149405612ae5fbeda7a013e12059b"}, 0x10) fdatasync(r2) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)=ANY=[@ANYBLOB="013138000000001000ab21", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100000000000000000000008e15adecfc04aba1"], 0x48}}, 0x0) recvmmsg(r2, &(0x7f0000000100), 0x2, 0x40, &(0x7f0000001280)={0x0, 0x1c9c380}) 03:34:06 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 476.579980] binder: BINDER_SET_CONTEXT_MGR already set [ 476.592325] binder: 13607:13618 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.600132] binder: 13607:13618 IncRefs 0 refcount change on invalid ref 18432 ret -22 [ 476.613676] binder: 13607:13610 ioctl 40046207 0 returned -16 03:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7a00}], 0x0, 0x0, &(0x7f0000000180)}) [ 476.626221] device lo left promiscuous mode 03:34:06 executing program 6: r0 = socket$inet(0x2b, 0x6, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000180)={@rand_addr=0x3033300, @multicast2, @remote}, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0xb3b, 0x2480) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000580)="32c9b2c7cbe68b50f80ce40da10bbdb5335da4efc2bd68148d11e3e694c865e3a6699340423eecca2e0866aa8e31d2851210303b") recvmmsg(r1, &(0x7f0000001ac0), 0x3c, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5, 0xad) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[], 0x2f8}}, 0x10) 03:34:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3e8]}}, 0x1c) 03:34:06 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x101000, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) ioctl(r0, 0x101, &(0x7f0000000000)="a87e606382eb2728bc1af3e49a4e35b13bd6a4e4ad65e1531c3affe02c87901f2ef187b1d58ed788d3888a665771665cb008e8b67ad235c8a713c0fde1b495569ed2d428b9060f390caa036fee0a17892cffab91d9cabee76b8a237ff7738ef21585843a6cf9ae42d25c8287e8ffb29654a36d31514c6398") [ 476.744210] binder: 13646:13651 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.752032] binder: 13646:13651 IncRefs 0 refcount change on invalid ref 31232 ret -22 [ 476.768891] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x50, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x5, 0x678, [0x0, 0x20000200, 0x20000328, 0x200005a0], 0x0, &(0x7f0000000140), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x1, 0x807, 'ifb0\x00', 'bcsf0\x00', 'ifb0\x00', 'bridge_slave_0\x00', @empty, [0xff, 0x0, 0xff, 0xff], @random="65bb5fccbfe2", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc0, 0xf8}, [@common=@log={'log\x00', 0x28, {{0x7fffffff, "a318ab9635f8fb011e3eda120de84a33dc3022e8a14ab8083df64fa99403", 0x4}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x0, 0x22, 0xc4b8e61d904aa7d5, 'veth1\x00', 'veth1_to_bridge\x00', 'bridge0\x00', 'veth1\x00', @remote, [0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xd8, 0x150, 0x1a0, [@pkttype={'pkttype\x00', 0x8}, @mac={'mac\x00', 0x10, {{@remote, 0x1}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xd4e6, 0xe2, 0x3f, 0x0, 0x0, "76daeb76ed406cbb1fa10073de1434590ba16b148fc04bd1568be9a9eefdde9fd14a98a14387c5e687844530204acb0dec8aaba46368cc3e4097d704e366ca5e"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x77, 'syz1\x00', 0x80000001}}}}, {{{0x11, 0x14, 0xa01, 'tunl0\x00', 'veth0_to_bond\x00', 'bond_slave_0\x00', 'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @random="778cf989b218", [0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@random="e83c15a41e2c", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{{{0x3, 0x0, 0xf6, 'gretap0\x00', 'erspan0\x00', 'eql\x00', 'nr0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={[], 0xd}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xa8, 0xa8, 0xd8, [@mac={'mac\x00', 0x10, {{@remote, 0x1}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}, {{{0x5, 0x2, 0xf7, 'irlan0\x00', 'syzkaller1\x00', 'bridge_slave_1\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa0, 0x1d0}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x18}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:audisp_exec_t:s0\x00'}}}}]}]}, 0x6f0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) [ 476.814552] binder: BINDER_SET_CONTEXT_MGR already set [ 476.830853] binder: 13646:13658 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 476.838738] binder: 13646:13658 IncRefs 0 refcount change on invalid ref 31232 ret -22 [ 476.853150] binder: 13646:13651 ioctl 40046207 0 returned -16 03:34:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0xfdfdffff00000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 476.873992] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffffffffffff]}}, 0x1c) 03:34:06 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xa0d, &(0x7f0000000040)=0x0) io_destroy(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000080)) r3 = semget(0x1, 0x7, 0x80) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x6, 0xffffffffffffffc0, 0x5, 0x8, 0x7fffffff, 0x5, 0x8000, 0x0, 0x2, 0x800]) [ 476.928014] device lo entered promiscuous mode [ 476.944336] device lo left promiscuous mode 03:34:06 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), 0xc) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0x6, 0x5e4d08c1}) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) 03:34:07 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = semget(0x2, 0x6, 0x20) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x81]) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 477.063617] binder: 13681:13686 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.065155] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.100828] binder: BINDER_SET_CONTEXT_MGR already set [ 477.106755] binder: 13681:13698 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.116675] binder: 13681:13686 ioctl 40046207 0 returned -16 [ 477.141330] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:07 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x11, r1) ptrace$peek(0x5, r1, &(0x7f0000001180)) 03:34:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) mlockall(0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x5000) 03:34:07 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f000300", 0x101}) 03:34:07 executing program 4: init_module(&(0x7f0000000000)='user\x00', 0x5, &(0x7f0000000040)='\\\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000a24000)={@dev, @multicast1, 0x0, 0x3ffffffffffffdf8}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x801, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000000c0)={0x40, 0x419}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x6) 03:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x48000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:07 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 477.218719] device lo entered promiscuous mode 03:34:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x8dffffff]}}, 0x1c) [ 477.265905] binder: 13710:13711 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.273722] binder: 13710:13711 IncRefs 0 refcount change on invalid ref 1207959552 ret -22 [ 477.292178] binder: BINDER_SET_CONTEXT_MGR already set 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000001940)={[{@wsync='wsync'}]}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x400000) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) [ 477.320181] binder: 13710:13711 ioctl 40046207 0 returned -16 [ 477.326252] Unknown ioctl 1074296581 [ 477.353181] Unknown ioctl 21530 [ 477.360127] device lo left promiscuous mode 03:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x60000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 477.380278] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.394569] Unknown ioctl 21530 [ 477.395426] Unknown ioctl 1074296581 03:34:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001d00fdf0330000000000000067000000"], 0x14}}, 0x0) [ 477.422555] binder: 13745:13746 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.430446] binder: 13745:13746 IncRefs 0 refcount change on invalid ref 1610612736 ret -22 [ 477.445806] tls_set_device_offload_rx: netdev lo with no TLS offload [ 477.455815] binder: BINDER_SET_CONTEXT_MGR already set [ 477.461648] binder: 13745:13746 ioctl 40046207 0 returned -16 03:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4c}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x900]}}, 0x1c) [ 477.467928] binder: 13745:13755 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.475752] binder: 13745:13755 IncRefs 0 refcount change on invalid ref 1610612736 ret -22 03:34:07 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000004, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYPTR64], @ANYRES16=r2, @ANYBLOB="702f81aad0b1216235a2677b3477ddb4c6357d45d5d2930c388fa2682c80685397fb85693bfab56f8af3239de1025a545a76712832c8bcf3b151426a6f801513d1f31e209aa6d842ad603cfcbecef93604eb3b158f152120eace05e6767d4110bc12d1e718518019ced7009458d816c385543fc870c0f04cef412691d781d3461869da2c8f0257e81d10b10b200dbace02269bcde6f341b5e1e385c52c7a0d40083bc7daa2ae60e500447bd082a90f4b3027d0aae5cd32e8ce96aa722ac431b41a565db1d49e416a092329dbf304d4818b7337eee318034b6d7ea870a8c77b32a7", @ANYRES32, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000380)=ANY=[], @ANYRESDEC=r1, @ANYRES32=0x0], @ANYPTR64, @ANYRES64=r3, @ANYRESOCT=r3, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES64=0x0], @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYPTR]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x48b]}) [ 477.548137] XFS (loop2): Invalid superblock magic number [ 477.569152] device lo entered promiscuous mode 03:34:07 executing program 0: unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mq_notify(r0, &(0x7f0000000040)={0x20000000, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000080)}}) 03:34:07 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0xfffffe7d) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000200)=""/85) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7f, 0x8800, 0x8, 0x9, 0x1, 0x3, 0xfffffffffffffff7, 0x3, 0x7, 0xff, 0xffffffffffff0000, 0x2, 0x6e6, 0x7f, 0x5, 0x4, 0x80, 0x0, 0x7, 0xfffffffffffffff8, 0x100, 0xc6d3, 0x3505, 0x0, 0x200, 0x6, 0x6, 0x1, 0x4, 0x9, 0x2, 0x0, 0x1, 0x7, @perf_bp={&(0x7f00000002c0), 0x2}, 0x1000, 0x2, 0xea4, 0x6, 0x7, 0x7}, r2, 0xd, r1, 0x8) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8, 0x10000) write$P9_RAUTH(r3, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x89, 0x1, 0x6}}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000480)={0xbba0, 0x1, 0xbf, &(0x7f00000003c0)="848193954e2af9f2f0c8dd475ad9a2697c052f22128f25e5c8dfea414fdfef65ef5c58c5e374d9122c0c9a3a0f46f63fa0895abbc0c94ebdf7903afac2215310c591e5e1ebd0e4fcd063f43e5040d183957ced2fe5f513696e927031abab66a663d0d4d54842eaac21065a781bd645c1cbf24f06ebcd8c685fbc33e3948705e362860feea8d11e05ce8d3765a93768d1ae7f0a3e978dcf7a5601bf9b12ff03f54260fc5ceb764f86ca27a3656ba6ec8ff8251760ca21c979f8798680ab0bb6"}) bind$alg(r4, &(0x7f00000004c0)={0x26, "736b636970686572fffffffe00", 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) sendto$inet6(r0, &(0x7f0000000000)="cb9103b864351f7ac5d3ee6e280e91ab2d78006482f118093678a7164ef4716be083f8aebd4ad2c05394425fbb9e7ff839d83b633751bf6fa01191e9d0bfa24c62fb82bdc731e812d068cd4323908c45d6b6b70c0f4c0be47347ba9b80e47807c34c5baa79cf8b5a93d91c7ad298ab222f4cf33cc5f1ec519398d53b21799743ddd7dd41a79481771fe87b1f957846db478ba8c7f54edffa4a62af577e895259ce182bcf38b448ee2c084b7a454e3ca8eacb4370bd64e288294d5b9bfec619fe2782c57efb7d442a932fdecd3137bb0d4c50d5144c91735a", 0xd8, 0x4040, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) 03:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00fe8000", 0x101}) [ 477.620046] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:07 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2]}}, 0x1c) [ 477.712737] binder: 13768:13785 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.720570] binder: 13768:13785 IncRefs 0 refcount change on invalid ref 76 ret -22 [ 477.750337] device lo left promiscuous mode 03:34:07 executing program 0: unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mq_notify(r0, &(0x7f0000000040)={0x20000000, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000080)}}) 03:34:07 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) listen(r0, 0xfff) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 477.830377] binder: BINDER_SET_CONTEXT_MGR already set [ 477.840761] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6c}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) bind$rds(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b0000000001"]) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x200000, 0x0) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) [ 477.874896] binder: 13768:13785 ioctl 40046207 0 returned -16 03:34:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000280)="8b63a7a958336f18552124ac70cf70393aeec9d6115d0cfd896bc8f0a2e12b760589b49471e6357490f22691532dac94165b6f3621ff7710b826237f47e0ebf8140add083d3dd982941c59ca4ea33a272938b250cadfb14c3e118bb78b40390ec3b349c5b0f3f4aac7243cd488ca36793618633d02e44aaee11af3be9ac4720ca2df857959ab65510b90f6ac05f3eaf32db56d44d6", 0x95, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'vcan0\x00', 0xea92}) r1 = accept(r0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x589, 0x800) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}}, 0x4000) 03:34:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x7]}}, 0x1c) [ 477.979546] tls_set_device_offload_rx: netdev lo with no TLS offload [ 477.988405] binder: 13836:13839 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 477.996301] binder: 13836:13839 IncRefs 0 refcount change on invalid ref 108 ret -22 03:34:08 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000300000005ce36b6897f65a350000029078ac2314bbac14140016ff907800000000450000000000000000000000"], &(0x7f0000000000)) [ 478.045480] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.058730] binder: BINDER_SET_CONTEXT_MGR already set [ 478.064474] binder: 13836:13839 ioctl 40046207 0 returned -16 [ 478.064966] binder: 13836:13850 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.078211] binder: 13836:13850 IncRefs 0 refcount change on invalid ref 108 ret -22 [ 478.091134] device lo entered promiscuous mode 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x400, 0x10000) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000400)={0x10, 0x0, [0x2c]}) 03:34:08 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/174, 0xae}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/68, 0x44}], 0x6, &(0x7f00000005c0)=""/10, 0xa, 0x5}, 0x7ff}, {{&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/128, 0x80}], 0x1, 0x0, 0x0, 0x81}, 0x8001}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/60, 0x3c}, {&(0x7f00000017c0)=""/209, 0xd1}, {&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x5, &(0x7f0000001b80)=""/184, 0xb8, 0x9}, 0x1}, {{&(0x7f0000001c40)=@ax25, 0x80, &(0x7f0000003180)=[{&(0x7f0000001cc0)=""/91, 0x5b}, {&(0x7f0000001a80)=""/12, 0xc}, {&(0x7f0000001d40)=""/70, 0x46}, {&(0x7f0000001dc0)=""/205, 0xcd}, {&(0x7f0000001ec0)=""/112, 0x70}, {&(0x7f0000001f40)=""/67, 0x43}, {&(0x7f0000001fc0)=""/92, 0x5c}, {&(0x7f0000002040)=""/88, 0x58}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/168, 0xa8}], 0xa, &(0x7f0000003240)=""/81, 0x51, 0x7fffffff}, 0x2}, {{&(0x7f00000032c0)=@nfc, 0x80, &(0x7f0000003840)=[{&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/230, 0xe6}, {&(0x7f00000034c0)=""/54, 0x36}, {&(0x7f0000003500)=""/125, 0x7d}, {&(0x7f0000003580)=""/191, 0xbf}, {&(0x7f0000003640)=""/248, 0xf8}, {&(0x7f0000003740)=""/196, 0xc4}], 0x7, 0x0, 0x0, 0xf336}, 0x10000}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000003940), 0x0, &(0x7f0000003980)=""/26, 0x1a, 0x5}, 0x4}], 0x6, 0x10000, &(0x7f0000003b40)={0x0, 0x1c9c380}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000003b80)="0c0ef6dff80c9cf9a5d737d3326a413ed540d76b2836c0ee72b9946fdcaf890cd80daf9e1b351ac96eb325d26b66ce16f80eb8b2c954a4129fb6cf82abe4a9c2e93325a5ae3194c95c0a615204512be891af8833206de4a05148e15e9cdcf087bc6bdab29fd3888922229af508395a58873ebc5902c3767d87660025674ed2dc430712ce8594345ef08a0017a346c84b9725c47dc71c8e5de46432746f02cb3012d2f9f792ab139bad6ed543edad4ac5a095caed97ce25ed416217f441eab5e007246c0f9111b80c06d18a0a52f4d9e824752801a719a83caf089fa5e4c5a432e96f4a6700209e4438558324c9960cf50b0642a5d992a88e60c79a97c10322914910d5579475781455bba8782d6579454f81c5c45996f4616a05dca5b4450d9a3f6a78b47b5c2dadab75fa16f43d477775703bfd95204c138ac67ea9e088c15201f879004b80a1e9441bff9bf505278fa773fe1aac6f2155a628ec1d25dd92daf83f6868545932aa4b5fa1bde4d33173640600ac44d19225a47d96ce4368143f5ffc4b97a5133813c0131839b3b112a8690e1779a7e84618ea7836febcafa5ec0d5cf8eb883e177104ec1a2d5ebb8b6591021dbff275595413a5954c9daeec4e0ade9ed4bc849189efbd792bd49767a1199ccfec0f74ef7e04237a0d9bf4c29abc49f5b8858c558e0ec1f5b649ec1b5c37fd67a745eb9235769794cb8e3b1b67c11871893aa7a4191da334f6751a37be73f24a75a845cb42b6a993cb1d4de2dbae54472ad73fa72b2ce8319b39ac22d2e0377c8e3a366782853e65c66402dec3969b525917316c8f29e71b881d2fff75a5d1a5efc6c881b8248cf717b1a274349e9e53f7264868c62dddfc1e88671b671acfaa909f1547a463e0cf7d6d6ddf098014a51ce15e9b01d9ca4f0235117f0c4e17af14ec4925d8ca9095c41e5c73fcdc8eb4c5aa3cb2a2234bca3a4fe797369c968f19586dde68b9e64bb70a4f4347d16bb5bc937aff7c77ae9b9e85f807748dc637a098330118eff0e2e179a773aba92c6a558143d2df09053a1e5363405abf80c7bdd513ea3af3403565b8151c2e2f30f4f952588640a34cdb8279d800bbfd8c0609575f94e67b359875e02afb3ee3df01dc866052d11341b4e6bff7350650d756ee447f7c5734cb8e1660dede0c412b9f7dafd97ba0d708632e5d70f7e9cad8412bebc0bfcc57c37fdc8b40c149867b283a643fddd774cd04247d2be7c3b56462ac8d1baad3cc0982b06495015bd2938326ecccc2f31a5df6c4bbb4e45579bb113a3d2e7226c85873308af6648005c718fa958d326af4c92b8ac946eb1b70daa86035cc9258cb0f68f018e1c18f7605fee3728b172ac85aa42f8a3bc2a74ed218f98e25a0a4f90e7cde079a386670d85edcb4d146c22b082995928b4fdcb9c1a5123ec75cbd583f03f7cdf9504db6b86b4ffbec85ee270e6d9420447aae314df0e76facad9ae53998783165270b999b61c28de9e984a3f5606c0c48cc14dbb3cc115075df57f58e4e4fda8291f1504590db7b990d8a182a81d7027c3b1609a9d2e468420ef1376cd4f16978d8b9023c617cd390d9dd708bb9f4f6c3fe353cd0f0d17f308194810798227160069618fc8f39eb3546d6bcfea4bc5d8668e2934f22be5c544f47317f235bc699787af1cb15296ba9bd9b0ee3e091608a6b0952aab6dfc2174657f6ebe1dc2c3d7a8abac3d1cfa99e93bf35c72df0573449dc5f21959df8ba307a0b98d8119d6a4443bbf3eef9582927796e4910b2ef86a6867e1fed4a26d9a91152c1cd48f206882b6b6e86504ef06a8008237a53df6430ede346d2c4bcda553ed572c578e3638b4c1ae70983626f28244980d81e7138d9b4d1d13cf9f68f01d97485d6da1380f3764045094d542355e85c30aca1b31adc5172170265ef65d301cb4e8f39ed1fab6b47fea2253cef82b23e12ef4dca6a33d6450946b9dc6776551309019a1ff201e2143dad7731d10295d535ed5819a767566d6eebd3b8678c7ba14a14059a3c93aa0e32ccd197d7f4275095ae81ccbe83435333f701e92b76145e8dc06cd121d3f2847ae41b1ea0eeba24fb105f08140130ee1c6f5feb537260c8b778928659901b6fe347826abbae4ad8015c93c682bfbeffcd2e2c28ca50efd1e2799ba85307ab4d961982d759449edb7d4b978ede22f80514cebc1de149368f71139235a0f4a6f2e22a4550d4051e9979a250b3a60bda1e32e198a902132232c65fdfb8a99f4a8c30aef0ca3c512de19e1b6965635cad37e6574715b1e0ae275f27799b0367930ade67fe517453fa0f39e3af7d67cdddb838e512d2ea8967ecd78b20b3f175cd71a6ccd4a3c5ec1a4a73750ee2ec06dd96e04ffeec1028f7232484c8daab98b79cfd49666cc6f2a5a522221782d5539c53e1173513a6c92b93248617f9a4778680b5afca92c308e6a01781b72fd0560fc2754c644ca0346fc1bd1d81bf0eab192d7d565a9431292e5e6d74d619ee3c236a91a2a3d7b903dfcafb5d232d3ffdb18914f699d5e6655ed3b273d925145d59560476dc9a1eb13a89bc5a78d50968dcbbd7e3775ab0a07efebd616bc67e7d54c7888023ff804e10b6718b40baf7e9c6cd0d2b39c2d17c816b42784e665e2f1d697a7ad5ca744ea4eeafe70e6fee8ec81bbe36a6378031e9d1a1b306decbf14bd9dca224d9a6b3296dd5b1c71309b4e8c4c2bb4881fa0ed3e8c5f5fc598ca5479fae9fc263a59e609f214d898ed66247229f2ea42142f88427cfc637e2b7fd0bcf9f6339cb40c8bdf4345c0f362d419a9af60754249659073e837251822d7bbc8fc66f8b3208181bf0a1b2a1a931b36b4d70ec7e364e350aa5af1636292765188818500fc221acca7872730e13ac984a5637633a7bcbe05375787c29e1b08251e48116dfc44cfbc4eb931f45fbf906e2d43b1f947d88d8d635991c638dd63956f82a36cecacc106936764fe8c5579aec380e0beadeadcb2612130551c27ab5e893fc39540412c04e64e4dd20a26d0a7cb483fc522e0e1229223a4675ec91e694dce97a538781b6c15ae434e8a7d371e32e0321f3f8dfc44ca20f26646d1ee3d31aa55a654a941d409947a5aea5f8d732774d9f6affb5d280ffbb8ab3eceb839a2d7ae6435502f020e44e49613b4a4a07e9379db4ae1f3bd7f7d7e4d977040af9d28008d93eaefe46dec9a32542f8faec635b9a12511e22638f66af948daf0e494b9c6ed98e5e45592e2977f0e1c1df0216d27ebcd5b4c752ed9a8af5e46648ec2c6d6c77e044f77478fc9076ce59360206934ba8a3cd339bdc6d4a4f155208c958209f6b35b1f89a93521bdb7138f066d34f85cb00f4fb6fd7aa4d69d6017a057edab2e2a3e18d95226f373290c02c3ffd8a950f3a6a709301d7be033400c661812a609670df499ce67db21b7f546ea16bc061d50428ffb47ebb50fb662428396cae26217347ef7bbe2d4fe15c57e5b1e046df1c36c716888311960b0dd51640acf22269df4d59c12fe6c9faa17bb39f5864211ec487ebc2c29855282c2c9523e48c5b775b6148a8ada89ef7e22beccfbb8ec889d44c81e60bd4c6fdb2e8409a9b031dfdb7ef7fc284ddef3e6af0f731e97a41901c87e36c28f4615aa8decdaea1790b4afd9d72bb8649a9c0222501e3e233c2900d3a4c35f7eb4d12a34916c6c9761f7db0bbe8233c8e0ef381c8bd5639459ed6b96abb9d4aa9894402d751787e235e47ecadbe73e14ab960156f4cd13ce2142dae8435030e9f9818e3131110c0136a5a5b362f5c27211cb9fc3be39b9ca1bfdd1f48b57f3602e040f2b8aa66cca28f2ba21492352bcea3155201116048789905cf3f6e028fc47f125c124079ad1a9ae42ef7167b6c613239781752cbc4a9445178f1777bfb755cb58b880f9089d3b8a99f7a4846a7f680fcfb9e10c327067f535620aeebb8d30d0c15c6fe077515f4121ef18d1a2eb0826cf6891ab8e73a6d1cb38a707e7e0f90dc29ee8a24accfbd96930ca8c8bb72559da4f2e6b6e53e2eba69387569936a2221c52d1fd463eb0c003f0b802bff9b108f0b9e3579226388709cd31f7789ec229ca38f1209f3a81e2d34ffc4eac7c19a6b06e2d9674afde033fcb3ffab0e6b3f9ec65e5b783fa959f572a5f8aeff9e1566721a1618a30cbc0d288ed10bc97270320c04043bbb3c0cf48e18e249d252de5278e31e7db6516e901f9d8369e079377a16cc06903afa5a3de65dd49071c6f710d288523d034329d54f9f8b17522b64673a3f79d3f62440b431c18e5df8ae91db09f92a7b50eaa8bcd19f2fc702f7f1e72123d87d724d27f39a469c6d1807b46a63fb77df4d55312ada3579102cc4bb8f410dcac7aa0aa44d6a0c4b9f6547093258dd8de389cdee811e7fce6a60109a82ca3a16ca4341b68a1bb2e123113162054cb2fdda622b74e04cc0f18c00c598c3774b38d17c3f6140601b96a455792b8d8c9ac1fb8334383ab5186bedde291c4249d3907be15647ddd16e6f86f4b82c62c4c7413eac013a662fbfdbef994cb1b9af88e0df8ec3896dc910b10e99d865f1faca5b3e815a13c65f4ab62df35b97e129c95b9da114995a3ede1165b39ad94dea639e42724e2808c11c60e3300adfda23e49813516d9e850b7efbb2386fe460a21dda1674b50160fce740c460d8ee8394b460f61ee0164ad164d55b96a60c43e8328320f50b52f73208482b319819107ca47425f9e83a6021f0b0e6725efe34a793d88e71ee5c1c3fe1884715c2fd95ba686e16b741768efc66c57561e00d9621dbfe3ed0c2940caaca9d99f61f3e78cb4bb973ef573e93d1dadb203c82318f4d9203200bea5c14cbd19a14b3e556547c17bf6dca41cbcb475de0265f34c6c035308a76ba0f10b01647d702f117d9f28fe39ca429b8017971b0eadb8ba9dcbc57e502034317342540e8883bfbbc7409810dd44ee69f8747c623347def8dc69dc30331a69a8148950e3d8a20d1f338a0ab45dcddebcb449aaeb9ca5f81467151f43afc3c1f0d7bc613dd8ac524a9a2f165a759965381aa8f78df3012163e2a6766b33216488c7036e755cdb5d4ce202310eec3be1b4f4839540799baf228a8ec99cfe1776823bd8a00ac080311d6c538742067ceb2b1a28dddcd3e80f5a79e078fe5e4bf015ffe482d2c2ec76d52c82eb9f958708cf8b52f524738b6a0ab89a273432a06c8218118c94beb08e4f812739c175aad2aaf37c6211770005cbd18ae320afb493bb9c3e94a16c84137f9b691fb4cfacdb870992c62f76ae934531d26a48dbdfecf9e994e3a633ceaa0246d540890b77e42a5589541d68dddb4264a01a4420857831eda3c60311012a60bd01071547e12fde15f19037ec47fd8fe55fc68ec8488de263174598aa963ac33ff21dad51a8bffa97a44d7c5ec239e8a9a9dbbc0e5daf0664809da2e0d246ead205431c250d32be1e7ae14f9bb814fad1b0a87af31350d43580a56b4eacac5d203ccd031e233e506a8c908fc5f4073f63768554e37db84b3129f741e929e59e42a33bbf0db029f17aad0ac0287c46d7996b0613d1a4d7cdfefe8389a73694ebabc0646e86824ef0382a3097a315d66e32cb90675a6cb9c86cc76a8a95e86c35952d316a020b28bb247c0500f8b29224490d76cf98acb904c7c44f70091600872cce8715d00ad560d326a281683786dd2b3bae60cb0c3699fba2366dbeb40c30a7bc61864b0d3994eea229a415870476dcc0640fccb38220d927560db80b596b2f0e4e00491ad41e09fa3244465350d88f05707dcd85d", 0x1000, 0x5, &(0x7f0000003940)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:08 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x68000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 478.119704] device lo left promiscuous mode 03:34:08 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0xc0200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="40acdeba5406000000000000000000000000e899000000000000000020000000"]) prctl$void(0x8000000000001b) 03:34:08 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xf401000000000000]}}, 0x1c) [ 478.231748] binder: 13866:13870 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.239564] binder: 13866:13870 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 [ 478.283711] binder: BINDER_SET_CONTEXT_MGR already set [ 478.291367] binder: 13866:13881 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.297312] binder: 13866:13870 ioctl 40046207 0 returned -16 [ 478.299294] binder: 13866:13881 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 [ 478.307374] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.331335] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000000000000002c900", 0x101}) 03:34:08 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0x81}) 03:34:08 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30}, 0x30) 03:34:08 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:08 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r0, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x80) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) [ 478.395093] device lo entered promiscuous mode 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6000}], 0x0, 0x0, &(0x7f0000000180)}) [ 478.446293] binder: 13891:13893 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.454291] binder: 13891:13893 IncRefs 0 refcount change on invalid ref 24576 ret -22 [ 478.474895] binder: BINDER_SET_CONTEXT_MGR already set 03:34:08 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0xd0b7a20e2b82d5d5, &(0x7f00000019c0)}, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0xc, 0x6d, 0x2, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000300)={r2, 0x7}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890c, &(0x7f0000000000)) 03:34:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000080)="25a8255eaa116edc632cfb000b212dc4cd9dc81580936c20c794c0563b41099fa4c85345e84e50be2d8d8e1ea2895b3f25b41adc8d74159bde424b484ec8002bcaa141f77ac36ef7d0cb3e01a39f5b52fe4dfc3bb5b5d45f2f9f6c06d68b821ab5f60d571bc7381f84027e4994e378b883f1dc7891b9336acc18c8ab1c6203e25eb0dbd6", 0x84) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r2, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff38, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="1f788ce6d600dde48f591bd9ac827b6816bcd269da5147fa6c8c05155a3279eeea8e3e087611e8fcbf6acafcbda9fb767f9d5ba7e833f907e13fc8f93479cf6d378aac24e9d4bcd9ca44c06b9a9592f1e412bd0fa76a1889be7d2b47f75dd39c", 0x60}], 0x20, &(0x7f00000003c0)={[{@noinline_data='noinline_data'}, {@resgid={'resgid', 0x3d, r4}}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x3}}, {@test_dummy_encryption='test_dummy_encryption'}, {@inline_xattr='inline_xattr'}]}) socket(0xa, 0x1, 0x0) [ 478.497112] binder: 13891:13893 ioctl 40046207 0 returned -16 [ 478.499264] binder: 13891:13899 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.510901] binder: 13891:13899 IncRefs 0 refcount change on invalid ref 24576 ret -22 [ 478.533676] device lo left promiscuous mode 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000140)='/dev/rtc0\x00', 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x7f) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000940)={0x5, 0xf5f, &(0x7f0000000840)="c47a6b913e01f3685f7343d8545277b4b99c6c6230b37259c73610d0377d9fba4f0c989a147c4aac867836fef9760d0bf29890d66e8d7cfbdf2ea6da566aa4b81b0c0d80dffa9c0ae3e20036dbbec6c70520f0a25468bd364e8eaaa2bebe2843fd4072db7b90362289199e2a77c7b5e4b288ba357a0cc6d36002a8a6cccd25653b9f9327cc6b91f0807defbcbe940dc64c85db9f7c44566b696e4e66ea6a28b91638ac76c10a2e20fd2a29", &(0x7f0000000900), 0xab}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x401, 'syz0\x00', 0x4}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20900, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000002000000000000000600000000000000fc0c00000000000079ffffffffffffff01000001000000000000000000d300000000000000000000000000000000000000000000007c42000000000001000000000000000000000100000000000000030909000000000000000000000000000000000000143affecc9dcf66f0000000000000000000000"]) restart_syscall() ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000001c0)=ANY=[@ANYBLOB="9900000000000000000000000000000000e1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200f222ac906aee415e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) ioctl$VHOST_GET_VRING_BASE(r1, 0x8008af00, &(0x7f0000000040)) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x4829, 0x7, &(0x7f0000000740)=[{&(0x7f0000000380)="ac6de7405c9a6f1909593d36724d3df93131172c92abe2a6e84baef1b749ee771ddc5125be5b6a857c7f38cd478f821dec1021f180dc82a206a0c33b298ad73f75469fca2a8ba590150f84a43a7207f810e4a24d679d15ad06adec79cbda550f5a8300279379dbefd66796c06473810e22fe9a5c93aef551cd595b94b941e353d419e3fff4192279ab1610ca80b5f0f4c19b7b6123a6c61d916037994e3775b4d3341fae5da1b7748584045341a3e3595ee64b6231", 0xb5, 0x8}, {&(0x7f0000000440)="f81bbbe6773083223bcc4f8654f9489a0d64e518535e3ad371b6112752abee7f707362b190b5dc431208c0b182c12ea9bf93a114ae295dca832100e36ef5c742cf11926ad9e4aad8c15cac77680b0e58f0145c30ab316959b129e1e196a7254985ba8619", 0x64, 0xffff}, {&(0x7f00000004c0)="6857236282a8e0dba9be7bd394fd8f2ed7ccaf596ecf8d494e0cdced867e89", 0x1f, 0xfffffffffffffffd}, {&(0x7f0000000500)="8bc5b4f8cbe40d12ddfcd404c4eb4a066c227ef1a5f5", 0x16, 0x401}, {&(0x7f0000000540)="16075d8d1c856ea2f63c9d90e5ed70f173b4b2d67e9ce5624bd86b18cd4cd604c6ac7435965d501975b1946654b5f678e068fbc0a673fc73f29208cd89c8ba4c228a6e35a0ef1754bf77206b85cf36a28195ae3c8738faafab9a8bd1413a512c51cba8ff1b7943a856617598a72673887e7ac22ac59fd96866cf6610175799924f40c46612da1af8f91d5b3fdb0ef99907e1210cabf29fc1d33d9ac344ef595bf8d2253bde0d77a60941e117889d703ad537b93a60400b939a5e268b107a0599a84108dbf92b7b733b2dace5ab", 0xcd, 0x5}, {&(0x7f0000000640)="e32214777b09ff730b6f99efb4359a460cf87ba7608ad7259e9466ce14e7cd95407222df0c40a882f6052e42fa5e98446553af09d18740995182694a7c855ff6d5abf9d6946151a6230d64253d390336cfc38fbed7e2285a0e1e6e10112e", 0x5e, 0x40}, {&(0x7f00000006c0)="0156257b63399ab35370f4d08b1549da90a7b5d436b53418fce07e9024ef3ee739531041ed66f706f417bd5e85d357435a90dc9f9b95e5e592aefcd3355c439c6f84ee", 0x43, 0x8}], 0x200022, &(0x7f0000000800)={[{@loccookie='loccookie'}, {@norecovery='norecovery'}]}) 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6800}], 0x0, 0x0, &(0x7f0000000180)}) [ 478.654167] binder: 13925:13932 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.662100] binder: 13925:13932 IncRefs 0 refcount change on invalid ref 26624 ret -22 [ 478.672050] binder: BINDER_SET_CONTEXT_MGR already set [ 478.693826] binder: 13925:13933 IncRefs 0 refcount change on invalid ref 4 ret -22 03:34:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x6000000000000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 478.701690] binder: 13925:13933 IncRefs 0 refcount change on invalid ref 26624 ret -22 [ 478.710546] binder: 13925:13932 ioctl 40046207 0 returned -16 [ 478.765779] device lo entered promiscuous mode [ 478.784998] device lo left promiscuous mode [ 478.851145] binder: 13940:13946 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 478.953993] device lo entered promiscuous mode 03:34:08 executing program 6: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000003080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000001fc0)={0x45, 0x3, 0x0, {0x0, 0x24, 0x0, 'md5sum{#keyringcgroup}selinux+vmnet1'}}, 0x45) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80000, &(0x7f0000001ec0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783003000000000000002c70713d3078303030303030303030303030666630312c0000000000000000afa902475fecfc1165356705813108fbc860511ffb8c5a7b728aa6d02d4052e2f439ce4651dfb8ca43e26a9755a1414feb4f1ec892cd703f4b34d7decc040f4d1e9cadee5599b33a61696415a474385b05d4e305d8d1f592a871ac21cd9489097fb76b50e3e9467347f633290ddd485f0a63aaac7f3eb33ee9460a0ceae7da5c727ed4932ac5b3ba9252c3ec36fe2c8919ab1da94b1951651b686a01"]) syz_mount_image$xfs(&(0x7f00000005c0)='xfs\x00', &(0x7f0000001800)='./file0\x00', 0x8001, 0x9, &(0x7f0000001d80)=[{&(0x7f0000001840)="8d2309d9fb670209383438a75fcb49137ab9016b0e2e803aabe87fe9de2b9b36884a216ae72ddd0479454d2eadd4357d129254cc105994cc77b7ac75227ca120523adc6c57872a68b3fdce0d22f91b7d1649e872f397a9f197f2413015e730eb58eca5aa8d904d3ee374770fb7677b1ed0ea507b78d8a8c7c571c5addbf005a0309b9603257f80631685cf98fd8e5bf6a4d6da4c82d7c32836db5de9c2679b15", 0xa0, 0x8}, {&(0x7f0000001900)="b48dcba72cc35dc3b8d8aec065f32d7ebc374d44bb9c831611ea335bfbd64755b37b2d24f8aa81b9541b18a1a17699c0dd1d3be3283da9c5c4df632646acec99b00ba4095a83da7cf9", 0x3d9, 0x1ff}, {&(0x7f0000001980)="5d5d9f4a5600a44bde35eb7d60b9ca8fe4a3f13acced593341800a3d678841a080201ae5a73fd1b96fc04dfda9fb7615edb07b13945f0d2f1d25f97955d44a705b8bf131130f93846e86229b04547d98d3d03773a8f4f28d239e385ec343426454b857688b5134d906faac7438ad2897e824513307a9feb6e33395ada0ffff67c1313eaa207a4e92095b6d13c6c23bc84df1423238661837a05fcfcc318a40b8be85048c6238384268c2", 0xaa, 0x4}, {&(0x7f0000001a40)="c875f3bf00cc153bf9abff5fbdbfd72b5d15a86413fe2859ca9a8303857c9504ea07a7154bc8852cc71842b1f6754139e571a7b56fa7504b3c0f6eeb0460c9d2ec49e2134248", 0x46, 0xb6e5}, {&(0x7f0000001b00)="97a9e988e94c7698548c917c5fc60f93e6d11e953f973eab89adbc4c5f203230e4b57f5fe391842375a188896946ff176f9afcada60c369e4afacc424833bdfc158c5dee3d94fa6aa71e5d33a93a1466350e6762f17a605ce5eb10e275cbb01286c06d9293a43b921a46a7115a2b464c9c88f0ffc8579a4853", 0x79, 0x2}, {&(0x7f0000001b80)="6342d0a43a123244343f2d540095cedd04e0067f6d58f5afcba59baf39241f56073f049db755b507388ada3c3b", 0x2d}, {&(0x7f0000001bc0)="af5c53b558b1ab3ec58b629fdebbb623d5e7", 0x12, 0x1}, {&(0x7f0000001c00)="ec4d0c160ed18db81b7a7a4629b4ebfe7c5d245dca5ccd55f03bce255d63ae46d676f5a5506a4040b2fd0347ef13e9bb6edb24f109c8a6ccd5aae3f093f7ba95542836ea443ed5ace5ac054f4714f184aade8346e02b8dbb1955a829dfe4a99394b5d4ad5d08ae29e19de6a03b1643fe222a241c5353c239566cd016027141792fe1e3c9a01ee7e1c9ba8e67a752e68acf24e471c3d458be6295c63e92d168719b405b95b577fa3a7f", 0xa9, 0x10001}, {&(0x7f0000001cc0)="9bcbc66db76e973e99100a08a0bda513f97c1b13bee4399a1f61615938a6a9d5e03e398fd137927cec791e52c836b48da1b829d8777845ab47422bd6c239ff7f671d0962c424df64e4355ab00526e4ecee234ac42feebeccd39ee0332a94f1a9ecb5cd484d7bad326a0d83a196c8b1c1b725714e0d8f06bb08736e852d2fdfd1172eb42a54f7a378eb406c09bbe5dd741d22ec67fc88a698ebe6", 0x9a, 0xf89}], 0x8, &(0x7f0000001e80)) sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="e79c0fafe58a5d2e438a7fa531a9dd844c91e6ee07", 0x15}, {&(0x7f0000000400)="104d92257ab85b938e9da79f24fc359dc51943efd2556592f7a755d5285fd148ad8d8250117e42332c1ba0da6e43597d3f14a944e72a542d6161e1b8fa60221189fa75ec7ed7f87cea724ad1c46a17c4467ccf8b2fb6320c92153f2c9c64c8cfd726fbb5131e68717f454fd241bada73a166db3bd7dc47fddcb9aed014adec8c5d37343862829069fdfec7533bca83", 0x8f}, {&(0x7f00000004c0)="3af56dcac5b509b3d894719d03614bda2ed906602f06597bdcf8e7bf5b1b03fac91092ba3eb40e2a14395eb2e793ea54b50e403e2153078345bd37d77566cdb48c7a74b01ef28bca84b6b4d5eb6b4333c537916e84bf9f1058fdcd20586daabca4a48293b6600f84b2a35df489d5f0a5381db98cca9f57fdd97d5437c1320576bf628be0fc0809af992457d15a0978f6cf6ff8da9c1a3795c37787b75b45d7f177957eaf52f1396a9471ef114ac80c8fdf89c8d686843958951cd294", 0xbc}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000180)="a96b972b8d3c9d297547c3f0a5297cc172b83c479abf9e309b871b383e21ee07939f3ab40ccb27fb1a6c2b6f044cbce3a3e252d35e95", 0x36}, {&(0x7f0000001740)="b58762e1a888ddbde63bca9511c2d443208867862dd05ad0902b0216b52d0e55fa9ffae431f67a9076fdce92e8f3564a63ea2f110f2ba72f1a0b31d665d2fab997d56fe0e79d457f8ec99c1b5a1e54d1979973183b74c1f6f4403e073dcf8661e2c0786554d1db6ea9c597c94260077f2bdf76d5cf1adb92c065f7cd908b0cf54a89c286ff9eac7329ff9a5d7700383930", 0x91}], 0x7}, 0x8000) 03:34:08 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xc000000d, 0x8, 0x1ff, 0xfff}, {0xa, 0x1f, 0x7, 0x9, 0x9}, {0x40000000, 0xfffffffffffffffe, 0x7ff, 0x20, 0x3}, {0x2, 0x9, 0xffffffffffff0000, 0x5, 0x7fff}]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000080)="040100000080000000000900ffb25bc202938207d9032350", 0x18, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x8000000000005, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:34:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0xfffffffffffffffc, 0x20000102b, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x12, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000000004000003000000950004000000004016ef5cad9a93a3c42008bdc0abb335a9b63a72b80caf53b7e4d484495eb40aa2d66a05fbf017df71f42f53d244018300071c7b0afdd41c7bd137bef9885a918202b2b11702586c3aad1de586c99eef4808eb9ad6ad309cdd892a324b35f6da92273721a8d79e23ef18dce2888e25181bca478abc91cc3988ceac150e7222564092d34a56513c"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffe, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x8}, 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x1, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000004c0)={0x1000, &(0x7f0000000440), 0x2, r1, 0x4}) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x84, [], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=""/132}, &(0x7f00000003c0)=0x78) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @local, 0x9}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r3, @in6={{0xa, 0x4e22, 0x0, @empty, 0x2}}}, &(0x7f0000000680)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) [ 479.061765] tls_set_device_offload_rx: netdev lo with no TLS offload [ 479.093591] XFS (loop6): Invalid superblock magic number 03:34:09 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x700000000000000]}}, 0x1c) 03:34:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x4, @mcast1}, 0x0, [0x8001]}, 0x5c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0xffffff7f00000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\x00p\x00', 0x101}) 03:34:09 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x209e20, 0x8000000001, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/29}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x8, 0xac000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'team_slave_0\x00'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x9) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x60ad, @ipv4={[], [], @loopback}, 0xbe}, @in={0x2, 0x4e20}]}, &(0x7f0000000280)=0x10) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7fff) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000002c0)=""/242) 03:34:09 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="e923a98462269adec082d70b797e334a7d8029a9cfb3649b3eef629c8477b719d3a5de35e5b401fe6c5b5b8142a0c1eeca93b496e9e845856aa38c50596567643af7b7796877e0e962583a193acbcd27113c5dc2fb40a5b4c7e50604252e26d1b661cd31e1d35b732e004e49a6a2fb8d46eb6493e834422696c02e2e1c127bd77a2eaac19b9b80b6c2154f2b101995b1f2a98ce3c1a71b3c0082a908128eeeab35ba10b0faf3bfb7cbb0d9a6a0a8a3e916d77b427af032f82b68bc36ca4d51193f0829dec78fb3a995ac5d", 0xcb}, {&(0x7f0000000140)="459933ede09dd8dc8eb44bfe558d41db09aa933d5a1437e0356b717b206046c4343e28435271d8d55a36f6359f53a31fa531db5e4410aff40a1bdebe4a0c2ab490058e44dd01364bd37073637ef53e0b1a1997b67795b545c4c0e9797350a24963320b63ebe3d028ce4da7ec5ff1651e5200898d940f2bd93d3cf05703937aa2576796cc0978fa8e810be8b32cc97d85aaa79ff0d50accacc6fdeb07183956ea941bfe7d0478eb886d15f29dfb2998ade399f10073cb29af93abe1de658d1f5e92685a8ba72aa3f914551074a9a80685c974", 0xd2}], 0x2) ptrace$getregset(0x5, r4, 0x4, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x1000}) 03:34:09 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f0000000100)=""/21, 0x15}], 0x4, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x10000, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:09 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmsg(r0, &(0x7f0000001b40)={&(0x7f0000000340)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/10, 0xa}, {&(0x7f0000001840)=""/174, 0xae}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000001a00)=""/64, 0x40}], 0x5, &(0x7f0000001b00)=""/61, 0x3d, 0xffffffffffffff00}, 0x40000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005880)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000005980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005e80)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000005f80)=0xe8) sendmmsg(r0, &(0x7f0000007400)=[{{&(0x7f0000000000)=@sco={0x1f, {0xba1, 0x5, 0x4, 0x8, 0x1, 0x7617}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)="9d83edfdca213494e2b27d667ace48f95db87bb2a44b63619ad01879b6068e24a3bb81748a3acc464e12e6bb9a96b08f5276db5cfc315b66423b75c85a0a48a0b495bed41bdb3072d445ecdbd368b6e48189f9c164ed81f68d6e2ff58c217201ea02864708342ad65030a2c735652300a2042052736115b531ff0afebf7f670c5a36c01c01887a54055e8e894198dcef31702bfdee17c183c1e8bab590235f935dca8a3626519e4499e5998c21813096dcec302c751fa458dfe52f7a2f8bafe03bd82a70a8f6c54c868a4bfb97ebbb5a", 0xd0}, {&(0x7f0000000080)="3a89c0490d02d03a8444b2a5931a03be5b5c4082941b76d98e456f450162b199289543be2e4af94bd29bc5768c5d31e29a820279650e5dbfb80844742136a92022706d0c43ca34ea876c1f99d405182fea64d554f465a9fabc158a1b3cf52924ec8a70529b1d66499e40370d20575f80b62e3ef06b2aad941a2d939eecb3370a370024072a4e3b66135d1a1f9d8dc24d8d090e83892fe5e208e3", 0x9a}, {&(0x7f0000000500)="8ad6168e76bea20d090ddb29019859ded7d0227099aa5bf219810515e8507207769b356713087b0beb2501849d42c72bdfe7fb1c58065a61969516ebae6e702376238094c9b6bf3ffcbcede4ffeaf23dea9a97cdfd380983a7ce829f6b2010035269b4debb6023c747963957a20b600ed7803ede5d7b87090b765668c046df2224fac0038afdf55e378dc5e0af4b46176321bf3f2e141007ac6a8dbfac15fd2a04311d9507eeb2864e2fa232e455b70e90ff68be72e65040fdac3749e902ab42f81a753303623c0bec59d6cc7d9a1a64273e32d88a0f2663d591c3ae7b15dff15657e3dcb345c835d529a3d26a", 0xed}, {&(0x7f0000000640)="896e893725070121589c0c00b8cc8e2c6219fb453d00325472e524fffd5cbeeabf112d92980301f96e545720c2e49c2f0a6d2946fdcc95dcb7595cbd7bde435bbba72a31f43b2fe4ac7ec06aee6071aa7d0f6070f4ddbcf3db57230446e13a8fe224612506dbd2ebea164dec90ab3550163d8c9fb81f719a1f38d9ce8c9d2b9f7710ada074fabce99e1c4cf4c8e0e4a43dfd09f06adb4c93488ccc5e101e51693fb581c44b39b14e93a3d0735e6cd1cc76ae3f0ef06ba433b45f8b4fbd39dca1ad0b3f0a4706", 0xc6}], 0x4, &(0x7f0000003340)=ANY=[@ANYBLOB="8800000000000000000000000300000069b39aa24732f5e66d0cbd6d1dc6eefa43d748a7c122305d42cde6bc8e9ca83e5dfcd9d19044e5d02663326512ede01cc6d9d85b6ecdcd54adcfdc96a7544a418b6c4e8709000000be2e4333e85cdbaeb4e8bf18aa5a95750e6523d0f78824ec270068312a2fa2d58648d88e1ebc12e7da26b43b527f227453d48cbaa1bf031baa5061cd000000000000"], 0x88, 0x20000000}, 0x5}, {{&(0x7f0000001b80)=@xdp={0x2c, 0x3, r1, 0x26}, 0x80, &(0x7f0000003200)=[{&(0x7f0000001c00)="e75ffd38627b63b4a13defb7dc103216134514b47d76c8d4c31dd1910aa70f8324f925487036ad", 0x27}, {&(0x7f0000001c40)="a3b70d7e8e74e06335158e01f9f04b5091b473495f0eb711460c0c297527db83e22bbbdd49dff417bf1ec5a829772c0e0c2b5cfa8d8a18f2a791f71ecf3b3bd49835a7026dbecc381eff64cf85a31c5eec43e2b05905433d8618066f7ed57abf3b8e89ac486c909e6c1c416c123b0d5de665cdb293bd45e828d71c40e6b50b115a1ae08bcf2f201bde652d92dee173a2af5a9b562d4b0264e713dd8e48d8282550691dd4e30c00a745aa5c42f53f5b7185da5b196efa50d1a6043c6a16b8d31afb71f30c78dda9435010ae31515f25a10a3b63cb13d139484bd3f49dbe", 0xdd}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="f0ef2581c5cc4f1a19e428dcb6934fd75748ca6c2fd58267ea4be6662eb28bf660bab46a585075eecb362da7c4a1fc59c64a8723623b627b530893d768e2a97e78ad9ba7f73ce741618d6601279778a9209e85a30a29cfd33a063f3417f1b7122009129b92143cfb67e54db77ae883c55ffda63a4590dc739bae62fe417ac2768ff168f0ff4bc788e0ba4be26986b4c3af988879c6216cb4eb77a53b2aed58f7d9917905063ed8", 0xa7}, {&(0x7f0000002e00)="6d72e6c28d64dd16bbf4b381eae744b0617b8b19e51269e7f47eba5f91231d2bd5a70522c32ae43322f254cdfcc0eaea1fa2812c16cbeb11e7cc3140dab1cd7c0955254eb621e8e9bf4df022fb2887675d5bf9dc2c168ab7342425d25b4cb34d4a97bdc6e43ee5143825bdaa03eb78e0b78342dcafcdbd48e0714f2c323fa7922a19a7221118a910699796e4f1d68f8e30622fe1e2a537fac2f38a24cc858750ed411dbd82c9243483faa9da300c42936a37ad453edbe03c2362557d4aa420d4f9f0e9825034edbb92", 0xc9}, {&(0x7f0000002f00)="49d46c3db0b91b0a38f2b7dbfcc4a71da30969643d34485138ac1ceef4715fcf194a825464ca88abfd3895381beaba28d703686f44b0bf9c0d0440160fae1d3382a23d765360f235250a321e3d0d8773341d57c27c09b6d9eb719cf12d4721c9eab4cd7aa29f472192266b66eea3f253cca4d5dd206925771efded20d0f1ec265e72ef43cc0e90d7d4df64c09930b7b02ad00c9beb3583a56ff6158b752885aae7dba2e9357e1ba7e7ab98bca26fa00038f7dca7239ac5cdf6e030f76bd927adcaeacee5475bbc1be12ca460dc358297eb243cf55efd17cc204693785e5fd265df6bf5bb0cabf7", 0xe7}, {&(0x7f0000003000)="782aba145a04bf752a4a2526bc47ee41941533290690912affb28e6cbb5f1e9c0e4795a86ffcba37bfc3", 0x2a}, {&(0x7f0000003040)="de60dfab344b7e2584e809590584bc6dd10cb033e12b959c9019570c018ce4e2cacbaf4275e2b5d7a18dc552a6d6a37583e4d78ec517601f224aaf48be9ea55ba1186c1ea9cf911ce347cd031191f271de07f853aee72ce396372114b13dae34ee81b0a847ea1bff771cb8743959c155c6a450", 0x73}, {&(0x7f00000030c0)="f5c7b149f6f2653735b8b13ff4526438bc7a7b8de4389a1115bcfd66c19d8a8260fd80f3e3e53c0bf8cdbfdc843d6a118fcbde94c46dfdf9e1c6c7c61cf1e3c2cc42df380a68887bb74bef9d810ad103158e202a26a59213aca352b9f7f3f936d04bac8385a5c02c1f4306a469bea1685d3ef33917aec2", 0x77}, {&(0x7f0000003140)="2bdca9ff239d0e525d149a55bcc46aa745b886638130b4b857fe4006e1ac0e4e5168d50d42c2516c4640190e0cd5de8dd4aaaeeec933fd065f189639f4881843204f197810ed1e561ed939f60b0ff6c7ab9c666d6727c2b2d2f381099484b4fb4f5e76ab505ed684cb56c301ebd66c76ce27b9303fa4709ddb9e4265516b9606a179bd997ee93d800505baa0f4bcdda89d711562b254a48d0576ce7d7894a3ad8919", 0xa2}], 0xa, &(0x7f00000032c0)=[{0x28, 0x107, 0x9, "56f2d491c5b340ac0e27748d44a1bccd9a0a859b6c06fd17"}, {0x28, 0x117, 0x1, "d3d6012fec3e3aefd1e29d33cb5f69da77bf"}], 0x50, 0x24000040}, 0x40}, {{&(0x7f00000059c0)=@hci={0x1f, r2, 0x1}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005a40)="f105e803ad4f80a12e8855c9cba5137eed77cb9a9980a26b19415db71aba1c56af1ed33e6adc9608b9a502517f2469ca200bc1853366fc8509756e575b42f03b415347ed6e2dbf565784aa54a9503ecd5bf05b29e39f33696321cf05396cb79a7253f77be86c446cdbf4cbf357a6937ff29a92801e2056edf0776b05ad27c17ec5373348092a311093c42c2873decfd0032ae7e44570cdab945af55357247cc2d07fd7b8ba89eeb6a65e4ff177f58c895cca6b942cc7d43ca2b2e59893e72abdc4a0103070c34ed1d98ea6b13f3ba31075628a5cacfe9a73", 0xd8}, {&(0x7f0000005b40)="4b0c4339571769787930d431475fb662f9050395720037488765cf8ce2935bb7d110e5f642a4d09b5ede3e8c217f7347c36335bfb4266b05b18c566746739b6558a0764e2ab83f1a970fa03dea600c829f9caa54d1cb1810c0ff1b14dbbaa5c7f760661a7a258e8ab2063eb9c97db5be2ec6559c48d1e74fa29955443b0119a9f1f095c25e4ba3397e30d4918dfc9d60282f1dcfa5ac228b9717ca02e55559f94aeacc909d9e8ee9623e1c848dbd14b32a3df82f3055027a3282a67fd6816f6948f87f37dfbaa770a0b50bfea00d5004f7d1f19a8ace2e6785783277236da0e3df54f6319580453a72", 0xe9}, {&(0x7f0000005c40)="412a8690473f", 0x6}, {&(0x7f0000005c80)="6264a352684d994a1438682e6fe5a1", 0xf}, {&(0x7f0000005cc0)="3cbc6668361c22603e4681105ed850e5f625b273fe159ddb2f5ec48cda7875d47d03120a1f8995bccb1c832d996f44b055ab7e485be237bd017769a90a71220d9a05", 0x42}], 0x5, &(0x7f0000005dc0)=[{0x90, 0x11f, 0x200, "9739a22febd1c2893aca46a79f4a3d8e2071b71987c5bd8cd1bf74ceb597a1629acc21daa1a7b35b0d2c8ad3c254d77439d6d0534fe8d5e669896e72bc96a8414cc36ed318b176fda63efb1742e93a2555caf6c901f4600a9efb5c4bca0f365bbdaa506e96a418099733830b857fe86b71a94967a1b065d62d0619be"}], 0x90, 0x4}, 0x1f}, {{&(0x7f0000005fc0)=@can={0x1d, r3}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006040)="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", 0x1000}], 0x1, &(0x7f0000007080)=[{0x20, 0x0, 0x5, "274897b94b2ce4bdb4dbbe60f369"}, {0x78, 0x117, 0x81a, "25c60ae7b3df3df9a5d82edd76e5f5ba376ab5d731ffca3efb0caf35bdb3067c9f39f1c05abb096519ee7ed3ea50bb7cbc1852935edc3379ffff47766a3e57264da99631cda347abf263bb874b7a483876cd045111efe809d9e228b3054fc5e09fb8"}, {0x38, 0x0, 0x1, "24d6306bb55e6384969d4da7b79c843b787b668e72f16a348363d5b2e16a6c63ee26440068b7c19d"}, {0xb0, 0x108, 0x3f, "f57d3e855a6bb44f06692d4dec073ef9d445d2aded5a3a83b3810796467746855dcd483ed184d0c04809ffc01fd26ae9964c73a76a6a163515298fe780f194fe0a36114ea01eb6b59e3d022bb97e3774aea1b91626783c74fa12e1e67b149c4d1cc3b4dcd39df9a2cd8e004b2ce81b08985abf8252ab4640699924cb354b02ee7539194201f4ed52f79bad2a80ddc8860db5ed397705120aa3b828d8dece16"}, {0xf8, 0x117, 0x48d0, "43bf6e7431ee269f1b3f65d7680df9e2b376928ea56ff3973ffa2e7c519855d9d15ac6cdc93ae82844b5d2a53a2d9e661612eb26f18b240a7b0dcc1cd66c8167b68cb8d7ddd5f8e1736500f54f05cb70f5b7ade471a278015032e9b9f4c00f5f534025af68cefd167e0391124fef2832b78a0c08c2e1b2e65477a1a06899cb4ed37f18835d5307d1529b2de124b054fa05f2070ed67778b8e927667feaffdeb06a925698ac89ac4172c85430cca3ac0f41d9e2854e5206f259b4644f5360dfacb1f92f16afa8d7942f20bd0f26227c847571f9765b84e40ec11f17d9a22b142560219e9cf549"}, {0xd0, 0x19b, 0x2, "5e378775ddb49c2e0a9707370718f0768b4e05e82a852ab1a221933a3bd6da7e58380ab096ea6fc7a831c9f85a4624960a38298801cd128dd8d66507bafa43e34e1aeb93b80189b7d28ea83f441f82e7ae86cb1b1de2eca50db306807306c584ba11f3580a8c17eb3ef024b175f38af0383cc39c1c7415af1821c568a1a1b95feb31ebca7814ff6322406a6c46775034fb2e3e24a41247b461f10aed91d76ba6057d984e879e7b3e065bbfd074526f1ec03b0bd9813ba74f6010941e06f4"}], 0x348, 0x4000000}, 0x80000001}], 0x4, 0x8000) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) [ 479.218489] device lo left promiscuous mode [ 479.231932] binder: 13988:13996 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.247709] binder: BINDER_SET_CONTEXT_MGR already set [ 479.251621] binder: 13988:14002 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.267915] binder: 13988:13996 ioctl 40046207 0 returned -16 [ 479.268789] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:09 executing program 4: clock_gettime(0x6, &(0x7f00000002c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x10200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x200}, {r1, 0x400}], 0x2, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={0x4}, 0x8) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) 03:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x2000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:09 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/129, 0x81}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@local, @remote}, &(0x7f0000000040)=0xc) tkill(r0, 0x15) 03:34:09 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x400000000000000]}}, 0x1c) [ 479.395252] tls_set_device_offload_rx: 1 callbacks suppressed [ 479.395261] tls_set_device_offload_rx: netdev lo with no TLS offload [ 479.416596] binder: 14019:14023 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.424446] binder: 14019:14023 IncRefs 0 refcount change on invalid ref 8192 ret -22 [ 479.444575] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 479.472305] binder: BINDER_SET_CONTEXT_MGR already set [ 479.472574] binder: 14019:14035 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.479646] binder: 14019:14023 ioctl 40046207 0 returned -16 03:34:09 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0xe, 0x800) ioctl(r0, 0x6, &(0x7f0000000340)="e2cc8db39e0da69badcb830b25849035263f6b0a692757aaa13ce9e76d792bd860e25e0e07cf48f48d2b82fc528aee30fc21f1d9962b818be91184865ae3f9f7652c262b1a9f40a8bbd1aeb6308ef2c63745ac48eca0f830130a032becbca1c87049d7d9d83aa20ca93fa04f811fb683548cfd4c5b1a62fae4f591dd88347a50b85e1fe36de3955562454b99b33338a1e35ffbabdfc02e7f759ba6") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 03:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7a}], 0x0, 0x0, &(0x7f0000000180)}) [ 479.485429] binder: 14019:14035 IncRefs 0 refcount change on invalid ref 8192 ret -22 [ 479.499896] device lo entered promiscuous mode [ 479.509782] device lo left promiscuous mode 03:34:09 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1802000000000000]}}, 0x1c) 03:34:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x200240) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) [ 479.595532] binder: 14045:14047 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.603342] binder: 14045:14047 IncRefs 0 refcount change on invalid ref 122 ret -22 [ 479.617436] binder: BINDER_SET_CONTEXT_MGR already set [ 479.631784] binder: 14045:14047 ioctl 40046207 0 returned -16 [ 479.637699] binder: 14045:14050 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.637717] binder: 14045:14050 IncRefs 0 refcount change on invalid ref 122 ret -22 [ 479.650052] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f000000034400", 0x101}) 03:34:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0xa00000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000040)='./file0/file0\x00', 0x8043, 0x21) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 03:34:09 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070") setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffffffff001}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) mlock(&(0x7f0000008000/0x1000)=nil, 0x1000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0xfff, 0x4) [ 479.729425] device lo entered promiscuous mode [ 479.783117] binder: 14066:14069 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.829982] binder: BINDER_SET_CONTEXT_MGR already set [ 479.837015] device lo left promiscuous mode [ 479.841349] binder: 14066:14069 ioctl 40046207 0 returned -16 [ 479.843165] binder: 14066:14081 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 479.957128] device lo entered promiscuous mode 03:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4c00000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:10 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe803000000000000]}}, 0x1c) 03:34:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 03:34:10 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {r0, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff6, &(0x7f0000000080)) 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f0000ff00", 0x101}) 03:34:10 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0xfffffe91) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}, 0xfffffffffffffffc}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0x10, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000e000)={r0, &(0x7f0000000000), &(0x7f000000c000)}, 0x20) msync(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2) 03:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x5000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 480.155084] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 480.168489] binder: 14092:14093 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.176945] binder: BINDER_SET_CONTEXT_MGR already set [ 480.182499] binder: 14092:14095 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.190415] binder: 14092:14093 ioctl 40046207 0 returned -16 03:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000300)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x3, &(0x7f00000000c0)={@multicast2, @dev, 0x0, 0x400000b7}, 0x10) 03:34:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = msgget$private(0x0, 0x1000000000000) r2 = geteuid() fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) socketpair$inet(0x2, 0x0, 0x21, &(0x7f00000002c0)) r7 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x0, r2, r3, r4, r5, 0x30, 0x57}, 0x5, 0xf0ba, 0x8, 0x0, 0x6, 0x99b, r6, r7}) listen(r0, 0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xfffffffffffff000, 0xb95}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r9, 0x79, "10f3e172928aaf85ab4172c5482df7630f0e170a4c249357ae15035aa7787772e05ab143190ef3f35f6f6c3ef77a6909df981ef8544881c83bae921bdcb15ea5e324fb6bb7bb1b21deb52e9759aa6702636f2e8e1bd1c7bb41786adbba0b1df47a9224dad49e3c09c0088a05069c94661324632c69ced0471b"}, &(0x7f00000003c0)=0x81) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r8, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 480.246399] device lo left promiscuous mode [ 480.254855] binder: 14101:14103 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.262870] binder: 14101:14103 IncRefs 0 refcount change on invalid ref 83886080 ret -22 03:34:10 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x18020000]}}, 0x1c) 03:34:10 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_destroy(r1) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 480.335470] binder: BINDER_SET_CONTEXT_MGR already set [ 480.348773] binder: 14101:14122 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.356668] binder: 14101:14122 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 480.367480] binder: 14101:14103 ioctl 40046207 0 returned -16 03:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x74}], 0x0, 0x0, &(0x7f0000000180)}) [ 480.419401] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 480.495687] binder: 14142:14143 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.503506] binder: 14142:14143 IncRefs 0 refcount change on invalid ref 116 ret -22 [ 480.519922] tls_set_device_offload_rx: netdev lo with no TLS offload [ 480.532198] device lo entered promiscuous mode 03:34:10 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/7) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/18) msgsnd(r1, &(0x7f0000000400)={0x1, "86b80ea9456c59bf9fe899946d09a0d750a2aac17736b0deb17799ccf78360adbb7faa5292c63845d24d6d3a4ba300a00201eb5f7222ad319ba660fcbe79b4b9fe0964eb577fb97e56110ca8914cc42235b5d8d44e8c14026841d54a8c0e6d5f2c67a6240adacd340f07917a0b83ab731eb34f4d283e8d5121779a7d048f9ce8dd19a3a49560d04df9a990cd531f2a15067674636fe894a68f1b8c790ebe440b32838e63d759a6dc8d73e7ea5f63569cecef495e32e8c9d6cd9ac4963ec225f5e6879d1b4f6ff8c223540d5ca549de111de18029c8494559239fac54941cefd0d48f1f7fc1d2cd91d08815548c1302fe7372"}, 0xfa, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ifb0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="13000000090000cec2d5d300fdff0000300ddd9fa346cf2939fb92f63bb71311a9"]}) msgrcv(r1, &(0x7f0000000040)={0x0, ""/241}, 0xf9, 0x0, 0x3800) [ 480.541656] binder: BINDER_SET_CONTEXT_MGR already set [ 480.547870] binder: 14142:14143 ioctl 40046207 0 returned -16 [ 480.561913] device lo left promiscuous mode 03:34:10 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000200)={0x7, 0x9c, [{0x66dc, 0x0, 0x80000001}, {0x0, 0x0, 0xfffffffffffffffb}, {0x6, 0x0, 0x40}, {0xfffffffffffffffc, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x7fff, 0x0, 0x8}, {0x0, 0x0, 0x6}]}) bind$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0xfaa, @empty, 0x1}, {0xa, 0x4e22, 0xa8c, @mcast1, 0x432}, 0x81, [0x3, 0x51, 0x7fff, 0x81, 0x53da, 0x1ff, 0xfffffffffffff10f, 0x9]}, 0x5c) lseek(r1, 0x0, 0x1000000004) 03:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x5}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:10 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1090c1, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@ax25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}], 0x3, &(0x7f0000000540)=""/38, 0x26, 0x6}, 0x12040) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000005c0)="851fb48d5bf1f6466f75e6eaff50c9e56e32906b1869df2b114f4931f69050f35d001805aaa50bc9d36d39cedfe6734ad0a7fa") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x800, 0x10a00) r2 = eventfd(0x1ff) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0x1, 0x401, r2}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4040ae79, &(0x7f00000007c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10000}}) 03:34:10 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) [ 480.690969] binder: 14162:14165 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.698742] binder: 14162:14165 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 480.752037] tls_set_device_offload_rx: netdev lo with no TLS offload [ 480.760782] binder: BINDER_SET_CONTEXT_MGR already set [ 480.776874] binder: 14162:14177 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.784674] binder: 14162:14177 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 480.786448] binder: 14162:14165 ioctl 40046207 0 returned -16 [ 480.822551] device lo entered promiscuous mode 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f00001800", 0x101}) 03:34:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x200, 0x90082) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8ed}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x40000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) keyctl$revoke(0x15, r0) 03:34:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='l']) 03:34:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x7}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000240)='projid_map\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7}, 0x7) 03:34:10 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) fdatasync(r0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) [ 480.855864] tls_set_device_offload_rx: netdev lo with no TLS offload [ 480.880071] binder: 14185:14186 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.887876] binder: 14185:14186 IncRefs 0 refcount change on invalid ref 7 ret -22 [ 480.921746] XFS (loop0): unknown mount option [l]. [ 480.950110] binder: BINDER_SET_CONTEXT_MGR already set [ 480.961308] XFS (loop0): unknown mount option [l]. [ 480.963178] binder: 14185:14203 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 480.974080] binder: 14185:14203 IncRefs 0 refcount change on invalid ref 7 ret -22 [ 480.980913] tls_set_device_offload_rx: netdev lo with no TLS offload [ 480.988573] device lo left promiscuous mode [ 480.993781] binder: 14185:14186 ioctl 40046207 0 returned -16 [ 481.134671] device lo entered promiscuous mode [ 481.142715] device lo left promiscuous mode [ 481.203915] device lo entered promiscuous mode 03:34:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x300000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:11 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:11 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1090c1, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@ax25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000000180)=""/54, 0x36}], 0x3, &(0x7f0000000540)=""/38, 0x26, 0x6}, 0x12040) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000005c0)="851fb48d5bf1f6466f75e6eaff50c9e56e32906b1869df2b114f4931f69050f35d001805aaa50bc9d36d39cedfe6734ad0a7fa") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) 03:34:11 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0xe000000]}}, 0x1c) 03:34:11 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x81, 0x800, 0xfffffffffffffffc, 0x0, @tick, {0x0, 0x5}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) 03:34:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000003c0)) pipe(&(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f0000000340)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0xfffffffffffffffa, 0xf2e8, 0x0, 0x9, 0x0, 0xffffffffffffffc0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 03:34:11 executing program 6: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6c0, 0x200000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x81, {0x16, 0x0, 0x8}, 0x100, r2, r3, 0x9, 0x3, 0x0, 0x101, 0x62ad, 0xe88, 0x5, 0x3, 0x2, 0x2, 0x8, 0x5, 0x4803, 0x1, 0x1}}, 0xa0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xe805, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={"6c6f001800", 0x101}) [ 481.290649] device lo left promiscuous mode 03:34:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffff, 0x100000001, 0x1}) ioctl$TIOCGLCKTRMIOS(r0, 0x400c55cb, &(0x7f0000000280)={0xffffffffffffffff}) [ 481.317654] binder: 14224:14226 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 481.337268] binder: BINDER_SET_CONTEXT_MGR already set [ 481.337542] binder: 14224:14238 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 481.349163] binder: 14224:14226 ioctl 40046207 0 returned -16 [ 481.357840] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:34:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x200000000000000}], 0x0, 0x0, &(0x7f0000000180)}) 03:34:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @remote, @multicast2}, 0xc) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/216, 0xd8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)={@multicast2, @loopback, 0x0, 0x1, [@multicast2]}, 0x14) [ 481.382515] tls_set_device_offload_rx: netdev lo with no TLS offload [ 481.384789] tls_set_device_offload_rx: netdev lo with no TLS offload [ 481.402924] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:11 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="f1", 0x1, 0x480d4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x2f8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x1000000]}}, 0x1c) [ 481.477858] binder: 14263:14265 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 481.499060] device lo entered promiscuous mode [ 481.506266] binder: BINDER_SET_CONTEXT_MGR already set [ 481.518399] kasan: CONFIG_KASAN_INLINE enabled [ 481.523081] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 481.529996] binder: 14263:14269 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 481.530486] general protection fault: 0000 [#1] SMP KASAN [ 481.543691] CPU: 0 PID: 14266 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 481.552180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.553231] binder: 14263:14265 ioctl 40046207 0 returned -16 [ 481.561549] RIP: 0010:smc_ioctl+0x5d4/0x1250 03:34:11 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x100}, {r0, 0x4000}, {r0, 0xc035}, {r0, 0x600}, {0xffffffffffffffff, 0x8100}], 0x6, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x4}, 0x8) 03:34:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xa3, 0x4c0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') lseek(r0, 0x0, 0x1) fadvise64(r0, 0x0, 0xb228, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x305000) 03:34:11 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00e8f89f0000"], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r2) [ 481.561565] Code: 48 c1 ea 03 80 3c 02 00 0f 85 7c 0c 00 00 4c 8b ab 98 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 20 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ca 0b 00 00 41 8b 45 20 49 8d [ 481.561573] RSP: 0018:ffff8801b3fbf5c8 EFLAGS: 00010202 [ 481.561586] RAX: dffffc0000000000 RBX: ffff8801ca2644c0 RCX: 1ffff100367f7ed9 [ 481.561595] RDX: 0000000000000004 RSI: 1ffff100367f7ef9 RDI: 0000000000000020 [ 481.561603] RBP: ffff8801b3fbf9b0 R08: ffffed00367f7eda R09: ffffed00367f7ed9 [ 481.561613] R10: ffffed00367f7ed9 R11: ffff8801b3fbf6cf R12: 1ffff100367f7ebd [ 481.561621] R13: 0000000000000000 R14: 0000000020000100 R15: ffff8801b3fbf688 [ 481.561638] FS: 00007f53c25fd700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 481.582192] binder: 14263:14269 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 481.590804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.590813] CR2: 0000000000930060 CR3: 00000001968ee000 CR4: 00000000001406f0 [ 481.590824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.590831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 481.590836] Call Trace: [ 481.590859] ? __account_cfs_rq_runtime+0x770/0x770 [ 481.590874] ? smc_connect_rdma+0x9d0/0x9d0 [ 481.590887] ? __account_cfs_rq_runtime+0x770/0x770 [ 481.590910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.597505] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 481.603536] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 481.603563] ? trace_hardirqs_on+0x10/0x10 [ 481.718363] ? perf_event_update_userpage+0xd30/0xd30 [ 481.723560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.729105] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 481.734314] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 481.738722] ? run_rebalance_domains+0x4c0/0x4c0 [ 481.743479] ? finish_task_switch+0x1d3/0x870 [ 481.747972] ? lock_downgrade+0x8f0/0x8f0 [ 481.752114] ? finish_task_switch+0x18a/0x870 [ 481.756615] ? kasan_check_read+0x11/0x20 [ 481.760760] ? do_raw_spin_unlock+0xa7/0x2f0 [ 481.765170] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 481.769751] ? compat_start_thread+0x80/0x80 [ 481.774166] ? trace_hardirqs_on+0xd/0x10 [ 481.778315] ? _raw_spin_unlock_irq+0x27/0x70 [ 481.782807] ? finish_task_switch+0x1d3/0x870 [ 481.787306] sock_do_ioctl+0xe4/0x3e0 [ 481.791110] ? __fget+0x4ac/0x740 [ 481.794572] ? compat_ifr_data_ioctl+0x170/0x170 [ 481.799329] ? lock_release+0xa30/0xa30 [ 481.803301] ? __switch_to_asm+0x34/0x70 [ 481.807358] ? __switch_to_asm+0x40/0x70 [ 481.811419] ? __switch_to_asm+0x34/0x70 [ 481.815474] ? __switch_to_asm+0x40/0x70 [ 481.819540] ? __schedule+0x884/0x1ec0 [ 481.823538] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 481.828731] sock_ioctl+0x30d/0x680 [ 481.832365] ? dlci_ioctl_set+0x40/0x40 [ 481.836355] ? ksys_dup3+0x690/0x690 [ 481.840081] ? __fget_light+0x2f7/0x440 [ 481.844243] ? fget_raw+0x20/0x20 [ 481.847713] ? dlci_ioctl_set+0x40/0x40 [ 481.851693] do_vfs_ioctl+0x1de/0x1720 [ 481.855584] ? ioctl_preallocate+0x300/0x300 [ 481.859994] ? __fget_light+0x2f7/0x440 [ 481.863966] ? __schedule+0x1ec0/0x1ec0 [ 481.867940] ? fget_raw+0x20/0x20 [ 481.871394] ? __fdget_raw+0x20/0x20 [ 481.875110] ? __x64_sys_futex+0x47f/0x6a0 [ 481.879348] ? security_file_ioctl+0x94/0xc0 [ 481.883755] ksys_ioctl+0xa9/0xd0 [ 481.887207] __x64_sys_ioctl+0x73/0xb0 [ 481.891092] do_syscall_64+0x1b9/0x820 [ 481.894977] ? finish_task_switch+0x1d3/0x870 [ 481.899469] ? syscall_return_slowpath+0x5e0/0x5e0 [ 481.904396] ? syscall_return_slowpath+0x31d/0x5e0 [ 481.909322] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 481.914334] ? __switch_to_asm+0x34/0x70 [ 481.918395] ? __switch_to_asm+0x34/0x70 [ 481.922451] ? __switch_to_asm+0x40/0x70 [ 481.926509] ? __switch_to_asm+0x34/0x70 [ 481.930567] ? __switch_to_asm+0x40/0x70 [ 481.934624] ? __switch_to_asm+0x34/0x70 [ 481.938682] ? __switch_to_asm+0x40/0x70 [ 481.942744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.947592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.952786] RIP: 0033:0x456cb9 [ 481.955980] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.974900] RSP: 002b:00007f53c25fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.982617] RAX: ffffffffffffffda RBX: 00007f53c25fd6d4 RCX: 0000000000456cb9 [ 481.989888] RDX: 0000000020000100 RSI: 000000000000894b RDI: 0000000000000013 [ 481.997167] RBP: 00000000009303c0 R08: 0000000000000000 R09: 0000000000000000 [ 482.004429] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 482.011690] R13: 00000000004d1608 R14: 00000000004bf7d0 R15: 0000000000000005 [ 482.018965] Modules linked in: [ 482.022164] Dumping ftrace buffer: [ 482.025694] (ftrace buffer empty) [ 482.029646] ---[ end trace 8ffa4e3eb1abc169 ]--- [ 482.034446] RIP: 0010:smc_ioctl+0x5d4/0x1250 [ 482.038892] Code: 48 c1 ea 03 80 3c 02 00 0f 85 7c 0c 00 00 4c 8b ab 98 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 20 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ca 0b 00 00 41 8b 45 20 49 8d [ 482.057844] RSP: 0018:ffff8801b3fbf5c8 EFLAGS: 00010202 [ 482.063274] RAX: dffffc0000000000 RBX: ffff8801ca2644c0 RCX: 1ffff100367f7ed9 [ 482.070581] RDX: 0000000000000004 RSI: 1ffff100367f7ef9 RDI: 0000000000000020 [ 482.077865] RBP: ffff8801b3fbf9b0 R08: ffffed00367f7eda R09: ffffed00367f7ed9 [ 482.085148] R10: ffffed00367f7ed9 R11: ffff8801b3fbf6cf R12: 1ffff100367f7ebd [ 482.092440] R13: 0000000000000000 R14: 0000000020000100 R15: ffff8801b3fbf688 [ 482.099722] FS: 00007f53c25fd700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 482.107957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.113844] CR2: 0000000000930060 CR3: 00000001968ee000 CR4: 00000000001406f0 [ 482.121148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.128456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.135823] Kernel panic - not syncing: Fatal exception [ 482.141571] Dumping ftrace buffer: [ 482.145096] (ftrace buffer empty) [ 482.148780] Kernel Offset: disabled [ 482.152386] Rebooting in 86400 seconds..