4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000013000)=0x2f) 10:53:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000013000)=0x2f) 10:53:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000013000)=0x2f) 10:53:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000013000)=0x2f) [ 2157.911485][ T7009] binder: 7007:7009 ioctl c0306201 20000140 returned -14 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000013000)=0x2f) 10:53:16 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe) 10:53:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x40000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000013000)=0x2f) 10:53:16 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x10) 10:53:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000013000)=0x2f) 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000013000)=0x2f) 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000013000)=0x2f) [ 2158.730648][ T7058] binder: 7056:7058 ioctl c0306201 20000140 returned -14 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000013000)=0x2f) 10:53:16 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x11) 10:53:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x48000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x12) 10:53:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000013000)=0x2f) [ 2159.555027][ T7108] binder: 7105:7108 ioctl c0306201 20000140 returned -14 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000013000)=0x2f) 10:53:17 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x25) 10:53:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x4c000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x10}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:53:18 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf) 10:53:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x36, 0x0, &(0x7f0000013000)=0x2f) 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x37, 0x0, &(0x7f0000013000)=0x2f) 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000013000)=0x2f) [ 2160.381763][ T7156] binder: 7148:7156 ioctl c0306201 20000140 returned -14 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000013000)=0x2f) 10:53:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000013000)=0x2f) 10:53:18 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x300) 10:53:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x60000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x11}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3b, 0x0, &(0x7f0000013000)=0x2f) 10:53:19 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x500) 10:53:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000)=0x2f) 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3d, 0x0, &(0x7f0000013000)=0x2f) 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0x2f) [ 2161.207167][ T7200] binder: 7194:7200 ioctl c0306201 20000140 returned -14 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000013000)=0x2f) 10:53:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)=0x2f) 10:53:19 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x600) 10:53:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x68000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x12}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x700) 10:53:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000013000)=0x2f) [ 2162.025240][ T7244] binder: 7242:7244 ioctl c0306201 20000140 returned -14 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x900) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x25}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:20 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa00) 10:53:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x6c000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d70696473202d72646d494e00696f6c8c8a115d3d21202d696f"], 0x1a) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0xd, 0x11, &(0x7f0000000240)="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"}) r2 = socket$inet6(0xa, 0xa, 0x405) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x16) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x81, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2162.844195][ T7291] binder: 7289:7291 ioctl c0306201 20000140 returned -14 10:53:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r2 = epoll_create1(0x0) fcntl$getown(r2, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) setpriority(0x0, r5, 0x40) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = gettid() ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000040)=r8) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000000)=0x4) 10:53:20 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb00) 10:53:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0xc6df5fe45a90f985, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48008) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x3089b858976eca80) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4c004) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc00) 10:53:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x48}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd00) 10:53:21 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x74000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:21 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100)=0x4, 0x400000000003, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000000c0)={0x2, 0x0, 0x80000000}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) getsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2163.683007][ T7346] binder: 7338:7346 ioctl c0306201 20000140 returned -14 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe00) 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1100) 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1200) 10:53:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2500) 10:53:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:22 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000) 10:53:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x7a000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:22 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x9) 10:53:22 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000140)=0xd4, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x5f22, 0x7, 0xd00, 0x0, 0x2004e, r6}) 10:53:22 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) socket(0xa, 0x3, 0x3f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) splice(r3, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) [ 2164.523418][ T7400] binder: 7396:7400 ioctl c0306201 20000140 returned -14 10:53:22 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000117b00000000000000000100ba1d0000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x220, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x549}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x200, @remote, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x816}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8898}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0b1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40084}, 0x4008090) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x54112, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:22 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf00) 10:53:22 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) dup3(r1, r2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:22 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x84c00, &(0x7f00000000c0)='%]+\x00') [ 2164.602088][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x60}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x6c, &(0x7f0000000140)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x0, 0x9, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x20004884) 10:53:23 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x100000) 10:53:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x4, {{0xa, 0x4e22, 0x2, @mcast2, 0xffff}}}, 0x88) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, r3) 10:53:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/2, 0x2}], 0x4, &(0x7f0000000280)=""/172, 0xac}, 0x100005}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/180, 0xb4}], 0x4, &(0x7f0000001580)=""/4096, 0x1000}, 0xed1}, {{&(0x7f0000002580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002600)=""/236, 0xec}, {&(0x7f0000002700)=""/6, 0x6}, {&(0x7f0000002740)=""/228, 0xe4}, {&(0x7f0000002840)=""/109, 0x6d}], 0x4}, 0xc0}, {{&(0x7f0000002900)=@can, 0x80, &(0x7f0000003980)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1, &(0x7f00000039c0)=""/245, 0xf5}, 0x5}, {{&(0x7f0000003ac0)=@nfc_llcp, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b40)=""/145, 0x91}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/7, 0x7}, {&(0x7f0000004c40)=""/145, 0x91}, {&(0x7f0000006c00)=""/169, 0xa9}], 0x5, &(0x7f0000004e40)=""/153, 0x99}, 0x80000000}, {{&(0x7f0000004f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006180)=[{&(0x7f0000006cc0)=""/221, 0xdd}, {&(0x7f0000005080)=""/205, 0xcd}, {&(0x7f0000005180)=""/4096, 0x1000}], 0x3}, 0x2}, {{&(0x7f00000061c0)=@nfc_llcp, 0x80, &(0x7f0000006400)=[{&(0x7f0000006240)=""/4, 0x4}, {&(0x7f0000006280)=""/206, 0xce}, {&(0x7f0000006380)=""/115, 0x73}], 0x3}, 0x3c13}, {{&(0x7f0000006440)=@phonet, 0x80, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/73, 0x49}, {&(0x7f0000006540)=""/95, 0x5f}, {&(0x7f00000065c0)=""/163, 0xa3}, {&(0x7f0000006680)=""/145, 0x91}, {&(0x7f0000006740)=""/87, 0x57}, {&(0x7f00000067c0)=""/194, 0xc2}, {&(0x7f00000068c0)=""/82, 0x52}, {&(0x7f0000006940)=""/55, 0x37}], 0x8}, 0x5}], 0x8, 0x0, 0x0) [ 2165.358605][ T7452] binder: 7445:7452 ioctl c0306201 20000140 returned -14 10:53:23 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ff7f) 10:53:23 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1000000) 10:53:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:23 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2000000) 10:53:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x68}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:24 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x3000000) 10:53:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:53:24 executing program 4: socket$inet6(0xa, 0x3, 0x7) [ 2166.187905][ T7498] binder: 7493:7498 ioctl c0306201 20000140 returned -14 [ 2166.187925][ T7497] binder: 7492:7497 ioctl c0306201 20000140 returned -14 10:53:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x3}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:24 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x30, r1, 0x41713000) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) 10:53:24 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000000) 10:53:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="30050000", @ANYRES16=r2, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x800}, 0x88000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x7000) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r3, &(0x7f0000000100)=0x8000000000000020, 0x400000000007, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x3e, r4}) setsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000140)="cbd5df1802864404c0ec7c103e90eeaf4744cf7b8a8207d633ec2451a575eecf657b2f4297af84e83209e31be52472320e579d86761b753535a18b9bd17395d55395b97713d18b8771d134114b09a3b15f59fa9b005a3c06a220dec9e1", 0x5d) 10:53:24 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x5000000) 10:53:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:25 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r7, 0x0, r8, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) splice(r7, 0x0, r2, &(0x7f0000000100)=0x2, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) vmsplice(r9, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) flistxattr(r1, &(0x7f0000000240)=""/219, 0xdb) 10:53:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:53:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x6000000) 10:53:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2167.018632][ T7548] binder: 7544:7548 ioctl c0306201 20000140 returned -14 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7000000) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x8000000) 10:53:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x9000000) 10:53:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa000000) 10:53:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x74}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:25 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, 0x0, 0x0, 0x0) 10:53:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x5}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb000000) 10:53:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:25 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = accept(r0, 0x0, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @remote, 0x3}, 0x1c) [ 2167.846258][ T7600] binder: 7593:7600 ioctl c0306201 20000140 returned -14 [ 2167.872235][ T7605] binder: 7604:7605 ioctl c0306201 20000140 returned -14 10:53:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406a05bb00400002000001090224000100000000090400000603010000092100000001220a0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "f6effda6"}, @local=@item_012={0x1, 0x2, 0x0, '\\'}, @global, @main=@item_012={0x1, 0x0, 0x8, "a5"}]}}, 0x0}, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)=""/4096, 0x1000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:25 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc000000) 10:53:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:26 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd000000) 10:53:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, 0x0, 0x0, 0x0) 10:53:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:26 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe000000) [ 2168.664525][ T7651] binder: 7650:7651 ioctl c0306201 20000140 returned -14 10:53:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, 0x0, 0x0, 0x0) 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000240)=0x7fffffff, 0x4) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/243, 0xf3}], 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:26 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x10000000) 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10630840000000000000000000000000000000000000000000004000"], 0x33, 0x0, &(0x7f0000000040)="cfc815f6269b444aa845fbc93463644c9b7167617c089e475bd9d3b1feb4924355681cbf03c460c18140ba07d94b3fbd92cab9"}) r0 = socket$inet6(0xa, 0x3, 0x400007) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = eventfd(0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x100) [ 2168.715517][ T7664] binder: 7657:7664 ioctl c0306201 20000140 returned -14 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x5ea800, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000140)={0x1ff, 0x55, "9fb166b4764e133ee9cd8fa16b388ee2d8054c4d2d87b8d564b1ebf7896a4649966e6a2b7ddf7b6727594c4d77a54155b5dcad293e62e1cbf2e7d571f505bdd4ab5fe25c7c214c519e40738ae0816e87bc086ec57f"}) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x9, 0x40, 0xb7, 0x3f, 0x101, 0x9}) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:27 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x11000000) 10:53:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x300}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2169.481102][ T7714] binder: 7712:7714 ioctl c0306201 20000140 returned -14 10:53:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:27 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000117b00000000000000000100ba1d0000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x220, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x549}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x200, @remote, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x816}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8898}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0b1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40084}, 0x4008090) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x54112, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:27 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x76) 10:53:27 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x12000000) 10:53:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:27 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000009, 0x8010, r1, 0x2cec5000) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:27 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x400}, 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) [ 2169.532131][ T7721] binder: 7720:7721 ioctl c0306201 20000140 returned -14 [ 2169.550792][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:53:27 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) 10:53:27 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x200008c0) 10:53:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x500}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2170.299331][ T7763] binder: 7762:7763 ioctl c0306201 20000140 returned -14 10:53:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x8}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_targets\x00') splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000327bd70000500ff7400"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000000)={0x40000000}) r8 = socket$inet6(0xa, 0x6, 0x80001) getsockopt$inet6_int(r8, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:28 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x25000000) 10:53:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x64, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000005) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x4008001) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000440)={{0x3b, @private=0xa010100, 0x4e22, 0x1, 'lc\x00', 0x34, 0x4, 0x29}, {@private=0xa010102, 0x4e20, 0x10000, 0x26, 0x9, 0x1f}}, 0x44) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_newneigh={0x4c, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0x0, r8, 0x2, 0x81, 0x2}, [@NDA_MASTER={0x8, 0x9, 0xf615}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x200, 0x20}}, 0x30) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2170.351965][ T7772] binder: 7768:7772 ioctl c0306201 20000140 returned -14 10:53:28 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x40000000) 10:53:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="85f92bbd7000fbdbdf250d000000ea003b00ff01000005002e000000000005002f000100000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48008) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x3089b858976eca80) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r6 = socket(0x11, 0x2, 0x2) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000c1ff00000000000008000100687462007ab700000000080003000000000000000000000000000056ed440000"], 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa5807b84}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) 10:53:28 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) 10:53:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:28 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) [ 2170.523378][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2170.632187][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x600}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2171.114139][ T7813] binder: 7812:7813 ioctl c0306201 20000140 returned -14 10:53:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x9}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:29 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7ffff000) 10:53:29 executing program 0 (fault-call:15 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x1000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcb\x14E\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/133, 0x85) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x55) 10:53:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108500fa000000bd050000000000009500d19b00000000a1820000aa5c72"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:53:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="1e3034117fb74cf366ed5cc96db774d25e944d87076720239dd14ec8d8ae11be7837c366b230", 0x26) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') [ 2171.174094][ T7825] binder: 7817:7825 ioctl c0306201 20000140 returned -14 10:53:29 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc0080020) 10:53:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:29 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf000000) [ 2171.343135][ T7910] FAULT_INJECTION: forcing a failure. [ 2171.343135][ T7910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2171.372549][ T7910] CPU: 0 PID: 7910 Comm: syz-executor.0 Tainted: G W 5.4.47-syzkaller-00290-g5eb96e454e88 #0 [ 2171.384192][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.394310][ T7910] Call Trace: [ 2171.397580][ T7910] dump_stack+0x14a/0x1ce [ 2171.401883][ T7910] ? devkmsg_release+0x11c/0x11c [ 2171.406790][ T7910] ? show_regs_print_info+0x12/0x12 [ 2171.411977][ T7910] ? stack_trace_save+0x1f0/0x1f0 [ 2171.417406][ T7910] ? __kernel_text_address+0x93/0x110 [ 2171.422748][ T7910] should_fail+0x6fb/0x860 [ 2171.427138][ T7910] ? setup_fault_attr+0x3d0/0x3d0 [ 2171.432133][ T7910] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2171.437475][ T7910] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2171.442991][ T7910] ? __kasan_slab_free+0x1f2/0x230 [ 2171.448072][ T7910] ? __rcu_read_lock+0x50/0x50 [ 2171.452823][ T7910] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2171.458860][ T7910] kmalloc_order_trace+0x2a/0xf0 [ 2171.463811][ T7910] __kmalloc+0x268/0x2d0 [ 2171.468027][ T7910] ? proc_fail_nth_write+0x18f/0x250 [ 2171.473283][ T7910] kmalloc_array+0x2b/0x50 [ 2171.477678][ T7910] rw_copy_check_uvector+0x8a/0x310 [ 2171.482867][ T7910] import_iovec+0x113/0x380 [ 2171.487340][ T7910] ? dup_iter+0x110/0x110 [ 2171.491653][ T7910] do_preadv+0x1d9/0x350 [ 2171.495865][ T7910] ? do_writev+0x5b0/0x5b0 [ 2171.500253][ T7910] ? fput_many+0x42/0x1a0 [ 2171.504554][ T7910] ? ksys_write+0x25d/0x2c0 [ 2171.509032][ T7910] do_syscall_64+0xcb/0x150 [ 2171.513506][ T7910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2171.519369][ T7910] RIP: 0033:0x45ca59 [ 2171.524127][ T7910] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2171.543703][ T7910] RSP: 002b:00007f0c0fbfcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2171.552086][ T7910] RAX: ffffffffffffffda RBX: 00000000004fb0e0 RCX: 000000000045ca59 [ 2171.560032][ T7910] RDX: 000000000000037d RSI: 0000000020000500 RDI: 0000000000000006 [ 2171.568085][ T7910] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.576208][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2171.584154][ T7910] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f0c0fbfd6d4 10:53:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x700}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2171.930603][ T7873] binder: 7872:7873 ioctl c0306201 20000140 returned -14 10:53:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffefff7f) 10:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 2171.995331][ T7883] binder: 7877:7883 ioctl c0306201 20000140 returned -14 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffff7f) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7ffffffff000) 10:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x8, 0x0) 10:53:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x10000000000000) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ff7f00000000) 10:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x302, 0x0) 10:53:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x900}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x2) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xf0ffffff7f0000) 10:53:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:30 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x100000000000000) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x200000000000000) 10:53:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x3) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x300000000000000) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x400000000000000) 10:53:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x4) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x500000000000000) 10:53:31 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00e7f2c27003ec728988", @ANYRES16=r3, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004240)={0xb70, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x3, 0x8, 0x6, 0x7}, {0x6, 0x80, 0x8, 0x9}, {0x1, 0x54, 0x2, 0x8001}, {0x1, 0x0, 0x11, 0xffff}, {0x100, 0x8, 0xf8, 0x8}, {0x2, 0xd7, 0x5, 0xffff}, {0x76, 0x9, 0x1, 0x3}, {0x7f, 0x7f, 0x6, 0x2}, {0x80, 0x3f, 0x7f, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4a}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xacb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xb5a0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8cc6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x5, 0x0, 0xff, 0x1ff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffff000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x9, 0x1e, 0x1, 0x4e4}, {0xd7b, 0x66, 0x8}, {0x4a94, 0x1, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0xb70}, 0x1, 0x0, 0x0, 0x4}, 0x24008854) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000240)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r10, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2173.604806][ T7983] binder: 7982:7983 ioctl c0306201 20000140 returned -14 10:53:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x5) 10:53:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40), 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x600000000000000) 10:53:31 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x481, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xc}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x110, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x1a0100) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x2) 10:53:31 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl(r4, 0x5, &(0x7f0000000280)="0b751147d3e995deecf2290018520e6a1c4aa3d5b0cbd95a2272da288dd914df01b68d2f4410b82a42946d612db998e14709e5c323f96500892d432bca3d8f635f61d1716b29985b89e09c15ab20366a1eebe79ed977fc81ef6f026296aac5d029e03b37693038fade26a5787555384b6d92977507ec52c9fc9d086d7c4c0e28d085c1c6d1e25ce70164a873801cce5b7c57263ae59003cf391e9854a4c674772655fbb3e85799dc9038d5c4b785d068b3eddb2782a885fb7668bb") r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x8, "4fa7a9b91f91013e"}) r6 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xb7, 0x3f, 0x9, 0x40, 0x0, 0x2, 0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0xff}, 0x820, 0x0, 0xfffeffff, 0x5, 0x1, 0x6, 0xc0}, r7, 0xb, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-'}, 0x16, 0x1) 10:53:31 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x700000000000000) [ 2173.683015][ T7986] binder: 7985:7986 ioctl c0306201 20000140 returned -14 [ 2173.708758][ T8053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2173.718738][ T8053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)) r3 = dup2(r0, 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @private2={0xfc, 0x2, [], 0x1}, 0x2}, 0x1c) 10:53:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = dup3(r1, r2, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000820) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000013c0)={&(0x7f00000000c0)="b8c982116a0e378967f8f45a9f4c79bcd3f4da0b7f32286b4c263127", &(0x7f0000000240)=""/4096, &(0x7f0000001240)="a6103309ff19083e69a59dd7392fc4e3e7ad9817720dc16837987ee229b3dc83cebfb4a153324ccebfdf6236a8369caeeacd47e14a09c0c34fbc840ce13733b455caacc29a854ee0361c70e1b29eaf3f50a6492998c22f4df6a2dcf7b489610ae45128fa00d8bd385ccc6d78d3baf81516dc00dec5c7f3993fbfc5225f1ce8f81c618558dd7efccfcad9e2f489bb58b6cdda97e848c85fe1c0d759476e3c3bb3cf00000000000000", &(0x7f0000001300)="256e68cd6b1bb172bef269159d5f931593120a91f40d640fba6d857a1a4eff040dc284d5abeb84308b9640587f7e360452ac0507bc27cb695cb25c8bbe2af0b757cd8efc319e787c", 0x401, 0xffffffffffffffff, 0x4}, 0x4b) splice(r8, 0x0, r9, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x10) fcntl$setpipe(r8, 0x407, 0x48) 10:53:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0xd3d9a000) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2174.502041][ T8049] binder: 8045:8049 ioctl c0306201 20000140 returned -14 [ 2174.509249][ T8055] binder: 8046:8055 ioctl c0306201 20000140 returned -14 10:53:32 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x800000000000000) 10:53:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x6) 10:53:32 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = dup2(r1, r4) write$FUSE_IOCTL(r5, &(0x7f0000000040)={0x20, 0xb, 0x2, {0x5, 0x4, 0x4, 0xaf03}}, 0x20) 10:53:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40), 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:32 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="4d1a4886cae09678"}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, r1, 0xbb012000) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:32 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12400, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2174.562421][ T8093] binder: 8046:8093 ioctl c0306201 20000140 returned -14 [ 2174.562444][ T8049] binder: 8045:8049 ioctl c0306201 20000140 returned -14 10:53:32 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x4010, r1, 0x575c7000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000013000)) 10:53:32 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x900000000000000) 10:53:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x401, 0x50, [0x5, 0x4, 0x6, 0x1, 0x4], 0x4}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:32 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:32 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) [ 2175.389157][ T8099] binder: 8096:8099 ioctl c0306201 20000140 returned -14 [ 2175.396410][ T8104] binder: 8101:8104 ioctl c0306201 20000140 returned -14 10:53:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:33 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1a) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x45ff, @private1={0xfc, 0x1, [], 0x1}, 0x3}, {0xa, 0x4e21, 0x8, @loopback, 0xf4}, 0x4, [0x7, 0x7, 0x5, 0x325, 0x9, 0x550, 0xfffffffc, 0x81]}, 0x5c) 10:53:33 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xa00000000000000) 10:53:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40), 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7) 10:53:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2175.449407][ T8099] binder: 8096:8099 ioctl c0306201 20000140 returned -14 10:53:33 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xb00000000000000) 10:53:33 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc00000000000000) 10:53:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x8) 10:53:33 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xd00000000000000) 10:53:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x10}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xe00000000000000) 10:53:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x9) 10:53:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2176.274766][ T8153] binder: 8150:8153 ioctl c0306201 20000140 returned -14 [ 2176.282276][ T8154] binder: 8148:8154 ioctl c0306201 20000140 returned -14 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1000000000000000) 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1100000000000000) 10:53:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xa) 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x1200000000000000) 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x2500000000000000) 10:53:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xb) 10:53:34 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x4000000000000000) 10:53:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2177.134466][ T8212] binder: 8210:8212 ioctl c0306201 20000140 returned -14 [ 2177.141687][ T8213] binder: 8211:8213 ioctl c0306201 20000140 returned -14 10:53:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x11}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:35 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xc008002000000000) 10:53:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc) 10:53:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) modify_ldt$read(0x0, &(0x7f0000000000)=""/57, 0x39) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2000002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x80) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000000)="8da9ecab3b2c4635405fb09ae53632ca1538bb93bda4ef9f399fdf510bebe2d14e2b4f8baa2407a600a2c78f28f9a02a84fb0579d126a5827335ab2871138900057a4402ac4f1f29bf3edb67fe51a6ea8ad26c0435e94f8269a1801b7a0f308c4c64317fd24d74e5864680fbea254374632f4b76b34f17e06000c9d12409f6efd6c5b85e93faee071145484810db1a2a3bb7f4a33bbf16ddaf92229f19eac35fa150a66e067e853193450462c8325cbae3f7664d0ed6ee2c38b59f8e82a9c6c6"}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) 10:53:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) splice(r4, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$hidraw(r1, &(0x7f0000000000)="83d5", 0x2) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x2007) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='status\x00') ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) getsockopt$inet6_int(r0, 0x29, 0x5a, 0x0, &(0x7f0000013000)) 10:53:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002000)=ANY=[@ANYRESDEC], 0x934}}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2, 0x100}) 10:53:35 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 10:53:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10042cbd7000ffdb00020000000000000600aaaaaaaaaaaa00000a001a005a876495452100000c00990008000000030000000a001a0000000000000000000a000600fa523422ea7200000c009900ff070000ffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x48055}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1100}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2177.958297][ T8264] binder: 8263:8264 ioctl c0306201 20000140 returned -14 10:53:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x12}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x1) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffefff7f00000000) 10:53:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xd) 10:53:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1100, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/143) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)='#\tP\x81\xcbXE\x00\x00\x02\x00\xff\x00\x1a\x9b\xc4H\x1d\xeb\xc9\vP-\xde\x1a\x92\x87g\xf7\xef;\v2\x15\x81\'o\x00$\xe5v\x1c\xb9\x8c\xf6\x1a\xa4\xe1[!\x1a\xf9-\x1a\b\x14g\'z6q\x89\xf7b\xa7\xf3\xd6\x04\x96\x97\xd8\x8f\xb9=tb\xc5\xd1\x1c\x87\xf3\xb7\x1e\xcb\xce\xd3\xb55\xa7\xc4\x10\x86\f\x85\xfe\xf4\xd4\xedW\xc9H~\x18uY\xf9\xdfg\x13]\x02^\x1e\xa5\fM\x90\xe1\xf7\xbd\x10-+\xb5\x0f\xa8|\xc3\x18\x02\xf4\xb3\xeb\xa1\xa0\xaa\xb2b\xa5\x8c\xae\x8c\xae\xafJ\xa0^!\x1c\f\x1c\xb9\xf6b\x94\x8f\x1c}\xf6\xfa\x18\xd7j6bVi\x1b\v\xf0a2\xff\xba\xa8\x19\x1d%\xba\x9e\xe6\xear\xa6\x93?vh\xc6\xedz\xc9\te\xf3\xda\xb8\xefZd\xea7\x8b_t;d\x03\xf0\xdd\xb1\xd2\x80\xdc@D\xdfR\xbb\xb2\xd7\x84\xc7$\x90R\xe2t6z\xb1\f\xd8\xcf\x8a\xf5\xdc\a\xeb\xf4\xafa\xee\xc2\xb2\xfa\xa8\xe2\xafg\xdd\xe6\xcfw;\xa4\xc1\xbeG\xdf\xb0\x01\xbc\xf3X\x90\xe6{G\xf1\x88\xf5\xcf\xf6\xd1K\x99m\xb8\xd3)\x10\x91\xd5\xe0\xf1\xf4\xaeq\f\x7f\x04P\xbd\xa4\xcbJ\xe5P\x95\xcd\x8b\x020\xd9\xb6\x89s\xd5\x1c\x8dE\xb61\x19\xacT[\xe2\x94\xe4)@v\x99yy\xf4a#=\xe9\v\x94\x00\xa3\xa1#~?M\xef\x1c\xcbI\xdd\f-\x14Yw]\x05\f1\xf9\x1a\xe3~a\xf3\xfe+\xc5\xb9`j\xac7\x1cBE\xc7\xc3\x8c\xde]\xd5\xa0+q\xa1\x80\x06\x86 \"\xf7;\x96_T\xf0\x01\x13\x85\xa2\xe6\x1dAS\xcc\x1e\xcaVmS\xe1\x88}\x9c\xb3\xe4\xe0e\\*^\xe3\x15\xf4\xfe\xc5\xecG}\xeb\xad .\xbe\xd0\xf8\xa5e\x1e\x18\xa5S\xfc}DC\xe7;\x9a\x16\xdb\x93\xcd\xd5\x13=@\x9ek\xc6\x9fiQ\\\x05\xa1\x9f\x84S\xddaD\xe6{qu\xf4E\xb5\xa4d8\x13\xe1\xb6\x88v_un\xb2\x17\x8f\xb0 q}\\\xcd\x96', 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip_vti0\x00', 0x4}, 0x18) [ 2178.010711][ T8273] binder: 8269:8273 ioctl c0306201 20000140 returned -14 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)={0xb0, 0x0, 0x4, [{{0x3, 0x1, 0xba, 0x7fffffff, 0xb22, 0x3f, {0x5, 0x5, 0xffffffffffffffff, 0x0, 0x100000001, 0x502, 0x0, 0x800, 0x101, 0x5, 0x1f, 0x0, r1, 0x8, 0x8}}, {0x2, 0x1, 0x8, 0xffff, '#\tP\x81\xcbXE\x00'}}]}, 0xb0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@dev, @rand_addr, @private}, &(0x7f0000000240)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101800, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x3, 0x1, 0x3, 0x8, 0x0, 0x5, 0x800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x6}, 0x40000, 0x101, 0x800, 0x8, 0x4, 0x9, 0x1}, r5, 0x5, r7, 0x4) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x101}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:53:36 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffff7f00000000) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x4000007) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) socket$inet6_tcp(0xa, 0x1, 0x0) 10:53:36 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xffffffff00000000) [ 2178.774765][ T8314] binder: 8313:8314 ioctl c0306201 20000140 returned -14 10:53:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x25}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1200}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xe) 10:53:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9007) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x2033, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x7f) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80001, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x0) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x3e963000) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0xa1, @mcast2, 0x9}, {0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x200, [0x401, 0xfffffff7, 0x4, 0x6, 0x78, 0x2, 0xfffffffe, 0x3f]}, 0x5c) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:36 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x4e22, 0x81, @mcast1}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x48}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) 10:53:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x10) 10:53:37 executing program 1: r0 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x2000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2179.647595][ T8369] binder: 8363:8369 ioctl c0306201 20000140 returned -14 [ 2179.647601][ T8368] binder: 8364:8368 ioctl c0306201 20000140 returned -14 10:53:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5110000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2ff6dbab288a4537}, 0x20000010) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r7, 0x0, r8, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) io_submit(0x0, 0x3, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000000c0)="a0e4954a5e93f7d595891e787930689d225169ba12026538e0ec24b18b99d2aca3bf20b1efbc07114ea5f0482c82a6b822e5a41dc9364eb879a0f8bc60c6c8a634578e09aec1e023258547574777a5fa9be6f19a9edd4f8d15ea563b6598aafd1abbbe43752a1ccd37fef3651888e87f6b586c136121c5e4384360d4ae8e6461c1b9c29fea163738220ba37151b09da7faa1b7235e38b3a9090a951d4eabc4027b962312702f4c704246865a7b09a819f570017de74ed3816f9e6499fba2", 0xbe, 0x6bb, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8, r4, &(0x7f0000000240)="78c22ec9769d71a84e5bb8bf3eef996f05cf659f20d570a9f911323847c3fd2c3e8c095349840c863ba055f45ee1f39d510559fcb021a5f076a37c3016427aa6e737a7de32ac2610cbce89f2b688b85da14710adf19f59924af10f882ccec43c5493b457a580eb78b85ff654ca15c453c1a88035853b272c9bced5d272b3f5d7df", 0x81, 0x9, 0x0, 0x0, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x490, r0, &(0x7f0000000300)="b80f5387ad48a7e69357c6fd46b0ed8425", 0x11, 0x4bc3, 0x0, 0x2, r7}]) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r9, 0x0, r10, &(0x7f0000000040)=0xeeffffff00000000, 0x400000000003, 0x1) write$cgroup_type(r9, &(0x7f0000000000)='threaded\x00', 0x9) 10:53:37 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4a803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = getpid() ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000380)=""/117) sched_setattr(r8, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0xfffffff9, 0xffffffffffffffff}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r8, r1, 0x0, 0x15, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', r9}, 0x30) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fcdbdf251700000008000100000000000a001a00bbbbbbbbbbbb00000a001a000180c200000300000a000600aaaaaaaaaa0b00000a001a00dcc6296b1cfd000008000300", @ANYRES32=r7, @ANYBLOB="0100010019d61dec9e592f1a1645464800fa127a8f7e76ec45c2cac6648c09f724100893fb8760dab950f86cf275f025cf755b6e6a72c8dd0d1183be877c096bd06dbd09a6c7a12aadfd682c2c6cd289302685bcf1ae7acec72737b0ee4b879a80737196dee51bc9abc097c17714b38d7c5b15"], 0x5c}}, 0x4000004) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200, 0x0) 10:53:37 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)=']{+\\}\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xf6M\x80/\x7fB\xdc\xb1\xe1B\f>a1\xdb\xe7\x8aW\xc2\v\xae\x12E_\x9c(\xbcu\xe8\x1e`\x19Q\xa9\x13_M\xe7H\x9f\xd0\xde\xa2^5\x9d\xff\xf1 v\x9719_K\x82\xc0\xa2\xd8\x9c\xb6\x89g\x11-\x80\x876\xd9a\xf3!UG\xb3\xed', 0x7) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000180)=0x7) [ 2179.794005][ T8440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2179.805243][ T8440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2179.890047][ T8440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 10:53:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2179.936427][ T8440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2500}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:38 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x11) 10:53:38 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) setfsgid(r4) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f0000013000)) 10:53:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) [ 2180.470379][ T8412] binder: 8411:8412 ioctl c0306201 20000140 returned -14 10:53:38 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) accept$unix(r0, 0x0, &(0x7f0000000000)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x21c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0x52, 0x18, "3149393780a8f7f1986fa92485841e5854c3670074cde9e394c02617505260a8680ed8c0cad37076ee8254512f9adda3d0a3c3b2cae4b3910e28c728e5461b2624d94e48c2c32be9642c4d2e8a0b"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x2}}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_BSS_BASIC_RATES={0x93, 0x24, "78f848d079df0af05fd8270fdc7b3a5938319d0e722d6f068a3ab0f4b9407973827a6d9bb2e20b689f181ce89778067c25ba44db0c31ce05d9c9ac9d496129c2f1b0d7b883e6006dc3138ee34f50c71c174e30f9b63eac2e6fc167b670223b7e5754ccf7cdef07243c1205f18ed5b57c3e2efdd9f20534a96d568de0ea3c4f9a9f30a37bf3ba1b9d3755e197031157"}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}, @NL80211_ATTR_MESH_ID={0xf1, 0x18, "13a5fa54e1eed30322d77f9d6ba21e0cc52ba73a972a9f4e4a516cf4206adf444cccb3b4647daf8fd6b8230a990df17e0788ebb8895c8af1854803e2510940cb503bbeff40eba41c595bba88994f5e06403e90ca3ccddbbbd6d8808579c6e5a214b31d1b0434876112db2537a103a24370f13190845347ae1f45fc93b6d937b7737b734497820a3959f0b31635299be0f4f1d649730cf267804aedc2c88cc0621c13c398cfa35e50500f4082739cf892fb10f13b9456ade5bd772b9587ce6356b5cb3ee5e6a35ee4886911441d22f361c44e9882f15cf35ae27770ca03da37756c36790c75df77b0c924e8746c"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x6810}, 0x800) r5 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\t\x83\xc6\x00'/19, 0x6) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f00000004c0)={'hsr0\x00', 0xfff}) 10:53:38 executing program 1: r0 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x2}) 10:53:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) [ 2180.549671][ T8479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2180.559371][ T8479] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2180.587940][ T8484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 10:53:38 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) syncfs(r3) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r7 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) write$FUSE_GETXATTR(r7, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x4}}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x27}, 0x101}, 0x1c) 10:53:38 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) finit_module(r4, &(0x7f0000000000)='#^\x00', 0x3) [ 2180.598708][ T8484] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:38 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 2180.669972][ T22] audit: type=1400 audit(1592564018.677:40): avc: denied { module_load } for pid=8499 comm="syz-executor.4" path=2F6D656D66643A23095081CB5845202864656C6574656429 dev="tmpfs" ino=258634 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 10:53:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x60}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x12) 10:53:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) 10:53:39 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x88080, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000003, 0x4000010, r1, 0x833fc000) 10:53:39 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fcntl$getown(r4, 0x9) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:39 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, &(0x7f0000000000)) pipe2(&(0x7f00000001c0), 0x800) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000040)=0xfeffffff02000000, 0x3, 0x4) r6 = dup2(r5, r2) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f0000000140)=0x14) [ 2181.286901][ T8465] binder: 8464:8465 ioctl c0306201 20000140 returned -14 [ 2181.320612][ T8470] binder: 8468:8470 ioctl c0306201 20000140 returned -14 10:53:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0xfffffffffffffffe, 0x6, {{0x1, 0x3, 0xffffffffffffff7f, 0xb42, 0x7, 0x1, {0x5, 0x9, 0x1, 0x4, 0x0, 0xff, 0x3, 0xfffffff8, 0x7, 0x8, 0xfffffc55, r2, r5, 0xff, 0x20a6affb}}, {0x0, 0x22}}}, 0xa0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000140)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r8 = accept$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private0, 0x1}, 0x1c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, r0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:39 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:39 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000180)="0ba89f8312806a35cc07cf04fccc7354e6374e6a7578e41ecff6c73700cda6aa323c8c137aebf75499cab12a019506e11c81bfcf73768743f9faa4ee6776e42c319e665739e1569395d4dcd5738bf553cf26ca4e7ee49dc22a3dba537b71dbfe3d23f5c9b28b5cfb4e91e7d73cd811b5ff48a58f4f5a2d465f8b74709fc9cd8d5519c06162413bd9f1e45b8a0f61953ed789dd528f3979de0f58d9e0610b631e1f000000000000000000", 0xaa) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:39 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x5) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r1) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8c77e0456bec4f94", 0x8, r1) keyctl$setperm(0x5, r4, 0x0) 10:53:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r5, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000440)='tmpfs\x00', &(0x7f0000000480)='./file0\x00', 0x5072, 0xa, &(0x7f0000000bc0)=[{&(0x7f00000004c0)="0fdb8534a752fba64764cb49c8f4002e78d925148cda3bd2c1e4fbfcbc83c287a2ece06bb108519f190b76269d2479a9504fe833335a54cfe4c099f7976f98ef7d24cc3b9d5540ea47bbcb", 0x4b, 0x7fff}, {&(0x7f0000000540)="3c672f7b5b8c866dae6d457c1fbe54ecca79bff6c705cdce5a24fb2e730e2546e88d8c5f778fe2f6f57d96371b27ff5c8b38e8b872083811641b62d79305c59308e566002f873d7524b0f41857e1b8a7b03fecd084354f095b1b6d68e6bfd0e86e9e5f02f8b02d214e501a1204e513c672d5aeb8156750a58ed80b4ddf494a868b9f17cac3a1", 0x86, 0xfffffffffffffff7}, {&(0x7f0000000600)="e8aae6f1b84f5297ee3815413b1ccb55d3caa8b8b9b1d5343be9001f7f56be83504621b0e1ff4911f9704370a5e481d241e810b15ab999ff9740496d0d87afc10853a8e2cb43a7321680c363ace17b9f10c2f35f3ec1239bd3708d759f3a905c535f37704d8df825d03ebf9f3de041b8697daaac73019c6f7497bf784bda6e17f936bafe6598a8e2dc25c4d79f330c470f3aa5161f410b7809ec44c3a002", 0x9e, 0x9}, {&(0x7f00000006c0)="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", 0xfa, 0x6}, {&(0x7f00000007c0)="4c819ea611be6df0516b29e943f1d0de93e064524317641088f95cd2facda84f908875266ab2af25d2c98eea68802a28bac31fcdd7487de202", 0x39, 0x400}, {&(0x7f0000000800)="9d901eeabe90e4927b54006ecf0e1b953bbd274158747534d3c1dfe1619a9ccdc514d41ddf6bea991a5da90adaa6c029ea5f4ec218f957aecfe792c2cfa4b32c9cd69a3d94fe48c5dabbb46c674ebf3d37242402", 0x54, 0x3f}, {&(0x7f0000000880)="68bf69fbb0192d5e0451ee0d8c4c4ffb644419283e77db4bf9c89afc019fb7af648c0c16f85298056c19d168469c931bd83256f0ba0829e87e0380365e98242df01f5fd57eec468f6b20fcb0fcc22a5fedbafea802aa99475685bde7d467dc3979599223a1fc5569dae131", 0x6b, 0x4}, {&(0x7f0000000900)="20f12b1bb0f9fd4ca5ca615a907fc903641e24f181f7a6c8f176077f6ece45be041f349eb68c1e3dccff49e9cd18d30a97e8e4a4777c8a2911a3b84ff19e6975f941e253beec41879a7b1854fb41157bd669b932baa58595a9d9607fe7b61e8619a22ba50b2c6873999a6a0d76381758de94ee6111062b1ec5076d4ec9ad5673e9268b66b8140134b338bb2b4bf81b9288e8e2467d50e6b003dac1625084001c6f22b6b8f112328aa6b2b167c488e7d97fb7f63e18504121ffedd300bf358cf7078be6236b20f95d67e776acf1a12bee082ad959", 0xd4, 0x100000000}, {&(0x7f0000000a00)="7c464541a0f78f114e33f221a9e82c63cd6e9fab5367d940c3f9a8a16ae5347ad257563ba3808a9c1968798014880f227fd4e18f0a9cbddc3029ee898d0d8e019ee52d3edfbfcfdcceb26db40246acd22a35ae7741abf4457a40b16951103fbaf49477e830916c04b99c77dcd1e6af052aebeb149f52a0c1ae3eadb184bf0a25d9d5f5e029add196ca2e7ff27cd42d283747a7fb400ddd5531ff31028302ea379ef3da77ab6c37dff4089331fdd8caacc69dab117944762448f894af08392afa5913b0cd4510239ff1c51b84c4baa2c3eb21cde284f7d4985dfdcca4035cbb416b4811c4de06b85612a8f0", 0xeb, 0x401}, {&(0x7f0000000b00)="dd2624b86a68be38229be3143f6069252c4edb0b78df3c4704fd677c533caf40f2b924ee15a02100aef63827c71188c8eacb4225398b94a4a2099ce4df5f636c34f6198f09323ae1c6b01b2bfbb12ad24912c6a55a34a925e82532bbf2be4503bccb055e47efaf1eb1c4710bbfe5335679ec453c9b00fd993eb9ed78344d279b8a2de6d5de9acd2682f16869deff0cdc40bb039a", 0x94, 0x3}], 0x10, &(0x7f0000000cc0)={[{@huge_always={'huge=always', 0x3d, 'udp\x00'}}], [{@obj_role={'obj_role', 0x3d, '#\tP\x81\xcbXE\x00'}}, {@smackfshat={'smackfshat'}}]}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r5, 0x412, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x489, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x15) r6 = accept4(r1, &(0x7f00000003c0)=@ax25={{}, [@rose, @remote, @default, @null, @remote, @default, @default, @bcast]}, &(0x7f0000000240)=0x80, 0x80800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000002c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) fchdir(r1) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x80, @remote, 0x7}, 0x1c) 10:53:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x68}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x25) 10:53:40 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0xffffffff}], 0x1, 0x10100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048800}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000380)={'wg2\x00', 0x200}) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, 0x2, 0x0, 0x3, 0x7, 0x2}, 0x20) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:40 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2800, 0x0) fcntl$setpipe(r0, 0x407, 0x7) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) [ 2182.103591][ T8515] binder: 8514:8515 ioctl c0306201 20000140 returned -14 [ 2182.140461][ T8522] binder: 8519:8522 ioctl c0306201 20000140 returned -14 10:53:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000000b05000000000000000000050000000800024000000003080002400000000507000100215e00000800034000007bfd18df02400000000308000240000000040800034000000000080001002f2d29000800034000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20001041) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x40130, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendto$inet6(r1, &(0x7f0000000000)="0246ba3acb4c30d72cc87408d6cde7e97f02cd7f53199723de93e30b070ea12c15b806993a447f4db8f2049f611de03a2368e68b4d3e603f1da39dab8d90617521564970bea397b1d2ae747945d869c440104a8e030fb94e7acce62a3276ffec2606bfd9ad578706a53ce3c80137172005ac79b453407e9cc8a252791d385eec5bec23fbb92067647396f5ed3f1cc9bd2ca04f16363cbad0dac23550e6fc02677d721928934c265b20da7e5fa66c743e6091f0178cc2af870a8e88cd48d692613f7491402c93238a463277", 0xcb, 0x90, &(0x7f0000000100)={0xa, 0x4e22, 0x7ff, @loopback, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x8001, 0x6, 0x7, 0x3}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 10:53:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:40 executing program 1: r0 = getpid() r1 = socket(0x15, 0x6, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000004c0), &(0x7f0000000500)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e24, 0x5, @mcast2, 0x4}}, 0x0, 0x0, 0x37, 0x0, "55db70cc11fe809fa6eae1ddb8f6dd0a1b62de97212bd5abd29cd0dc967ae68f47efafc0278dbf073e332294cd89b7f6557cc10f71434dc42c75f5c90b665dbc98053c2a81b0ee3a97860552d39cc126"}, 0xd8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r0, 0x12) [ 2182.218170][ T8598] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2182.228358][ T8598] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00 \x00%\xd7\xd0\xec?\xff!\xe4\xda\xf8\xba\xd7\xf1\x04\xbfW\xb7\x0e\x13\fu\xc2\xdb\xd0uP} \xda\xa7FyV\xe0X*Q\xd9@\xef\xcacV\x90~\x1d $\xd2\xe3\x9a\xf2Z\xdc\xce\x17\x98X\"\x86UB\xa1=\x8b\xb2\xe6%4\xc0\x9f5\\\xe6<\xb9\x99\xf9y\t\xa8Q\xfe\xb5.\xa0\xe9\x8b\x82\xd2\x854\xd9\xf8\xdc.\xaa\x81\x15', 0x6) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0x10001}, 0x1c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) dup(r3) getsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xcf) 10:53:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:41 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x74, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x88c1) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xc, 0x2010, 0xffffffffffffffff, 0xde44f000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000dbe691f9110000000c00098008000100ba1d69277c94eca79f921f95a0ad40f32d8d2ab37a13f606ae0a0a7a28bdbf652104f8f780c564c811e0b6b8c24654993f61ae03a40219c9984b79d93a3c2cb431004b3d19d3b72992a89952af84476e7e0ec74ba6533e11ab00174e443417dff1fec29daf0c12d4973541f8747336226f2658209df2200c5bd3b0d9415ca0ab7d8a11989f6821c4328c9116169bb39934857bedde8222732e5cea0dff8d54add621ada83ceffe2e4426c42565e474e5c1b53690c4beaf1cbb3795115b7300000080ad"], 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7b4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd941}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004004}, 0x814) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r5) keyctl$read(0x3, r6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r7, 0x0, r8, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a1000000", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf25060000006800018038000400200001000a004e230000000000000000000000000000000000000000090000001400020002004e217f00000100000000000000002c00028008000400080000000800020000000100080004000100000008000300800000000800040003000000240009800800020003000000080001000600000008000100000100000800010001040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) keyctl$invalidate(0x15, r6) [ 2182.968063][ T8578] binder: 8572:8578 ioctl c0306201 20000140 returned -14 10:53:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x84, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7f}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x0) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x74}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2800, 0x0) fcntl$setpipe(r0, 0x407, 0x7) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x300) 10:53:41 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='gretap0\x00'}) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2183.794041][ T8626] binder: 8622:8626 ioctl c0306201 20000140 returned -14 [ 2183.801754][ T8629] binder: 8624:8629 ioctl c0306201 20000140 returned -14 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x5) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r1) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8c77e0456bec4f94", 0x8, r1) keyctl$setperm(0x5, r4, 0x0) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6800}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:42 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x60000000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00800002080101000000000000000002000001050003002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x500) 10:53:42 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='gretap0\x00'}) 10:53:42 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x40, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x32}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xff9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000005) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4}, 0x0) r3 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r3, 0x0, 0x0, 0x400351c) lseek(r3, 0x0, 0x3) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000380)) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0)) 10:53:42 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)=']{+\\}\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xf6M\x80/\x7fB\xdc\xb1\xe1B\f>a1\xdb\xe7\x8aW\xc2\v\xae\x12E_\x9c(\xbcu\xe8\x1e`\x19Q\xa9\x13_M\xe7H\x9f\xd0\xde\xa2^5\x9d\xff\xf1 v\x9719_K\x82\xc0\xa2\xd8\x9c\xb6\x89g\x11-\x80\x876\xd9a\xf3!UG\xb3\xed', 0x7) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000180)=0x7) 10:53:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:42 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)=']{+\\}\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xf6M\x80/\x7fB\xdc\xb1\xe1B\f>a1\xdb\xe7\x8aW\xc2\v\xae\x12E_\x9c(\xbcu\xe8\x1e`\x19Q\xa9\x13_M\xe7H\x9f\xd0\xde\xa2^5\x9d\xff\xf1 v\x9719_K\x82\xc0\xa2\xd8\x9c\xb6\x89g\x11-\x80\x876\xd9a\xf3!UG\xb3\xed', 0x7) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000180)=0x7) 10:53:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x600) 10:53:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x300}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:43 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)=']{+\\}\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xf6M\x80/\x7fB\xdc\xb1\xe1B\f>a1\xdb\xe7\x8aW\xc2\v\xae\x12E_\x9c(\xbcu\xe8\x1e`\x19Q\xa9\x13_M\xe7H\x9f\xd0\xde\xa2^5\x9d\xff\xf1 v\x9719_K\x82\xc0\xa2\xd8\x9c\xb6\x89g\x11-\x80\x876\xd9a\xf3!UG\xb3\xed', 0x7) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000180)=0x7) 10:53:43 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0xffffffff, @local}}, {{0xa, 0x4e22, 0x0, @loopback, 0xfffffffc}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x700) 10:53:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2185.427567][ T8706] binder: 8705:8706 ioctl c0306201 20000140 returned -14 10:53:43 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/179, 0xb3}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000280)}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000000e40)=""/129, 0x81}], 0xc, &(0x7f0000000940)=""/22, 0x16}, 0x100}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000b40)=""/78, 0x4e}], 0x3, &(0x7f0000000d00)=""/110, 0x6e}, 0x2}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:43 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 10:53:43 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 10:53:43 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x900) 10:53:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7400}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x500}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:44 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 10:53:44 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x3a, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xa00) [ 2186.247835][ T8763] binder: 8761:8763 ioctl c0306201 20000140 returned -14 [ 2186.261353][ T8768] binder: 8765:8768 ioctl c0306201 20000140 returned -14 10:53:44 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}, 0x100}}, {{0xa, 0x4e22, 0x10000, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:44 executing program 4 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x3a, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000013000)=0x2f) 10:53:44 executing program 1: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="e4000000290200030000001003000000060000000000000008000000000000000107002e2f66696c65300102000000040000000000000004000000000000000207002e2f66696c65304000000000080000000000000000010000000000000307002e2f66696c65302004000000050000000000000001000000000000000707002e2f66696c65300202000000040000000000000007000000000000000007002e2f66696c65300404000000070000000000000002000000000000000307002e2f66696c6530020100000005000000000000007c090000000000008007002e2f66696c6530d5ee046e62b5bd64808594aa16a7d9b6f1e8d1a61bf0624c1f5115c0e79fc54c8e1507b4e1aa598248b08571edc7ab84"], 0xe4) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1dba}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x118, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff65ca}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3de9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c72}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x118}}, 0x1) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a00}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x600}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xb00) 10:53:45 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00648102012a0000000010efe2b7c0b20000000000007fff00000900050e0006007369875524f91038d8bb000000000000000000002a1ab146183e8a79c513ed2e022990b8058851d70c8a0a2172b6ce43d862d995672d5709c78db320d062256855168ec8af1c5299f1334a3525b4af4d53b109c7e6bae9080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x840) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/134, 0x86}], 0x1, 0x8) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000013000)=0x2f) [ 2187.082892][ T8827] binder: 8824:8827 ioctl c0306201 20000140 returned -14 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x700}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000013000)=0x2f) 10:53:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc00) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xd00) 10:53:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2188.713769][ T8913] binder: 8911:8913 ioctl c0306201 20000140 returned -14 10:53:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x900}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xe00) 10:53:46 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@empty, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="7d09000000000000ffffffff471d5e02"], 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4020000aa6779452edf0c9d20e85bc8143762de097441234e99f46fd41dd5b785d82bb09caab292812099d47ef697eeb5d052dde30f", @ANYRES64, @ANYBLOB="00022abd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="8c02028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000180000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESOCT, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400261300003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYRESDEC], 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, &(0x7f0000013000)=0x2f) [ 2188.753990][ T8919] binder: 8914:8919 ioctl c0306201 20000140 returned -14 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000013000)=0x2f) 10:53:46 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/24, 0x18}], 0x1}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, &(0x7f0000000180)={0x38, 0x1, 0x10000053, 0xbe09, 0x4, 0x10000, 0x3, 0x100000001, 0x100, 0x400}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = open$dir(&(0x7f0000000280)='./file0\x00', 0x101000, 0x4) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000340)=0x1) 10:53:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000013000)=0x2f) 10:53:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x3000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2189.531190][ T8964] binder: 8962:8964 ioctl c0306201 20000140 returned -14 10:53:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000013000)=0x2f) 10:53:47 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netlink(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @mcast2}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x81, 0x4, 0x3}, 0xe6}}, 0x18) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000400)) r3 = syz_open_procfs(r2, &(0x7f0000000280)='smaps\x00') ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000003c0)={0x6, &(0x7f0000000340)="59ceb48dbe068ebb3191805b21e63f1126984363d70f7898a1c1f705ed59034574805b7a731c7032f0e8a5cc7f0ae2c498e34d8377528491b919d7efe8366feb1d334a9d4a11e366d65a81665d2f0feb76db44"}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1100) 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000013000)=0x2f) 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000013000)=0x2f) 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) [ 2189.581593][ T8974] binder: 8970:8974 ioctl c0306201 20000140 returned -14 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x36, 0x0, &(0x7f0000013000)=0x2f) 10:53:47 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1a1e, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/85, 0x55}], 0x8, 0x7) 10:53:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x37, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2190.348507][ T9011] binder: 9010:9011 ioctl c0306201 20000140 returned -14 10:53:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:48 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x77) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000000)=0x7, 0x4) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1200) 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3b, 0x0, &(0x7f0000013000)=0x2f) [ 2190.404361][ T9018] binder: 9015:9018 ioctl c0306201 20000140 returned -14 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3d, 0x0, &(0x7f0000013000)=0x2f) 10:53:48 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/210, 0xd2}], 0x2}, 0x1}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001640)=""/143, 0x8f}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000001780)=""/176, 0xb0}, {&(0x7f0000001840)=""/119, 0x77}, {&(0x7f00000018c0)=""/99, 0x63}], 0x8, &(0x7f00000019c0)=""/132, 0x84}, 0x9}, {{&(0x7f0000001a80)=@l2tp6, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/182, 0xb6}, {&(0x7f0000001c80)=""/174, 0xae}], 0x2, &(0x7f0000001d40)=""/221, 0xdd}, 0x101}, {{&(0x7f0000001e40)=@alg, 0x80, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002140)=""/193, 0xc1}, {&(0x7f0000002240)=""/214, 0xd6}, {&(0x7f0000002340)=""/188, 0xbc}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/166, 0xa6}], 0x5}, 0x4}], 0x5, 0x40, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x6, 0x4) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) setpgid(r5, r6) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x5000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2191.164667][ T9061] binder: 9060:9061 ioctl c0306201 20000140 returned -14 10:53:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0x2f) 10:53:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:49 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d00010000b0ac953e7b6746bb2b8244", @ANYRES32=0x0, @ANYBLOB="00001900ad"], 0x28}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6}, 0x10) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) waitid(0x0, r5, &(0x7f0000000300), 0x2, &(0x7f0000000380)) syz_open_procfs(r4, &(0x7f00000001c0)='fd/4\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x2500) 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000013000)=0x2f) 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)=0x2f) 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000013000)=0x2f) [ 2191.232387][ T9072] binder: 9065:9072 ioctl c0306201 20000140 returned -14 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000013000)=0x2f) 10:53:49 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000340)="e4110915878ea63289462efe24ee840aa2ec2d785ba262e68eb696752964b19604e22a59306763bd58f95daa5a5aa422dda1004d15d809e076489bfe986fddb9db0771de81c2d60bc3fd4499bb08f37b46872875617653681165ab6440be15d38d0634044b8ca518d4af87a1d99da2e8fc765106ca889305ffca687085b654b1449745a934a4f45b25db8d37697993bfabcd39ebd8b0b33298b8b6359a2c4dc1d7e18ee35ec78ed0096abae0886888fd7f54ad8d3db7fd8b89831b12210700b678585a", 0xc3}, {&(0x7f0000000180)="9c0f7978ae622de76167e8e78404947a2ff09e6b87af0eb2c9fa9728f12da7bd6f18a37ff0f8a0c92010233c30fbc4fbbf4e4ef0539486c32f211818ca73ee4e511189eb39627628931ec3c6", 0x4c}, {&(0x7f0000000200)="f409364b891f056c6f52f36a7f0b39a5d73b4e0719e58921148ee96e20", 0x1d}, {&(0x7f0000000440)="244ec049b3b1f8beeaf6647a8430ada7fa696713ab6d108965d9a48fc26cc4d8d7b7fb8a48b703205ba563278c6bc3b0faeb5e2f1e183d4f8c7f1c2d54426f917cd8d3b9b4ad13fb5d1f2de6bfd354106f2e1cb64ef5d581718310f153c0d24e27ba36b583e9866bb0a2d826d6577ad49e08a907e0ae2dd516791c41e3fcbe88eb8b061756eeebe79c69b15906bd3bc014c3acbe41a76edc59", 0x99}], 0x5, 0x9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2191.982070][ T9107] binder: 9106:9107 ioctl c0306201 20000140 returned -14 10:53:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:50 executing program 1: getpid() r0 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000003c0)=0x100008, 0x4) r1 = gettid() sched_setattr(r1, &(0x7f0000000180)={0x38, 0x0, 0x1a, 0x4, 0x0, 0x8, 0x400, 0x4, 0xb00000, 0x6}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0xa6) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000280), 0x8d, 0x1, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380), 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:53:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x4000) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000013000)=0x2f) [ 2192.054307][ T9114] binder: 9111:9114 ioctl c0306201 20000140 returned -14 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e22, @multicast1}}) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') 10:53:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2192.799519][ T9153] binder: 9152:9153 ioctl c0306201 20000140 returned -14 10:53:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000326bd7000fbdbdf250f000000600002800800070000000000060002004e20000006000b000200000006000b0002000000080007000500000006000f000104000005000d00010000000800030002000000060002004e23000014000100ac14143b000000000000000000000000280003800500080006000000050008000800000014000200766972745f7769666930000000000000080004000300000008000400da93000008000600050000000800050000800000"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_getattr(r6, &(0x7f0000000400)={0x38}, 0x38, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xcf00) 10:53:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010000000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040001000000000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="08c30001", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="10000000000000002000070000000000"], 0x5c, 0x2) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:50 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000280)={&(0x7f0000000180)=""/186, 0xba}) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0xc6df5fe45a90f985, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48008) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x3089b858976eca80) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0xc000) 10:53:51 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) write$rfkill(r6, &(0x7f00000001c0)={0xfffffff9, 0x1, 0x1}, 0x8) 10:53:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x100000) 10:53:51 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/162, 0xfffffffffffffd52}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f0000000940)=""/82, 0x52}, {&(0x7f00000009c0)=""/160, 0xa0}, {&(0x7f00000008c0)=""/6, 0x3}, {&(0x7f0000000a80)=""/115, 0x73}], 0xa}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0)="e702c52434afd9a8a272dd3d1798a3da2f9e1bd120e099526ee53d10ea08f66651ce6d0d56056e5bb5ff33ded2db9ef2", 0x30) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0xfc, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r4]}, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000340)={0x20, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x126) r7 = getpid() sched_setattr(r7, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r7, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) 10:53:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x8000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2193.616101][ T9201] binder: 9200:9201 ioctl c0306201 20000140 returned -14 10:53:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1100}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:51 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x7, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x1, 0x20, 0xc, "8f61971cd0d76967c25558d608a692266642c77b27537b2506eca4a1103228b65342fd99227cb24e5d5fc627b61f898d37e0e19d56c7f8952e006ef61eaac81a", "afb9326f52ac102b02307e616e1eab8167b5fb98fb680e0ed5bddf8453c2e6da", [0x40]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:51 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @multicast1}, &(0x7f0000000280)=0xc) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x9, 0x8034, 0x6, 0x4}}) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xf0ff7f) 10:53:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000100)=0x3) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockname$tipc(r4, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d22f0c000000", @ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf2505000000050030000000000008003b00080000000600280002000000"], 0x2c}}, 0x14040800) [ 2193.706417][ T9211] binder: 9207:9211 ioctl c0306201 20000140 returned -14 10:53:51 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write(r4, &(0x7f0000000280)="6a548bd2c685f92996edb0d7a5ea46961b527328a0929d7d9fac822e37d53307356c2f5d64fb88604bcbde93b482fa4619d53ab353ce0edce7f62726d4f65a924bffeb570268ef5228db392a6ce5e60a5964085c19559823df65350c147a1c7d477c009c0d5a5c2bc380b43f8833fbf9bfb3c4bbd6fa1fa49c8fc115932657b2559bc2e03059013e4f80d62c9ae3b5eb7039b9f7eda2b3fa1b84f5e2a0a7213026b91e60ba42d5c1e5cba426062d0ef50e24d493ed3b3bbb87e812781b7a97bca7291c14c068b78c215f285d5a7e02be044808b1ea0ede76bb239589f896e072d62fe3434574ed16af17555f348bafa4d226a7dd5eac24fdfdcae9d8", 0xfc) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, r1, 0x0) getpeername(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x1, 'bridge0\x00', {}, 0xa9a6}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f6c70da010000000000e1f7bafd28017e53be83001dffff0000ffffde498d66e8a5337f54b6711f34ad5923551b236f5d763b3a84849ea2289725675cc845204870d5a752f5c3b2f6855dc8d860c2c5948a84f491f5bc371251bc5d2f561f4bd2f448887984373f4a45e4e5131385a8ddfd0ed694e067556b000000000000000000"], 0x18, r0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r1) keyctl$reject(0x13, r0, 0x6, 0x2, r1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x1c}, 0x10) fcntl$getown(r2, 0x9) r3 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x2100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) rt_sigqueueinfo(r3, 0x1b, &(0x7f0000000180)={0x15, 0x80000000, 0x800}) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, &(0x7f0000000280)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1, 0x4e24, 0x4000, 0x4e24, 0xfffa, 0x2, 0x20, 0x80, 0x2b}, {0x6, 0x80, 0x219, 0x9, 0x884, 0xffffffffffffffff, 0x10001, 0x3}, {0x4, 0x553a, 0xfffffffffffffff7, 0x1ff}, 0x6, 0x6e6bb7, 0x1, 0x1, 0x2}, {{@in6=@private0, 0x4d2, 0x3c}, 0x2, @in6=@local, 0x3502, 0x2, 0x3, 0x4f, 0x9, 0x6, 0x3}}, 0xe8) 10:53:51 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000100)="f067bd6286f6177b4eb542abc09d9511a99d7bd649ca5342b10c8a45d34c8c373dbb7219c77d0a22d3fbedffad0a216e208fa3a3d6ed8854f3670e49788f89b1dca8c85848fdb7365f3635288b040547abc4f0b4c41322", &(0x7f0000000180)=""/62}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x7) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r4, &(0x7f00000000c0)={{0x0, 0x2710}, 0x1, 0x7ff, 0x20}, 0x18) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x9000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) [ 2194.432678][ T9256] binder: 9255:9256 ioctl c0306201 20000140 returned -14 10:53:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1200}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4f8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8003}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1000000) 10:53:52 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, {{0xa, 0x4e22, 0xffff2740, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 10:53:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2194.528762][ T9264] binder: 9260:9264 ioctl c0306201 20000140 returned -14 [ 2194.558789][ T9324] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2194.568580][ T9324] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:52 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1}, 0xffff}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0xffffffff, {{0xa, 0x2, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x4e22, 0x0, @mcast1}}}, 0x14d) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000280)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) ioctl(r6, 0x401, &(0x7f00000001c0)="d0e66fd24f2cf8870dd45072dc635444d63fa7cf6cd2435b24450f8fd12f1d8d6ba7e1653a03a7eccd89c457e9687b53339bbad38b4390be5611a3ac77a8df5ac7d7c04e67e9c0b94d201a") sched_setattr(r2, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x600, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x10d000, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x4, 0x6, 0x97, &(0x7f0000000140)}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000980)={0x3d, 0x2, &(0x7f0000000580)="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"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f00000000c0)=0x4) socket$inet6(0xa, 0x1, 0x40) [ 2194.584854][ T9329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2194.594484][ T9329] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:53:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x80000001, 0x7fff, 0x401}, 0xc) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x501100) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000100)={0x8, 0x1}) 10:53:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:52 executing program 1: r0 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r4, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000000500)}]) io_pgetevents(r4, 0x7, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x6]}, 0x8}) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000480)=0x80) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') unshare(0x20000000) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x0, 0xff, 0x7f, 0x0, 0x81, 0x8291, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffff001, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x4000a, 0x40, 0x0, 0x9, 0x10001, 0xfffffe00, 0x3}, r0, 0x7, r7, 0x0) preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2195.250153][ T9313] binder: 9312:9313 ioctl c0306201 20000140 returned -14 10:53:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:53 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1000}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, r3, 0x400) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x5, 0x10000010, 0x0, 0x40000000, 0x2, 0x1000080000, 0x101, 0xfffffff9}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x2000000) 10:53:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001a00)={'wg1\x00'}) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) llistxattr(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)=""/207, 0xcf) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) dup(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000019c0)={0x0, 'geneve1\x00'}, 0x18) splice(r4, 0x0, r5, &(0x7f0000000100)=0x2, 0x400000000003, 0x0) vmsplice(r4, &(0x7f0000001900)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="f112b760330462b2fa1a662103ebc133205dddb164af4e490d22f0f75020e45706595b65cbbc4f2985601485c343a6372b476eea5022462fce61d525d42a94ef554c00413f27ff6efe33d8153f9843b7d01e50f04da8e8fdf1dfcac48e66daf6d31fef6856c3053ff54f6f0ef288832eae0d2f1f0a5d07e9414b5d1fbc6714e8ea68218ce583b61bc4ea04ac66b0836df35aaa3e59c2d77f0cc3bca1e3459afa451ca150dbaf8f169d85cc11b51b5beb4196bebfbdeb9bde36fe1362846a9bcd5b947595464bbc7001", 0xc9}, {&(0x7f0000001340)="8fcdf327262796e9f5916e9ba4023c6c03f150b0e1d7d675203b877e13a0ac1bc40cdc4307b6b1b7d6065c91604b37154853522c1afb94f29e76c95f1e3649845e324fb95e61a9896713e3eddc747377b4eca2081f3846d8a4aac2560ccb806a3b8d2e7b63305fdce6f3cd41a0c307810c5aba0ec6a02f660961ccf4104b92ecfba7d758e915db4d774d85ad406ef7c9d1a832ccc688eb16af864143fb698f4513e5f9bfaa89bfa02d16589f88ace94359351313f8c47d3ba47dca9c35ca0161cd99e9f4fc9d765580971689877e0456ea4a58bdf95dd6647cef43e1e60b6df6", 0xe0}, {&(0x7f0000000140)="590675564d5e7a7e0f9f349c0c0738edbb23a2c5348b7eb064be79b6cf6ce58e68a98b93f1335f41e93f67db0a5f98ebc173c0e92ad604bb272de78b6e2e5c1c8557abd28e5c7ed62f77e31ddda8e69b1fbc97d4cc4e1ef106b14bb1788fbc7d8565a126c75f1310dc3f111f0ef4b7cc53bed79ea48b6eaf35518d8321939927f759169a5fac", 0x86}, {&(0x7f0000001440)="4b7dd606fe54da7c4244c3e699228f273eb04f988aa3cdf5b0caa207247e50fbbb56b67486c770c96ba0750f51d9ff80c7a690fab493db5329a43a50c5fdd04f66ec61df66f83cff1906ee8b5d7d40dd009d32ac87006c3e5a66aece5eeaac99fd0aefd68c62883e40fcdfb57c800615bd609444ee2d0228db494e240d65ed35c1b0d0fc5d5efa5a79f5ddad1064ba735e0e438e958b679cc952c2d0929367f1af1b99733781ce79d0ca187974ea7a06d4441342bbe206de1b1efe42ecae84c7eaea896eb3c85661", 0xc8}, {&(0x7f0000001540)="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", 0xfc}, {&(0x7f0000001640)="827b3230906ad358e00d723a215dd7f7465a29bcfc34a95251fd0be6bff5807bafe310684ebaa1bb941a1b71943263adcc6acc5405c3799e885047c6a952b3657e9799f021373bc3fb27e32f68a1b4a1bee8397262a4e185d54181aefa557a07c04ab8ddfd653a24ee565368623589180c1c558eca1d805113cfcc74293fa6cab9b54cd16a1869785db1dd0d4ef51126cf288de450a05af1ec55f14811b6e4f35f7df70d53fc91f09fa9e2d437bffd8291f13680269a139b047db3ee2d2612c92a9b2f0282f4ed13aedef9c774246deb1625fb7b9e0ed500305bdc1e5637abd2c4f388044604e152f4d99d30e7f9c61014ec", 0xf2}, {&(0x7f0000001740)="2da7ac8709c99560b6c7f5fc9c1816a03162191d8a2b8f3c7b488a168fe02065511ba3543e6c6d949b52b5a556bfe32f5a43ece0e68872838847424b4176775afed63a2ecc9be9ea64fd7b264155475bda088ce043334ea5c570b2a76b461eb80c21c531afef3991099ab04ffcd4cfe618e8d658ce45538bb0d0d2987834b405022ae85ad182dc407c10c0851f38d9a08d9b7101eeb8ab67a593675eefaf5625a2a663ff6f9428161c259ce16a5bb9e1b999f48bff308a2b44a9e08d4b73abfdc67258888a86b2bc2905bac30fdf14ef589feeb0ab5334bd583a3ca64dd0f6df77300a58953595c20094e9ca11ae5058b8f52b9d9e", 0xf5}, {&(0x7f0000001840)="86b08ea7421f47e4e80c0091fb1bac63c68493c8441730b6dabc9e98056d8407b4d1114bff9e455d24e68c7f09ab2558ed42a888c2de880904a2118736948a1278d4e8c069bfc32750a1968aa48e27d2e4cfd5a9989da61517b053a13bed11b401aa1c1437ccc949e0b3a3896d57d34de1b7f32dda9bd6898b6402d2a4e911976801e00b79b8d0048f6a39d463b405490c2b7fb5a8e1826fa7bebf037543160fa42adc2b52743e9c192c23c249b562fd1b0a12fff7e0d18e6165a18ae29f", 0xbe}], 0x9, 0x8) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/7, &(0x7f00000000c0)=0x7) [ 2195.350941][ T9320] binder: 9317:9320 ioctl c0306201 20000140 returned -14 10:53:53 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x2f, 0x0, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'erspan0\x00', {0x72}, 0xe441}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) fchownat(r1, &(0x7f0000000180)='./file0\x00', r2, r5, 0x1400) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x3000000) 10:53:53 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x7f, 0x0, 0xffffffff, 0x0, 0x100101, 0xfffffffd, 0x2}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0x3, 0x400000000003, 0x9) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x3, 0x1, 0x267f, 0x1, 0x4, 0x2}) sched_setattr(r2, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) getpriority(0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2500}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x4000000) 10:53:54 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0, 0xfffffffffffffd47}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7e62ead037cd2157df6b2bcb47fa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b00"/209, 0xd1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) 10:53:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:54 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'batadv_slave_0\x00', {'veth1_vlan\x00'}, 0xae}) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0xc, 0x70, 0x81, 0x5, 0x1, 0x1, 0x0, 0x1, 0x30080, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x74f4, 0x2, @perf_config_ext={0xffff, 0x200}, 0x4a001, 0x7f, 0x1, 0x8, 0x100000001, 0x1, 0x89b}, 0xffffffffffffffff, 0x9, r2, 0xb) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="eac0783c19b57e6ca6b3bef3998f405198efb1d81b5604e4a783be48b245a7419236a984eea4e1c0e13002fec2e7ae4b3696d174d737dc39f6fe2dfac61557f49dfab22823bef45b15088fa84d17803131391e42a9181c1bafc8ac5cf254d08f5ddddfab85d84a9e2f84d970bf30677d752082b4ebede8098a398c7cd3539b3642e4e1151e4c54b41bff58ebecad7625c4c154ae41a4a589cddf859abc806fc84701c1696a50012de3669c77a84a26eab89677a3b752749463c7fc783d220479e316339918a6781fe64c6621d275978e1b2657f7d97f6693c0ecba2cb753193a", 0x139}], 0x1, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 2196.181561][ T9389] binder: 9384:9389 ioctl c0306201 20000140 returned -14 10:53:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x2}) 10:53:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fadvise64(r4, 0x1f, 0x8, 0x4) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x13c, 0x31, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdee7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb2f}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4080000}, 0x20004004) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:54 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x101, 0xfffffffe}, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2a8000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x30080, 0x0) 10:53:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = accept$unix(r1, 0x0, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8001, 0x4) 10:53:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2197.003209][ T9450] binder: 9448:9450 ioctl c0306201 20000140 returned -14 [ 2197.010449][ T9454] binder: 9449:9454 ioctl c0306201 20000140 returned -14 10:53:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x5000000) 10:53:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/8) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @remote}, 0x3, 0x0, 0x3}}, 0x26) 10:53:55 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)) sched_setattr(r0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000010000000000000008410000004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000b844e041b8312fb80d0cfed5066437"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xfffffffffffffea6, 0x11, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24044805) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x0, 0x1, 0xc0000000, 0x1, 0x0, 0x0, 0x6, 0xfffffff9}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7c0000, 0xe410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5fa8f9d6c99b57ab}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0bb98edd0001000047cea9b92ca44c2a7e6f45f32beb1deea6997c4d00", @ANYRES16=0x0, @ANYBLOB="000128bd700004000000120000003c0003800800010000040000080002000100000008000200adfaffff0800010007000000080003000800000008000200ff0f00000800030000000080"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000001) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r4, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x88c0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioprio_get$pid(0x3, r5) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x4000) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000240)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\xe4g}J\xa4\xeb1\x8ay\x9f\xb8#k^\xb0\xf0\xd9O\x93\x94\x84\xf9\r\xd6\xf2\xa4\xec\xb0\xf7\x98*\x9d8v\x99^\x01\xca\x1c\x8ckQ\xc3\x027\xc7U\xd0\x924\x00.\x13}\xde\xe7\xf0%\x01\xc6k', 0x5) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000000000000000000000002b6afbf8340a44d81d4c3797220000000052469b964288a94ab652fe471d0a8315f5c50ea533add2006b9b5b6a6f969349fc18fa9974d3ae901d2e4249a5be75e4aab75ae0b96d8663207a4288202fc27df35bb00d4b45e25d7fcfec512f07c5ce7abfcf33baf3114b2b5ca9b809bfe61aaf7def62cd80ea0d7dfadaa1d98f35975a3b00"/155]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0xffffc000) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:55 executing program 1: getpid() syz_emit_ethernet(0x10c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="77a186d1c6b9cf07aec1963a00c650db255486d9bc1b022777cafae0e6b27dd9cfb41c78512489d339416479aa0eeb19aee79c5037174a327091d17b25bbe1e591277abe5f9ddbc7617b01a50414ac10e710c00e31d70b91eacfb3db95bd624b26a17cd7b8692822180c3e59b8ed3f4146169c47656a6f883a0fcef72e3a59b8722818a587dd8c24883189a1e8f2d344e0bf0ca4ca28a6f5"], 0x0, 0x0) gettid() creat(&(0x7f0000000280)='./file0\x00', 0x1) 10:53:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x6000000) [ 2197.823895][ T9502] binder: 9501:9502 ioctl c0306201 20000140 returned -14 10:53:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0xc0401, 0x0) mmap$perf(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x2, 0x0, 0x4}}, 0x14) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @can, @sco, @l2={0x1f, 0x3, @fixed={[], 0x12}, 0x0, 0x2}, 0x6, 0x0, 0x0, 0x0, 0x5a, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x2, 0x5, 0x3}) fgetxattr(r1, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/24, 0x18) 10:53:55 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="8000"], 0xe, 0x2) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0xfffffffc, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40000000}}, {{0xa, 0x4e22, 0x800, @mcast1}}}, 0x108) r2 = getpid() r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r4 = getpid() get_thread_area(&(0x7f0000000340)={0x101, 0x20000800, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x1}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff4d88}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x0, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0001}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2197.876510][ T9507] binder: 9504:9507 ioctl c0306201 20000140 returned -14 10:53:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', r1, r4) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 1: r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)=""/179}, {&(0x7f0000001400)=""/48}, {&(0x7f0000002bc0)=""/242}]}, 0xfffffff8}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000002cc0)=""/4087, 0xffffffffffffff15}, {&(0x7f00000013c0)=""/63, 0x44}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000001740)=""/32, 0x20}, {&(0x7f0000001440)=""/127, 0x7f}, {&(0x7f00000014c0)=""/150, 0xb6}], 0x6, &(0x7f0000002b00)=""/147, 0x93}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001600)=""/11, 0x5}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000000400)=""/92}], 0x3, &(0x7f00000018c0)=""/155, 0x9b}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/54, 0x36}], 0x2}, 0x800002}], 0x4, 0x62, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(r0, &(0x7f00000004c0)='smaps\x00') write$FUSE_OPEN(r4, &(0x7f0000000500)={0x20, 0x0, 0x7, {0x0, 0xc}}, 0x20) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200040, 0x98) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000580)={0x0, 0x6, 0x7fff}) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000540)=@srh={0x3c, 0x2, 0x4, 0x1, 0xfe, 0x38, 0x6, [@private2={0xfc, 0x2, [], 0x1}]}, 0x18) preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:56 executing program 4: r0 = getpid() prlimit64(r0, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7000000) 10:53:56 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f00000001c0)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000180)) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x23, 0x0, 0x0, 0x0, 0x0, 0x88c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:56 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x9, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x8000000) 10:53:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, &(0x7f00000001c0)="80"}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x88, @local, 0x4e24, 0x1, 'wlc\x00', 0x2, 0x1, 0x11}, {@local, 0x4e23, 0x4, 0x3, 0x6, 0x4}}, 0x44) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x100, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) dup(r5) [ 2198.703347][ T9564] binder: 9557:9564 ioctl c0306201 20000140 returned -14 [ 2198.710870][ T9562] binder: 9558:9562 ioctl c0306201 20000140 returned -14 10:53:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='#\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Pn\x179\xe6\xf7\xf5\xd3\ru\x8c\xd2\x17\xc2\xbc\xaeH\xf6\xbe\xc2\xd8\x85u\xec\xdc^\x04\xf5e\a]<\xd0{\x9c:\x002\xa7\xdaE\xc7\xe1\xd3\x0e\xb7\xd7C\xa6\xfa\x9bvA\xb2\xef\xd3`5\xe7\x92\xf7h\xe6\xf9(\x9fC)\xe0\f\x0e\x8f&\x15`\xbab6\x92\x8a0\xbb\xf7\x80\xde\xb7d \x18#\xfd\x0ebO`8\xa7-w\xe0\xdb\xcf#\x04\xa23@Pu\xc5\xef&_\xfd\xd3\x01\xd0\x92\x01\x02\xb90xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x1, 'geneve0\x00', {}, 0x4}) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:56 executing program 1: getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0xfffffffe}], 0x1, 0xf493e72aa673b9fe, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="18b5a018600e7a2679ab843a3bc57e7570a4ad4c85a6336d8cc75ee785582302e69d14edaa4aaf19b0311c2106afe1efb6e5c2961bc9fd8743ca542758b86e7e291336f7bd6f581973d8121f7b20ad5344d3fc93114dce", 0x57}, {&(0x7f00000003c0)="adad5709ae44358d2d60a4697651231efb604fa99c6f255d695d00ae4158c32f4e7a9c28831c191db6266b4a0fa0d02d739e281a9e2daf6e54819fe0d954197f6f22e9de5f84b922a46f2e30cb5842224401febaa1983c8a75e69c5ec1a863c4f92bce4a50210be31e9d36515701b452def0088e0d24b4bd18260ee549d8f4cab42fac511b87e369b4f46d1b7de3df4823a2bb671d35b31719be9646d8929496a4122191cb550ef70527f17fbf2a878801f4f77ca40072edc39ce48111b8d897c9f70463baa39818969c5566ae527623754b20e8156d67d0fabb01663daf1a2966dc0b681a5f171ab23e70", 0xeb}], 0x2, 0x0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, 0x0) keyctl$read(0x3, r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r5) keyctl$reject(0x13, r4, 0x9, 0x3f, r5) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x44095000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:53:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x9000000) 10:53:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x10000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xa000000) 10:53:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2199.535353][ T9618] binder: 9613:9618 ioctl c0306201 20000140 returned -14 [ 2199.543023][ T9624] binder: 9615:9624 ioctl c0306201 20000140 returned -14 10:53:57 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:53:57 executing program 1: getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xb000000) 10:53:57 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r7) 10:53:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc000000) 10:53:57 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000440)=""/30) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x20488d1) sched_getattr(r2, &(0x7f0000000180)={0x38}, 0x38, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x10100, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r4, 0xb, 0x1, 0x38, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/timer\x00', 0x20000) pwritev(r5, &(0x7f0000000a00)=[{&(0x7f00000004c0)="ca324594296580edea8cb45fbc53b398b6f6fe02710839820d6dc37618978bef078a6db443f5af6f868e497ec1ce92890beb60b41cc8500baf9320762b1a939bf2e6e84ce26c1da467ab6625c81ed7c12602845397f0c3b8c6738bdf1cdb56aae549c2f0360a48c521da0ca64d16ace56b", 0x71}, {&(0x7f0000000540)="32dae34fad49c3d400f835515acf569fc922cbd49bcac56f5f0f042052d41599d6fe6862969b69b88536cac70ce0aeafcf2de2a8b4a7a516fc19b4f61326d8676bd0c5ea157c7512ad2a03fc77a28d24a3cbd987adab58966336f7cfecab50ec147e8239965dbab6c345f5eacdc5d7a6f354606e60d8303ea4595454", 0x7c}, {&(0x7f00000005c0)="eb7132aeb9c3903fe8079be7cf9432db8155ba36b2c585f7d87188d82bbc2dd3", 0x20}, {&(0x7f0000000600)="a67eb2c16d062577831ce329e5b2c81943c0dde17bd4b3e05f19700414f558cd06772305f9d2c81fda8f56da382da6ea12b0960a03e572348beffe7ea962383ca25ee9637870606f3d1dfcd7a99a2a2d6067b9b5a8f0e386c840df69cbf5f1436deefc631abb9671a2b4f26a57aef3d166e56ff5b0df40f34dd7cf546a24e73b85eeccccc2212f7efd2aa6a1bb61ce6b9037eefaf6dd3f8ddeb67fc233d2fa733319fc094fac2d6f93771db169e49855cbae44b7a1621cfc2132b2526ace1cd205b066c53b1c8e0b095ea0009b1df9dc1c4dd7fb673d", 0xd6}, {&(0x7f0000000700)="36d74e00a442550598dd9c5164551b19f9f7f246bdfd829f9d980f096a6973f97ad29b098c99fb81dbc6819c61423d9b0102cda10aa8fe0f41de285453d6fba05be57483d9b4fc2de88d50f7f1b1d5", 0x4f}, {&(0x7f0000000780)="45786114314b2250630a074c3d93551178ceb714c7c7b458a824973e63a555214313d3c7b82a8ceb9dc335c41408f414fbd91ba364b06ed57d2cc0886e76cfca4c1d0feaa1b2f37c45e1db8a28faae9f521e737643dc16798f6bdcf9d38f3fbeb8a14c9105e0ec9a32f18a3f0740232d2af55352912457ab7ad913b89638c4", 0x7f}, {0xffffffffffffffff}, {&(0x7f0000000800)="423954f308b09cc2da54ff3daf2d9bbe7ba579f8088ca25a524e7c0209f233f0e7a6a07b2b349a2b932b5c32b59a721c623fb3e841b3ed73c1405b1686fdcfd125feb94082b24d7e09122d1fcf5ab28dc26cb41a0d22b7956d70711c60bfad5772832f871e170097390d87ad53bab6892b38a59f99de1799cbe56e20bd1b762e156b8dc0bd8f9b4b0529a3fba031ea93c3ea0fb2904c11a2340c2788edf923714a798c3a4f819620168f6282f5827fa96e37dd4d58a4e8ac4730eb1ef9aea134e7248d4f5151e0a0e888e6d3de4176ddf019d6f97518aafa64b85088", 0xdc}, {&(0x7f0000000900)="5d89f473207c74de1084c28dbe681ad9893364c95012a352fa7d253dfad7c52080b2f9de0d536bbc9980d6172dcb37a5ad4a3135b70dc4460e658e4669945e206c2461146fa9e8cc95a8291dd16d2dda6f76d5736c3d4d631928bdd1feee1768dead9a2eaddf1ef37b5278bf1e4958f842043efac38f2fe0bc11812fde88b3f2085871b16bbc703eb4b7a022c4862edc805d23e9f4c23aa50ba197ae884870b392a57810a106d6d690e801bdbd20615ecc33ae492a1121e4b765fe2096415d2e6c3261831e", 0xc5}], 0x9, 0x6) 10:53:58 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0xffffffff, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x59c3d159}}, {{0xa, 0x4e22, 0x2, @loopback, 0x10001}}}, 0x108) ioctl$TIOCNOTTY(r0, 0x5422) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10, 0x80800) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000380)=""/37, &(0x7f00000003c0)=0x25) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x25ba33cd, 0x4) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0xfe, 0x80, 0x44, 0x9, 0x0, 0x0, 0x20200, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x800000, 0x2}, 0x48, 0x9, 0x8001, 0x8, 0xd8c, 0x5ce0000, 0x8000}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:53:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x11000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xd000000) 10:53:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6800}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:58 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x869bd93d065f89b}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x20, 0xffffffff, 0x0, 0x400000, 0x0, 0x100, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000380)={0x1, 0x200, 0x4, 0xdef9, 0xff, 0x5}) [ 2200.366697][ T9667] binder: 9663:9667 ioctl c0306201 20000140 returned -14 10:53:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x12}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001001}, 0x88c0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') 10:53:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x80002002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:53:58 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x2, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = dup2(r1, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r8 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r8, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r9 = fcntl$dupfd(r3, 0x406, r2) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) 10:53:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xe000000) 10:53:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r3, 0x100}, 0x14}}, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000340)=0x8001, 0x4) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x28, 0x3, 0x3e5, 0x8, 0x81]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r7, 0x0, r8, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) syz_usb_connect$uac1(0x6, 0xe2, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002000000086b1d01014000010203010902d000030104d0870904000000010100000a2401010c15e3523e68ccb768942f1b0c4880010201020b240401077d437c698c8609240306040305012a0f24060404040a00050006000800f50904010000010200000904017e01010200000f2402020400200081bb4c23853068090501091000015000072501818101000904020000010200000904020101010200000c2402011702b47f7a8aab280b240201020105be5e54ae1024020200f809000846e7d69d2cea7a07240109080500072401090001000a2402018103028040c60905820910000454fa0725010000e900"], &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x1, 0x4, 0x2, 0xff, 0x40}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x67fa820806567fc1}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x457}}, {0x62, &(0x7f00000005c0)=@string={0x62, 0x3, "adce9e402d068f56729e81cbc489e42a3197935f3472aa479b376a57ada6f6b60941c51347eb4bc217dce333b3210c643ca24fe56b31a7f9ce9b2dd5d51a450f86098154a875d7b8a008c70a18fa3ddc558976b2366e168aaac8b0bc666ec7d1"}}]}) getsockopt$sock_buf(r7, 0x1, 0x0, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=0x8e) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:58 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x25}, 0xffffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x40, 0x0, 0xfffffffc, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = getpid() clone3(&(0x7f00000004c0)={0x1008800, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0xe}, &(0x7f0000000340)=""/90, 0x5a, &(0x7f00000003c0)=""/137, &(0x7f0000000180)=[0xffffffffffffffff, r5, r6, r5], 0x2}, 0xfffffffffffffe69) r8 = syz_open_procfs(r7, &(0x7f0000000540)='smaps_rollup\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) 10:53:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x10000000) 10:53:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x12000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:53:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:53:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:53:59 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000003440)=ANY=[@ANYBLOB="30ee5e5d0e062af5916d40", @ANYRES16, @ANYBLOB="00042cbd7000ffdbdf250100000008000500000000000800070007000000060006004e21000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32, @ANYBLOB="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"], 0x1764}, 0x1, 0x0, 0x0, 0x4004000}, 0xbc2922a5c4fa5512) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x40004) accept4$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14, 0x800) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x94}}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) execveat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000200)='stack\x00', &(0x7f0000000280)='@\x00', &(0x7f0000000340)='stack\x00', &(0x7f0000000380)='stack\x00', &(0x7f00000003c0)='\t\'\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\'-/\'#[\x00'], &(0x7f0000000580)=[&(0x7f0000000500)='stack\x00', &(0x7f00000005c0)='%%.:}\'\x002\x0f\f\xdaY\xdc\xd2T\xc3\x98\x0f\x1e\xe6\x14\xc0^E\xe3Q\xfd;\xb6\xf0#b\a>\xe9\'\xe9\xe4J\xf4\x18\x16o.\xe3~P%\x82s\xd2\xf1W\b\xf8\x1a;\xfd\xeeN\x05\xd7B;\xffg\x03\x9a\x13\xc9\x85p\rj\x7f\x9f'], 0x1000) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000000, 0x101, 0x81}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:53:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x11000000) 10:53:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0xc8, 0x0, &(0x7f0000000040)=0xcc) 10:53:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000000}, 0x0, 0xa, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r6}, 0x14) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2201.203367][ T9730] binder: 9725:9730 ioctl c0306201 20000140 returned -14 [ 2201.210968][ T9733] binder: 9728:9733 ioctl c0306201 20000140 returned -14 10:53:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x1000006, 0x30, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:53:59 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)) splice(r3, 0x0, r4, &(0x7f0000000340)=0xfeffffff00000004, 0x3fb, 0x3) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000001c0)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSBRK(r1, 0x5427) memfd_create(&(0x7f0000000180)='stack\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f0000000280)="9e1a9e02690c28a2125cf064eeb63c9aedab74b4efe1b12e6a00") preadv(r5, &(0x7f00000003c0), 0x0, 0x0) 10:53:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth0_to_bond\x00', {}, 0xfff}) 10:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x12000000) 10:54:00 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffd90}, 0xffffffff}, {{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@netrom, @default, @remote, @remote, @null, @rose, @bcast, @null]}, 0x32, &(0x7f0000000600)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f0000001740)=""/7, 0x7}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f00000005c0)=""/15, 0xf}], 0x6}, 0xffff}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x20000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000000c0)=""/187, &(0x7f0000000000)=0xbb) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7400}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x200008c0) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2202.031318][ T9790] binder: 9788:9790 ioctl c0306201 20000140 returned -14 [ 2202.038925][ T9797] binder: 9796:9797 ioctl c0306201 20000140 returned -14 10:54:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x8d, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb89cb4e718352ae0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2004}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000000c0)=""/10) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\xdf:\nB\x03\xe1\xd02,)\xc6\xab\xc1 z\x94/\xaf\xbe\x128M\x16T)dg\x8e\x9a6JZ\xf6\x11\xcb>L\xa4\x96\xc2\xb2\xe2\x1e\xf8\v\x9fD&\xc0\xffc\x13_\x90\x87\xe49 Z\xffC(\x96\xf2\xdb\x7f\xf5\x10\xba\fX\xa8\xd2\xfa\xa4k\\\xc9\xd2\xa4\xb8\x85h\x90\xbf\x18\xf5<\xff\"\x0f\xda\x9e\x84\x1f\x954\xc6_G\x1a\xc7\x9a\x03\n\xfb\xf8KVNF\xfe[g\xce>.\xf2z\x0fwY\xa8\x00\x0e\x97\x80\xa0t\x10\xc1\'\xc3\x95\xa5\xb4\xd6\xa6N\xbam\x88~\x1f\xe1\xbf,?\x86[44\xc3\xc28r\xfe\x01\xbe\x8a\xb3P\v3\x90\xdb\b\x1f\xb6\x02\xf8\xeeq!^\xb4\xeci\xb9', 0x2) splice(0xffffffffffffffff, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) sched_setattr(r2, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfefffffeffdffffe, 0x400000000003, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0x0) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='\xf0b\xe2\x8d\x9f\x86}\x04G:\x06\f\xd5\x10\a\xaf\x15\xbcV0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000000)={'macvlan1\x00', 0x3}) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x25000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/hwrng\x00', 0x12e00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000110000000c00098008612000001d0000"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd4, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffdbb8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x83}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xeb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x8001) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RREAD(r1, &(0x7f00000000c0)={0x6c, 0x75, 0x1, {0x61, "92a7fef99080dfc987eecc7f993fefcbe2c367fe99fcf65d84879bc47adf464f3f681f736bd518f193e4b1dfa6138a840dd896a441f445b3ea93b68695abb0da757c1e1c896b476e9f9d76099244e42a08d0bc371514ec13c83c377bc00a3dce7d"}}, 0x6c) 10:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x25000000) 10:54:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a00}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, r8, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) socket$inet6(0xa, 0x3, 0x2) [ 2202.861710][ T9846] binder: 9844:9846 ioctl c0306201 20000140 returned -14 [ 2202.868299][ T9853] binder: 9849:9853 ioctl c0306201 20000140 returned -14 [ 2202.889853][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2202.901375][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:54:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x13}, r4}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r10, &(0x7f0000000280)=@caif=@dbg, &(0x7f0000000300)=0x80, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000f400e4000000000000ebffffff"], 0x28}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x1230, 0x13, 0x8, 0x70bd29, 0x25dfdbfc, {0x25, 0x2, 0x1, 0xff, {0x4e23, 0x4e21, [0x80000000, 0xffff, 0xd94, 0x6], [0x0, 0x3ff, 0x80000, 0x80000001], r9, [0x50, 0x80000000]}, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "7a4b33ae16f5bf852618934769cedd2d083b090a9a65720a0ad000f44d9d021fd3798964a8caa866dbb4a3e1cbff8771a90c7aeed2427b21d48a6d8406cfa3b7332422de11c848c4c923fdcf3b9d1bc80d3600b9c2496bfcc3a037ef1f2be0c0b07041e9825b8e2f73e0908c59ae2f264cd01cc908918dbd898a270e8cc951c8048439ddf320f88429abb734896eebfc677074193eae228d4d5b735edc093f59bd2872db29fc1ed38ee3ab553891fc89"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "21393ff9bca3607ec9c9660e0515216d42af12257cdbacd7d1c683e7e8bae8b0bb8089918e1980dcd6c303a3d8b9fef235c12af47a4af920c7cef72d75b1277e34fe1643b054ab0f33a0ceb693d38b47a12e7b314ba9cba35929f83a591467f9ac4977d8e8e1dde48790c663045f00c3099873d6a600094af7eae6996e2a93745c0f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "650cd91d5faa30604195d14bdf8bb16d5e16a1839cf4aa197b072b44119af2bbbadbf0c3008c362b59aedc4b02ffa0a48c871edf2b0888aa3e316982032a6f257583c3eba26199ea29974d6250380553052f7e3a021deb12e29d46dcd6684e44b66150ac2fda31bdee916a1ec208f86b0b9fc2c9c1a723609e04a254323e7843a5f0acad2914f2cd6718700d1ba51fef7061e5549bf0e0189c8b4a594ea91d96"}]}, 0x1230}}, 0x5) 10:54:00 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback, 0x4}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf16000000000000b707000001a600ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f26fb0b71d0e6adfefdf1d8f7faf75e0f226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000000000000000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3fd77f1563292324b7ab7f7da31cf41ab11f12fb1e0a494054127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a736770a71ad901ace383e41d277b10392a912ffaf6f658f3f9cd16286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bda144910fe47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d462357b22515567230ad1e1f4933545fe2c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cc1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61af5bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3a3ee6c00084865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942e367f603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf9900000000000000000000000000da473b037e8afffaeea0adb050c301895188292170132e3e67c36c477c3bf910c76aa45173308faad9c4b2ea64d66eac7b15adc73a3892b72ad372541f24e275f47479a68691accd8e2725eb633c5ec4dc2ffebb3103237436f602617f04e1f11ecfa184dbe5ed6979ffd93aeda03681b25a311bd7ba48faccd9024df0bfa75f0e428e39aedd69d6b97b968bd3e31144acaed3b7155f5db0b23869b1548cbd131da574025706d5e17e96be191b0f1157f1731aae627053f6f1f4d07a456ebf000000000061a00ea6b4f0f1"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x6, &(0x7f0000000180)='stack\x00', r7}, 0x30) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r8) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2202.959347][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2202.971694][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 10:54:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x40000000) 10:54:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, r1, 0xca487000) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x40000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:01 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "4f8c07fc0ecfdc55337278de91be00df"}, 0x11, 0x0) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x108) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000004c0)=0x2b) sched_setattr(r3, &(0x7f0000000380)={0x19, 0x2, 0x0, 0x0, 0x81, 0x10000, 0x100000, 0x101, 0xffffffff}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7fffefff) 10:54:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/175, &(0x7f0000000000)=0xaf) 10:54:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r1, r0, r3, r6], 0x4) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="830ec92a17ddc53504a932d9d239e3974e2a33763e12f83658d300a435103a8eee6bbef121e21f60e2e8baefb79337a930bfb50b6e419b896bbb41e73ac9c140811a080a21214796caf953de9f33bf36ab5854de7b346b69499a6e4be5cdc10646baff2dcee11e947ca45497f26e6e47", 0x70}, {&(0x7f0000000140)="0933e310a2f7fbd39673ad0eccc277d16ca4ce95feb8e7bf634418b9b6a9866b46c0d04a31aa3a9f748c1c980bc711d042f7d95dc6cda155b2ec0de0cea68c7551600ed4d3804cabe8825d6b1f3d2f5bcd5f1baead1d96293e4e66532d21d2ca4ede03507be1c2bd76b0f75d2529c3c9607a01f58a10057a65fe5726c309a8a53f2ae602cbb494b57aa9bc60c64c8327a99fa86f974a438d13", 0x99}, {&(0x7f0000000200)="72173616d08ac4b9f03b2eeb53975e088a5f19cb2d2df6131edf9484f9c7b47d37c998cb0156c2f947103fc00d864f8bd245a3f9d0bf249588c4c1d93c812b0e33d154d9a1a4b26e5a15dcefd0e192242c737b41941f621368f598e168c9deaa1e5afdad5e8e7c41d93d937a07b4bf9ee00fbd670f340edff6756c57e88f68ad114938be1acd4dec71d8", 0x8a}], 0x3, 0x0, 0x0, 0x20000000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r10, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2203.690312][ T9901] binder: 9896:9901 ioctl c0306201 20000140 returned -14 [ 2203.697533][ T9903] binder: 9900:9903 ioctl c0306201 20000140 returned -14 10:54:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@loopback, @private2={0xfc, 0x2, [], 0x98}, @mcast1, 0x2, 0x7fff, 0x6a47, 0x400, 0x81, 0x4, r6}) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:01 executing program 1: getpid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000180)=@hci, 0x0, &(0x7f0000000700)=[{&(0x7f0000001a40)=""/230}, {&(0x7f0000000440)=""/42}, {&(0x7f0000000480)=""/187}, {&(0x7f0000000340)=""/98}, {&(0x7f0000000600)=""/155}, {&(0x7f00000006c0)=""/17}]}, 0x5}], 0x2, 0x2000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)=@known='trusted.syz\x00', &(0x7f0000000840)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001840)="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") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r7, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) 10:54:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x44001) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='h&{:\\+]!\x00', &(0x7f00000000c0)='/\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) fchown(0xffffffffffffffff, 0x0, r8) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000140)='^(,/[.-!@$$[}+]\x91(%\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x48000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:02 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$netlink(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @private1}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7ffff000) 10:54:02 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="896506a99ea9b85684774e0a29dddbe7d4bb8133baa9c5e1fb89933fdc636385e3ed3728a3a496abf28e6e9ab2ccf9b8c6abf34f35cb94f799536962007aff461d15e06843c01d4c869208f015193c0dcaaec3fe84bd9d3464c3e59768097e321860c2835e0a2c52ea7826cc83bcf63a74560b693f000019ba50354552569a873d3526bc37c4544d7f73ab917ee6cf40f83bac3efe21b670d79f7e1c41957bee1ff78492224d6b17f7845bd53aeb570712b959ee7558", @ANYRES16=r3, @ANYBLOB="05000000000000000000010000000000000008410000004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfac4d97e7246c4c6ad825ae26b55b8fdefe104d0afa68d319b4ca5f63e80df1068e1bfd5c5e82871e714b40677e44a78d0a38aa677a04ed2dd277ab10ee233b"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x400002, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7, 0x4, 0x1, 0x7, 0x0, 0x10000000000004, 0x101, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0xaa, 0x800000ff, 0x9, 0x1000, 0x0, 0x1f}, 0x0, 0xd, r4, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3a) mmap(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x0, 0x3, 0x7f, 0x20, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x20, 0xcce}, 0x50860, 0x6, 0x4, 0x5, 0x80d, 0x3f, 0x803a}, r3, 0xf, 0xffffffffffffffff, 0x10) write(r4, &(0x7f0000000240)="5aa23175b20afa3341ae293a35d0204c062c65f4eda4b630ce032c55957108a2ed5f49a1098b41007db21e915ce95666e0d3ff7cfd8cdb53991d51f6d18fff1a99df99adebbe7c256fe50888f630f8e5b2bfad45140a3be3127c91f4418a7160af4c15f992bbac3622694b9490295c6500515d3e86f456098d4a3334d872b1", 0x7f) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0xfd}) [ 2204.518286][ T9957] binder: 9954:9957 ioctl c0306201 20000140 returned -14 [ 2204.525669][ T9962] binder: 9960:9962 ioctl c0306201 20000140 returned -14 10:54:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x435}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, "0dcf29c03970"}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c095}, 0x4010) r8 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r8, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:02 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0xffffffffffffffc7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 2204.594894][T10024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2204.605315][T10024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2204.636842][T10024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2204.647072][T10024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 10:54:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB]) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$VT_RELDISP(r1, 0x5605) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:02 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = dup3(r0, r2, 0x0) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) move_mount(r3, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x24) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000000c0)={0x0, {{0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc0080020) 10:54:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x3000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:03 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000340)="b1fcbf5db96249195f6e8b49005b35f57ed5f7e55017fb13d857facb7662ec79ccd0cf26519960d6970cdad2bc392636ce4dcef26bfd76e586e447ced4ce3faba5639fb1315519a259dda225d1690a58828599") vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @empty, 0xd7a}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001680)=ANY=[@ANYBLOB="d00000002ef30469e5e816b27550f004b742c13443dfea6fe1e1122ec9eab209f28b388f68b135cac441ebabb6a755fdc960ca147fb97eed53fe0500daaf48ba", @ANYRES16=r4, @ANYBLOB="000226bd7000fcdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040003000000", @ANYRES32=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40800) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xcf000000) 10:54:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0xbd, 0x6, 0x3, 0x3, 0x3e, 0x80, 0x32, 0x40, 0x142, 0x9, 0x6, 0x38, 0x2, 0x34a, 0x3}, [{0x2, 0x81, 0x7fffffff, 0x3, 0x10001, 0x200}, {0x3, 0x8, 0xb7, 0x2, 0x0, 0x9, 0x3, 0x3}], "e69eb3e44842c9335274d5c4a25077288a6d14eff8a20a017f18fb495f0ea51cb353a35fdacb3bdf2dd09897313cd4916178949dfccf946501e6220011fbd934d7", [[], [], [], [], [], [], [], [], []]}, 0x9f1) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2205.349298][T10013] binder: 10009:10013 ioctl c0306201 20000140 returned -14 [ 2205.356702][T10014] binder: 10012:10014 ioctl c0306201 20000140 returned -14 10:54:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FIOCLEX(r3, 0x5451) r5 = getpid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x10000, 0x5, 0x0, 0x400, 0x80000000fe, 0xfffffffd}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) r6 = open(&(0x7f0000000180)='./file0\x00', 0x80000, 0x128) write$P9_RFLUSH(r6, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r3, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1608d7dbf1d07bc8fa201ab77354520e89e3c52f7f7085ce51f04cfac30267c1299f58fd4625c8a165ba39bd0dc281ab86710e3e3a41195448b8e8ba9d3b47778a2f56a2c89c911af3e493a6f1dfcddbf11b17a6d6fbd9a754e424215aad92f5ed01403d53661b239f5941666a69ffb14e9fff1108f5f5c313af49d555a379d926720aff31e8c10340b1d1a5e7c04ce1f545b98a81586737d5e06854cc4d124be7e77330235d2e433277714a49cf9568dcb0a0ff808b28d8a53e2fc554a2ebf53745a12d29fa1e47accb11ea77e860e75d43", 0xd2}, {&(0x7f00000001c0)="6eacd9c4e8f85026f973e53a6d0dbe7e4ca30945843e72d4b729dbd46431d3a3c41f9e768a0253397b5e75952d8549148840968778e71707a389a731a58c52b0e57a0633ae5e44622a079ce9d35180cf6aa5b38f2b269b534da3eb436835465e023f04b7898cc1866e8bf3b5d50dd461aef2ba", 0x73}], 0x2}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x5, @remote, 0x2}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000280)="2887017e47102d227233d4653e354bb0dd4ba83651d3f6886eaa4d8a489573871dae43ea1f427e1cdd44ddf686586c0685cff2bed61bced96c5621d32a75a84eab285146835a334d55bedb7d3bd91087e27be8c81ab551a71ee919583364", 0x5e}, {&(0x7f0000000300)="83021caf", 0x4}, {&(0x7f0000000340)="c20ad45a26f60e09efb74cf1", 0xc}, {&(0x7f0000000380)="66626bb499a25785daaee6d02899a5cce23a3d032b99898420e01bbba0bd00bc9fe49bd05a701dd63cb04328b5b62904285f114a4e677965b0ba5c5f5a816a51c348d12f98111ea47c8e6397408e9a269cb9269def8fd954267a0db85109a4d33a96cebafbb9b343756542600e340a7a7daf8dcf8d8f11cbd51ee9937d9073a0c2a2b58d9aa9e85b4121314c5e03785abae4ee6731c966", 0x97}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="c3277e0b5603fd75554f518babc8b762d3b6dfc82fe6d13c0f13c350c9315fbc0c59aa5fa260d8d937c884ee089eb48fde35b4249e8935560dc85b81fdad1ae2116f702f965bd8d8ebb622106b8ba757b92ef8314f8fcf20be43182af9", 0x5d}], 0x6, &(0x7f0000001540)=[@hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, [], [@hao={0xc9, 0x10, @local}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x49aa53ba}}, @rthdr={{0x58, 0x29, 0x39, {0x88, 0x8, 0x2, 0xff, 0x0, [@loopback, @dev={0xfe, 0x80, [], 0x1d}, @local, @mcast1]}}}], 0xa0}}, {{&(0x7f0000001600)={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfff}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000001640)="353f44cbfbd5848fef37cf59a120431a769e09d9231d342d1686eef3d75d3a3a7a801e6ab008cdcf59a5fe89158a93f89b02ea36816f87075b24fa781bc024ec56e9c7db70ec44e66e2efc0419b3addd616d4aaa6e6c29229eca8e2ffaecaed8f49ce9d335a030af8547ebb43d8f597ebe2d5cc8eb2c7297560408f6ce55c454c39f2c306793905944360a4d919abdcc6c1bffe3dcd86124b37c589ef2f1b1c17e8e3345eee895093be81ab2fb95615a070543f5e8", 0xb5}, {&(0x7f0000001700)="13bffc60b1664e307f3cdfe8178564fd13ee865c81b2526e23c1de60070f0d274b3929e619d2584bc0dd52ce62b75677ab91b6ee1cf7c566125b5ecec895a836b9632b793b859aeaa74bd8c5d8f3508439139fcfff0847386d0bb3cc057314232a27f5a5d2cb69c9dbae95381cea9773294461c9d3b86332606bc50c19437ede32a49aca0724817527fef6f09ecbca6d45ddf14f4f8713f79906a70de0febd66c10e8dfc6af555300dd949b129a032f2355f36a468772886929504e2d24ffb19125c8358d5ad6a5d805829397ebf00741b5df9f7110e487f0572b6697241ec1d7c8f24e45b6cc994fae5e0f1", 0xec}, {&(0x7f0000001800)="207cc841b5611a70bd17818ba99a3e3a20b5039f7c85b1752a8aeed77f04fcc600b5451fb86d0a10aed3e015b81fdf095305b2a2163ab667770cacf6346dd06b8e25f8530cf7884288e21bb52ab918d966e337380da74aeff7b5a12b7e8c0baed32fe1b6c310bf1cd0786956d7f93bca94b6bc87b2a3c2c147541bfb010b6a6435f87c37800473939ac9c2842cfbd35a95f6dc9e7a368376f532e09cf8023d3fb2e1f50c8d60c0053dfa68f4ba7f60fd9f6356c246c84f3d4836ded1a2e2648dac9d91682e1dae10ccce17b26dce5dce497924530e01a3b2a207b100b5ea9f1f55bf10e699e268a606606a8faba805c75b9915d614b836", 0xf7}, {&(0x7f0000001900)="cd4d2655b6275a4c78933e9809492a0245904e5d462395eb0af73ba20ff265590155c049caedbf68a0b7dd0bdf303457e7b6c2ac77931d05be3ced0e325ed34dff117c4cb0384e8a10ff34b0f883d3920b90d20ccff51f0a7d9646fea84ac0161660a4134e22144efd", 0x69}, {&(0x7f0000001980)="09a5f6fdf99713813df8c2922b4267295eef9c0d58516d5c5d39de823d180865f530e408327c03111892b06e226250525dbf53781b90e7e3514b0527adcbbb71fbe9885190af648daa74f8150d6e4712faabac88d22dccadd0e536b20225c14f1088ab53eaaad715f788b8d493373bfa8678eb7a6350cf5766d1f88edaed26c664d5130eccbd19f8697d51f959dbedbd64ddce05565a2e7772720c388a65259ccb2e94", 0xa3}], 0x5}}, {{&(0x7f0000001ac0)={0xa, 0x4e20, 0x8000, @remote, 0x20}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000001b00)="b3ca9684fa5de3270f45e4001cecf98d8b763cb08d80203482adecae7bfeb54efb56b16445036883be38ceb5ddaff55ba07a8d7db973fcadd304f071e74c33f8606e666242a1bffae34e6fd718ee7a6fe6193330e5d4799c0f483dae07b2e4af723a0dc27d2211704d65b13e90255353bfcc6c3c91ff66e9d37ca7b7a8c22e59d995e5a16e2e464a00bcb72e3d5fba720660f29f297c0f3c703c7ea3daccd07f062fcb2315dfaa260878649cf23ab5c9831057dcc64fecb5417a2c81340b133bae8d2041adff904ca2b1fcc8d52c5524aa3d5a07f4aac4c057381b5f4706e73baec3a1d736f910da8e7412d662fad12d75d913647277b2bd92b2bfba7ad20992ac44b9086fb7b9c516bedab17d4830b003656d9e35fb13cec72e9aa3110285dbf5317c9c1a1d2cc93a490885c451136e84f5f61b32932abe39e5931a2d70ed8d64e9a590c349c15af3f79adc7cdf87d60852d3bf64986209c5d10dd878d0cc864e164d8b179b972614a366426c439ff2e2d10e5ac28e9f5d2186b43b4f9059044c42a0ff4822d273b9c99bb2353f082c022456fbb7cfd2599822d1062c26945e7bab57ef98c18f917969fe10cf1d34fadef6ccd97b674c06844156e7d90b431bbeb4f5600e4252fdced42a9ba3965c66986de1995c3ee6739dedb72375a0e8c61f93c5ab98a30f526bcb31316db64dfa3659702aaa64c5bdab74aac5d888bc203efd85674f1d4ec8b41a6b934db10d03192430346bbf87112ce8b6688c6b6ff714d9797b6af3140c38458094fdedf04340d30081f2754ba33cad5641102977af39b28a9b2b0dc04ed155cefdf5a36e217b9d40a9dcba02b1eb2b518ffe2b403ba19fd7ce1d48bf714ea9d12ac4715d57fc8ac7db0c37d019d30052e14122919a499336545e2b115d96ef3b91ea44ebf97edac0597245cfa577a93a83fe6937699a6886999d77cab6a708f9eaf5a6957a77afdc3cc4115d9fd9b71705c3b4cca635ebb949fc8dd89a6c3580e70c2d5e02e82bf1875f742c267a758cd35dd1f035fc7e0f50c7a288e630551cf4833012ee261233ef27a7e0808ee96f0bfd3e355429027d8609558bce360f109d008e51403195d94bb63bd39042e19ba09e61edbc913a65de34fb0b29c328b08b95e18f19346fe16d262fb36c4454a5c79ae4299e07e1ab377a034fda174e83b83ce157ec894d17fc13ddcb5301901048cfff351b6535a6af61967f196fc5ddced82edb44a00f3d0dc9301687a0e94de32c4a4d53897927e1f838010a63db861633549016903fae69e788ea4b43290a6901d7d14fe3246a83a334a0c29d1186b66286403fbc6e28ea31ff818f87b5e071bac12ce490c53af3d85b38724340fa834862a6ae7843457cd89beaf9202070cf776532ab45882b39a931e8e6ef1527c11366fdf25a5279c71f9afc2109025c491b178e8e9a7e02cbb1b7395ae98cfa3f283139134af6dbf9ee565b0f108cf7e9a843a910f426f6e88e0838a1646d7c3e36fac7862a72d3c21d1b6fa9177a4b262b7ea7afadfa1b7a1035811e377585127ee8de5ff8780c569b40c0fa4ec2145b41f80196e90fb4671a61a6806e6c235dfadd034f40966a116fe8a7ab02252e69394726f01e198aa700de3c4fcc217e4bd11c8e8d2689fb195743dc3db8b91d9640aa04c9c91adada77a8d7bba11126ff0c70f84ced24ce473da6e58beeeea184e1a3c1e2df933d4532f170cf3958dfa5e31718296e57a0462ba8750b7295213ba5dafdef42af98a3a7eaf980e85bb15a14625fb08505e29e7f79d75f8f2998262b4ad0985be0eb163fe950a32a02ec51efb191063e76bbc6dd0f5713110091bdf3f5d86efe0440d786c6f0c845907403170746913ce6ae565dbb2eb217f141da102730c3043ac39a64a6029ffe346fce563e6ccec1e0e94222f1b60f08a7818250b33c086175ff16ab260ff60a5e6014ea9339332bc35a6ba2edf2e8610a0cc2bee79a9489a5749e0d7a126ad4b2b1c44bc9605a5fff87b0d6b44a81a371e91930fabb956fd2c0761ca71df38c3b72597798968e17e017edb842fbd84bb15af6fe428c5d8293d42fddbdc05551cbbd79b3bde762f11ca00776497811b9873c0cf0306aa1a39639987f2cb3d9e7f9ac548f36f08d2ef1187f2c92353caaf2c4b332e6b143d5f08886d21f3b757015e0fbac6b8a8c0783cb1c16c079d7590b74a6121c9522cc786a932115819a530b84da1f99a450b24480187370bf11e9b660eb6949b28b1a6720578745a11ec83eb354410e198a167e01e23560c70ba25b7d8be6e5cd074dc3ac9afa5b4b9f9c02e6aab389c786fe3d6eed6c07361f830148085893a32e5922ace974db8e5756de4843bd866ec4075c6791ba7d242ae520d8dd42f3780e547b7997e658d382f6298467010e5ab30e7b295cb7dda26cb6a097b452792e809dcb48314f5ec269456f0e54d40291ccf4eca443188569c27b8035f7c0d9ad057c7bc3a1e5b399453237d20d287ebe902a9eb090dc5b696b93048fecff94ffb9a809cb9027034dd64ed1f2d1242a339e67a337c62cb8aa2a64119ac29f6d4d691f44c9fd0e8790b23038b057bd2a4604796cbf953c9720f42f754629b51c89e7004ae828036df1a76c9a10754dc9fa3890fc059fd15fa431476165de9e11a6756b019540cc8504f20e8eac6d3d77ec0b7d088a89aa526e5c9f2ebfd99f8bf7c68a3e15f4b35dd07bb0f7055f109e25df14087809a4a28ea54897b8596aee4a72fecaf7cc37bc1d235e55ef2f1cafc239ee3ebe9b889c68dc2978abd41b3d17bc290d91d483c6d4acca16b581478bac5a44f837ea1e414724735231cd3c6e961a71688ab2be2af03d742c4480c021340d05032c9a5630343cb71b500208e4142d63eb15cd37fa4ff6a7065e07859522169abff783d223dc9987a8c8f113b088b5323bd31583ec0dfcf5218b4d7f86cf3f86c04b4047879849396d44a08727cbe99ab3053ec2ef7008eddbc9d65fa5aab8d819c914ba38aa9b99314e435bff0ccf281983d8be0dd51547285d114a299dadf8361eab00455d5dfd8234be8ad299b884e89cac9f2becc1672309df7244dcaa0b0a578965726eb93111e36fa8c32a3f463460004e46c056e4fbebfa67847860f100ad2c2dffc8bf7edce0d515e9b60ffd9ad9b8f7d43c04de0f225f5de3c416f997fafedcb9e658ae121f0d15eab9067cf0e1abc5ac999d02bc95ef53aa339e76d9fa452fe254d65e4d0a8773382f89897f9b13f22ab32b663b835211629822a98c47ccaada6605963ebab181b416bfe2e2f147e2958d210896fd9cf3a47c7ca1d77eeb9aedae887c2b194b272d8c4bba496231f3e0cccb810c7b6d1f45b8f6884b44e2992c5b040c7dc8c86a5f5f52c1a4a9f117070ff86d8b03736d8e9e73735fdfaf9069373927e1eafc7f9893bdf2c2342d3291f88e96aed9f2e9d0d71324447ed843c01f1c36ae4dbefcfc2bdcf4f3335af6561adb5442863038a3fbbb3c4cd43160f37708b849d98a0b0ef9e462864179b231f2d64d2a491d4c01f534188724830a6530dc339ee9c2eb55a94f550e8cae5cac359750b4722fac3bcace0ef5f9864d5452e134bb1600dd9d1d32696da632014c05b32b4d7d263635721ec7471b24b05b06dca312109e8f291ec1303b61cb937f86311c4cc0013c2d0e5ab719cd0f8829ba01733a633a0b8abeeee52b893c168b2b23b5c1abd96d5b3b914fe7e4b862281d84e7d20e835233731ce29d187cdce922030a6b854e5e8d76fa12b9287c14f4a097a1357c1624f543d0ae4675639c9e652d5bb22f69834ed7197d3e027bb4cbda32fbdb4f611ab5b972c72a8240c8b4c80df80085ad64a6b404f5be08ed93a0f2b40da285e230447223d4bf24933e3508be30155b24b4a9bbf21b813242bf0f8fef5882e9d3f0e6b9791cb433c4aff72798003c7d5c06c700b45aad97f121ca6567a833231af2d77b10036ef648cd0eaa37dc20b57d8556fe0e32169ad331ca0c838f0c22920fed4570b8a1ff12f8ec5fe4ecc6716d81543f17582b3a3d8479d835433b59d6ecf6338b4b99c493bc21c6bdbd0929b7e53e2835c8df70b91e6b618971bf481f129de4c411eafbd7e2155383bf6a2420e5ea561da82a6ac25643eeb941c51c0602754c59dd04000a12a215a92d9fd270baa172e4a72c3210504a27e25874fe56970f9a9263e06ff55b80975c3f76486ea6d2ab42bd0b0c1c6d24b8d58bc0c9f00dc4f976a89faf20f4a39960401016f370cfb8e583b46fb5fd756e30a01b11dabc4866aeb54fae65d3b89e259e3174d2a4c8f9debd9a8d7784cf135e464dfa7a5832a4f4a88d088e473ba6baaa2f645cbeee92b85dd7a0563b44176280b6aac08b7f3a609574904c0523a059aed9296f9304215df8dd250a7828c89283d5885cc32ba39426e5d996eaba1128eab56b0611b6c54281452012e70f03fb78d40a0654027092a36f117206241e8cd7eee57f5585bbac0b2c0eab32e8f2f795d009b44903ab875809f5fd42dd740a0502c7593310cf0473aa148933cca389e391d9ddfa799057103169489b7c6edca3034e6cb2d3a1ea794898d21d78047e2e4dfa9ba21aef8de0d588e9058f27c340100f287d84bf0c2fd11bc414953a3a95bc273ae9b39f662cf9180b5362a2cae2cf8494299361e4ecb7ca6230adeb9900ed928e875e3bc10840da562c4ddc0b5fccfb5f210d369ab3b07a9c2f3aefb45c2f1195a030126778816bde8b44034878dbda5f6a477255e1c8b6505c9513f8db97ad1a554d7e3d122ba1d4029fc1c8cf01328f24c3dffd42bed6fb615021b95c0ed05edd8cc7c8b1778ded219146e01c2d51905d5311a3a93d42433c12a7ae98f981f56c9af5744e0b3e079892cddfbd063d8a08881b04b2934779771a13b7465fd8b34f679c1b9e383ed0abfa8961930d48be1b23ae583681ea88b4fc05df9ceb2360099797b2d4751f7be771fbc4e9536edf85f93797b84a98de2cf44869885d16119dcadd9c1030dc2d66293e68d9672de1db5b9847935e0969567b45fb3ee1261ca4c325c5c45bad25e2c70a2a10495c396133a0f8cc155d477be42367cc29bc09231a83df3963d06e3fc89a2fc5732381645816961be7366853fa74a36389b597a7d1f527a48f2d8908fabab12a506951e24f2b3cd7a0a326a316fe0816ca7b8ac1c8b8878a4a4d1e36080acbe9c06a8e4c6f4424a051cdc93239f4c796c6eedd0f97b3a71739894866dd6c5688c26914f98df8ed517416b62f612550b5466301b6ab1d42e98c2931348843fd6db265ea6a15aa1d60bf4b25e0aef602359d149dc18cb551c747f3f1acd289dcce826b78e6c444a3dee3215163d9699194f207b7e3318090a1ad48dbbca0ff4e6c4fb64a226dcf504725b910fa0ab322fab345275b6bb2a878fda7a4e5c458e8ff8d4dd9ef45ae9f0d5d2eca9ee74638770ae5fe5450c180ce55fe63d7a2a86478db51398de327b3b05527e4047a0330ececad0c3503bf438f34f28acbf6c55673e81ede2a09b6e1de6ff15e37f394bb9fbddef1af1d10347db2f7cf7380215dd412299c97f7626b3804e67c5826bc67fbfa560abf5fd6bca60b2f590d35826da27126582481ed946fce8ae5dd7ad547ed35dcbf6178cb0b19f2481856f12af451e7d587c596a95f01c0878b8155429f0b3e10427632de5b95edac6db7268e122f862d71f0d2305e8e0a8b3004548122d64f77d713dc3993af1ceab9e431b92798d27d103fff363223e827bff6cf5846ad440306b2bf886d", 0x1000}, {&(0x7f0000002b00)="640a846b46304272604a09c4e92963855ba1eba4f4d422ee567087f882142cd8153c9aac2f8be5ea6af78be879ca67342a58200c30c18fedee036b7f38e38d828e0e42e3dd9819ce8967cd4b53a1989d490510f103379a04c3a24fce7a3d8b95d426411da505fbf740245016dd49dafa72b496e8ee87901b4db71bd69bce08732645f35681da1e7cba63d6f5f2a4dd74835481d9e5f65808cd2919a992249c5892e0982c00985786bf0e8db4a2acbc18ec2f54f940becc7196507e1d33aa4edebe938c202b6076cd5db2bb567ead63b6dfa6abee25d91d633d09a47948981852f20d70ab09e43f6370650cca8a07c5d31a1b09816e6d", 0xf6}, {&(0x7f0000002c00)="bc5d4220bf4d1a5b4839cdc5f8122e6d1b5cdce82cd4aad6120086a0e444e033edff5b8c301d55322e2bc872763f9bd41bb52a", 0x33}, {&(0x7f0000002c40)="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", 0x1000}], 0x4, &(0x7f0000003c80)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x38}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x15}, r6}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x2, [], [@hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x188, 0x29, 0x37, {0x21, 0x2d, [], [@hao={0xc9, 0x10, @private1}, @enc_lim, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0xfb, 0x41e1, [0x100000001, 0x80, 0x5, 0x400, 0x9, 0x2, 0x200]}}, @generic={0x4, 0xd2, "0910b6235c63e2f8178909c16bc3f31aa60f2410420e3135a5aaaf6c6ad55cb96e67a0c216cd540cbc0b00cec9616c6da326b6a716eb191d15f15efa5ab9d550639d4db63e63ddff2c8b5d64c2927ac49d6528072487bf76ccccbc664ae0cb00fcbf33988d89f1c0ce2e9c734c59c615d89c2b7d224eafe17d0f59884fb60bcb5e1c97b9fb8663549392aec289b8c41ea4d26c1658c7e422c17451094a38cb2ced442061956b756300ed963e9bde5d36eff674e43ae40578cd7a781772d19a92c3333d351d8dc1c53e5355f8d254de999db9"}, @generic={0x7, 0x3c, "5672a461d1611efe66f981e5bc39c2acd7f8ea8a08235008be62926d9d63e6a2ef1a7159e5be385f1aa4d358bebc21388597c4160c0599f19e8b63b0"}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x88, 0xe, 0x0, 0x81, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x43}, @local, @dev={0xfe, 0x80, [], 0x1e}, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x6c, 0x1f, [], [@calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x6, [0x7fff, 0x80000001, 0x5b, 0x72, 0x9, 0xe8, 0x5]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xff}, @ra={0x5, 0x2, 0x9}, @generic={0x5, 0x9d, "2405108a6e95bdead3ee118dab3a50a722558b652d42c4cbfb8108b189ddfc5fd69e0d2370ad74710c094f9cfc0fa7b27b80c56f2bcd7af402e73849d767bdbc25db895249d68c6eeee707d888edd83c6105161147e5c0465da7d32a1e2bd44f4f960b9d3d9bdca75b29ae263bf124481416b64c5c8b9693c735f6f3297fac542395d308a8bbf7662165501545c7c6d6b51585e711be28bebdac8702c3"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x4, 0x7, [], [@hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @ra={0x5, 0x2, 0x4}, @pad1]}}}], 0x430}}], 0x4, 0x50) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:03 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{}], 0xa, "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"}, 0x100c) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x2) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r6, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) [ 2205.441293][T10091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62254 sclass=netlink_route_socket pid=10091 comm=syz-executor.1 10:54:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x4, 0x9, 0x81, 0x1}, {0x7, 0x7, 0x6, 0x100}, {0x0, 0xc3, 0x5, 0x3}, {0xfff, 0x81, 0x5, 0x5}, {0x7ff, 0x7c, 0x3, 0xfffffffa}, {0x817, 0xc, 0x1, 0x1}, {0x2, 0x9, 0x1, 0x80000001}, {0x6, 0xf9, 0xfd, 0x200}, {0x8, 0x5, 0x4, 0x8}]}, 0x10) 10:54:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x60000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xffefff7f) 10:54:04 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0xfffffffe, {{0xa, 0x0, 0x6ec1, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x11f) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000180)=0xe8) sendmsg$xdp(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x2c, 0x6, r2, 0x2e}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="18e4a9917b274db08656648846c8c8b71f69efcce0b7fc6f4a84bdd576c3a3d5c93a16a53fbd663a", 0x28}], 0x1, 0x0, 0x0, 0x850}, 0x20040000) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x51, r0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x28000084}, 0x4011) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04070009210003a60000810009050a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000440)={{0x1, 0x0, @identifier="3880704fb0be5824dbecdb1dbc0ab3ed"}}) ioctl$RTC_WIE_ON(r2, 0x700f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00008100000081"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x154, &(0x7f00000001c0)={[{0x7e, 0x4e00, "04bcdec2d35601eab5246568eea977770a05313937cb7f8ec65291074cd2abb9bcebea17668bec6b17da36784a609e09467afefe8f65934558a9be409c68152d4d884950532c8d4fc47931da0c97d017a47b7860a8aedf0e2b77a7531881c617272d0e27968c079d6c6a42b2b1c79483d2c1f884e0c4985dfe43e6192e54"}, {0xc9, 0x4e00, "361ce97ce07848a1ed8b213aa8b8e7eb5974a6e79f5647163e222d461a17f7fcb8765fa13519d1c66f342de84caec9fbdffd854cccef0ecce6946aaac2328efaa823758ec134edf0042b7eb59a8282d2c8a73324bd2c412296ed37a16e3baa7816f9e7a9c9fdaa9ada6edbfcc40117a39b49424a1b0da3a6cb9eb3e72cc3114eeccf3a1649b5f3dd60d5ffda00f476494f6acdc1a416639027ef4c6aaf0a5a0b7bad2bec55aa11df60371fb328bcc088355446b054567b84e6903d060fad4870ee1b7b49469f541dca"}]}) 10:54:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 2206.185815][T10077] binder: 10069:10077 ioctl c0306201 20000140 returned -14 [ 2206.193459][T10076] binder: 10067:10076 ioctl c0306201 20000140 returned -14 10:54:04 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write(r1, &(0x7f0000000340)="fbd42ff35252c0574d9c815b55df86a3f381fb45319fd849cb8272c89f50ad770baa6bd4625549a44c897b573c7adb6c8b7d176155e460f8c09193100cee3faf62d84e4bb093da767999a8135a21ad324025e3bccd2c24452196cf1ec9e5d0f7ded494e4d59a4f31e95d3c727b00e74605bcc0df2ffbaa6730c70f3a0452739e164a9a6296e1e9fcfd42bb4ec53e81b0adca5b833e18e97b5e68a2a45666", 0x9e) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x20, 0x0, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xa6d) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:04 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x80, 0x0, 0x7fffffff, 0x8, r2}) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:04 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @local, 0x1}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xffffff7f) 10:54:04 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x3}, 0x8) 10:54:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x68000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7ffffffff000) 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe2(&(0x7f00000004c0), 0x4000) sched_getparam(r5, &(0x7f00000001c0)) add_key$fscrypt_provisioning(&(0x7f0000000240)='fscrypt-provisioning\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x1, 0x0, "a2602059980466ffbcf2e62213d8e5dd"}, 0x18, r4) r6 = add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)={0x1, 0x0, "1140d1ddbe271777785c5cbd78bad6ebf98192513029272b06272def7797c235d3c1513ce391ca7fa67698ddc3356922a190c914ed674fe5de399c58a01d7e94bb064d126cdbc61e7b654519d199b64d634d459bdf7b30e5e9552ab0a28b3c4b4176d21b449af1131493c38216c6b0795a093326a7a8831f22bc18d431ac9ef2b9413e768d9c1c76c8532d14ee25520aaeeaa42f5d0ba95ae98d9cc81648faacb6889c94942835e5720a40f1fd798826204c29d0e58f509985400ddb16f84412cff06384ba612ef9cfd3c9662432eec5c0cf"}, 0xda, r4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000340)={{0x2, 0x0, @reserved="a4937162c138c250ee51d7e41fc3221a7b5320e167f27c52678ad514dcf7b153"}, 0xe2, r6, [], "b393f595993a236366fcc2d34827dcaad42ca64005f79153e765e80fa25e1bde2d71fa734440b3d5b04756abe90d9313d975ae33c7c2e9a87a729604015d7aab460b9feddcbdbceaae9aed8de9b66e2b1f707c58c5edd20fec1e2901a78c9dac034d87cec75349402cdb084cb00c487d5c53808c78a958ca0708c82529a7966c743f5188b74da498184a2b6aa7c38d2a50744cadc27dadac6a5db32987d89b3dc0e37975b85ad21cc4ac020ea0c9297a6ea5661b9ca624c02a8434d3707bdf3a0ed33b6fb05ee2d2e2455c0c492f628d9d12d6bd914ca50c282f91d72e33a2852e15"}) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x5000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2207.022059][T10123] binder: 10121:10123 ioctl c0306201 20000140 returned -14 [ 2207.029780][T10126] binder: 10118:10126 ioctl c0306201 20000140 returned -14 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0xffffe000) r0 = socket$inet6(0xa, 0x3, 0x7) getresuid(&(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r7, 0x400454ce, r9) lchown(&(0x7f0000000140)='./file0\x00', r6, r9) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) fchown(0xffffffffffffffff, r1, r4) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000c00898008000100ba1d0000e58bc00d374d04e487d61b8a1776ce9a46038cb7c791f90ffd017c446fc79e71ef9a57d012818fce98a4658f8a26f15eda36fb87726ec53bab8385129e59068a1229edcf1cf7d21d72325c75044e288e9afa6de111c272ffd3960000000000000090334f"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x144, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe912}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "189f948f25069fb876e0877e4fa46294d190012a4daf0b9b61779096754f612247309e7181731a212d32a707d3e97fcb57c3570f7874f6a33487a33d59a5d09d70c05a4367b579b90d86641379e001dd9b0b5ed90845d5e131118ee442da689e1f8013c0c7f8187e98e40f214bcf014c7c130729781c772e8d3d8273ad9a55edb73bc37157099a16154d6a8ad56a3196b717ba0df783aad7bce28e1a5b0e94fa88e2016aa1819d3de5e7f0d403a2584dd6b7650c6adc9c7454c28a34f96d134667"}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc04}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) keyctl$invalidate(0x15, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:05 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x800) ioctl$FIBMAP(r4, 0x1, &(0x7f00000001c0)=0x3) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') 10:54:05 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r4}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x2, &(0x7f0000000000)='\xb1\x00', r4}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, r8, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x10000000000000) 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = getpid() sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x3, 0x7ff, 0x3ff, 0x7fffffff, 0xf9, "77e26a430212731ddc6a4ca725e64a040893bc", 0x1ff, 0x5}) waitid(0x1, r1, 0x0, 0x1000000, &(0x7f00000000c0)) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() pipe(&(0x7f0000000080)) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)) splice(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffa, 0x400000000003, 0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x81, 0x101, 0x3ff, 0x1, 0xa344}) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x4, 0x7, 0x800}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x50, 0xffffffffffffffff, 0x0) socket(0x27, 0x6, 0xffffffe) r2 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x1, 0x4}}, 0x14) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2207.857084][T10174] binder: 10172:10174 ioctl c0306201 20000140 returned -14 [ 2207.864658][T10181] binder: 10176:10181 ioctl c0306201 20000140 returned -14 10:54:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2620}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x80000, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_systemctl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '.-.!.!$^{}-{'}, {0x20, '{#:.'}, {}, {0x20, '\xd3-\x86*\xed.%:$:/$@.'}, {0x20, '+@^-^^'}, {0x20, '\\'}, {0x20, '*I'}], 0xa, "4991ff57403a06897bf3806fb8bfa71fccd27a71967405fae999df58fe385fb87d551455e7cbbe2fd6910fe680719fd70c809cd1f395d8cc0ec4a3df222686"}, 0x78) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r5, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:05 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000380)="c3d6d7fe48fbec0cf1dc75", 0xb) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xfffffffc}, 0x0) sched_setattr(r2, 0x0, 0x0) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000280)={0x2, 0x80, 0x5}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @mcast2, 0x2}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, [], 0x1}}, 0x5, [0x8d, 0x1, 0x8001, 0x7, 0x101, 0x6, 0x1, 0x3]}, 0x5c) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, &(0x7f0000000180)={0x38, 0x5, 0x54, 0x5, 0x1cf, 0x40, 0x9, 0x4, 0x1c000}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xe04, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000002c0)='#\tP\x06\x00\xcf-\x89}\x8cf\xc9\xb0\x81%\xc3\xfc\x8d\t\x05\x19\x1f\xfb\xf8\xf9\x7fJ\xb8s#\x83\xed\xa1\x06\x17\x8a0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/240, 0xf0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x8, 0x2, 0x4, 0x80, 0x0, 0x1f, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x40, 0x88, 0x1, 0x1, 0x7, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r5, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:06 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x7ff, 0xba40b1106902189b, 0x81, 0x2, 0x80000001}, 0xc) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@private}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x14) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = syz_open_procfs(r3, &(0x7f00000001c0)='net/dev_snmp6\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xf0ff7f00000000) 10:54:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x74000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:06 executing program 1: r0 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000001340)=""/174, 0xae}, {&(0x7f0000000280)}], 0x4, &(0x7f0000001580)=[{&(0x7f0000001440)=""/91, 0x5b}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/67, 0x43}], 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2208.685456][T10228] binder: 10223:10228 ioctl c0306201 20000140 returned -14 [ 2208.689767][T10231] binder: 10229:10231 ioctl c0306201 20000140 returned -14 10:54:06 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x5, 0x1000007e, 0x4, 0x20, 0x3, 0x100000001, 0x7c9, 0x1, 0x2}, 0x0) 10:54:06 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000340)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet_buf(r6, 0x0, 0x25, &(0x7f0000000180)=""/179, &(0x7f0000000280)=0xb3) 10:54:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xf0ffffff7f0000) 10:54:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x6, 0x0, 0x400, 0xd6, 0x9, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:06 executing program 4: r0 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r0, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x111) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4045, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r8, 0x0, r9, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x1, 0x81, "a05927535e94808b54fde9b601f08bc9cc81ec", 0x9, 0x8001}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x2b}, 0x58, r7}) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40340, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000800000000000000ff07000000000a0020000000000000004900000000000000000000000000000000000000000000000000000000000000020000009906000004000000000000000080000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094ba1e37e79f29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/704]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x1) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa0, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x70134154}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6bd1d7e2}, @NFTA_HOOK_PRIORITY={0xfffffffffffffed8, 0x2, 0x1, 0x0, 0x48c999ce}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76093ef9}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x462e7d8f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3582cc2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a68d007}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6662ab15}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x1c8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000008c0), {[{{@ipv6={@mcast2, @local, [0xff, 0xfffffefe, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'bridge_slave_0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xda, 0x1, 0x0, 0x41}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x2e}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'team_slave_0\x00', {}, {}, 0x3b, 0x7f, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010101, 'macvlan0\x00', {0xe000000000}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$P9_RWRITE(r4, &(0x7f0000000600)={0xb, 0x77, 0x2, 0x4}, 0xb) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000100)) r6 = dup2(0xffffffffffffffff, r3) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x1, 0xcf, 0x81, 0x2, 0x3e, 0x7, 0x3a5, 0x38, 0x31e, 0x1, 0x9, 0x20, 0x2, 0xc00, 0xfff9, 0x40}, [{0x70000000, 0x9, 0x1, 0x8, 0x6, 0x2, 0x8, 0x7fffffff}], "184b5f504088bc03901b8b5fdbd2120f36ffab", [[], []]}, 0x26b) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000000000)) 10:54:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='fdinfo/4\x00') ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000280)={0x3, 0x3, 0x4, 0xf609, 0x8, 0x4}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000000002010200000000000000000700000413000b0063616c6c666f7277617264696e670000200002801400018008000100ac1e000108cd6093610002007f00000106000340000400001800028014000180080001000a01010208000200ac1e0001080008400000000313616c6c666f7277617264696e67000018000540190000090e0006006972632d323030303000000008000840000000005400028006000340000400001400018008000100ac1e0101080002010001000000000080050001008800000006000340000200000c00028005000100010000000c0002800500010021000000060003400000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x42080}, 0x4000000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2209.516096][T10282] binder: 10281:10282 ioctl c0306201 20000140 returned -14 [ 2209.523471][T10285] binder: 10279:10285 ioctl c0306201 20000140 returned -14 10:54:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:07 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, 0x81) getsockname$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x100000000000000) 10:54:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1dba}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001240)={&(0x7f0000000000), 0xc, &(0x7f0000001200)={&(0x7f00000000c0)={0x1104, r3, 0xc32, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x1070, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "40b218d8f774fbd300c40f185c16d0005f173f6a2d42d7c794c4089c604719844088d79d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffbe2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x1104}, 0x1, 0x0, 0x0, 0x40}, 0x24024000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x8000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2209.577846][T10285] binder: 10279:10285 ioctl c0306201 20000140 returned -14 10:54:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x16040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) setgroups(0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, r2, r5, r8]) r9 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:07 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') 10:54:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) dup(r0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="373220edd2b1d91cd8cb8ab245193e55c6b3686401e5518b2ca9baf73be17397a4871b5f126328a0cdb971", @ANYRES16=r5, @ANYBLOB="00032bbd7000ffdbdf2501000000c0000c8034000b8008000a003155000008000a0037e7000008000a006899000008000900cc30171208000a00a0e7000008000a00069b000034000b800800090065c2fb2d080009003408ce560800090080a0897008000a00bbeb000008000a00b2ef00000800090097734d3614000b8008000a00d8b1000008000a00c331000014000b8008000900650cf46f08000a00fdb000002c000b8008000a0047f8000008000900b794e25308000a00b069000008000a0095de0000080009005f6be8152c0004800500030000000000050003000100000005000300080000000500030000000000050003000700000050010c8014000b800800090012bae65b08000a00c228000024000b800800090035a5b71b08000900bccfaf4608000a0012f8000008000a0098ac000014000b8008000a00f9aa000008000a0004c000001c00018008000a00c551000008000900d811e13608000a00613c00000c000b8008000900248953271c000b8008000a00178b000008000900592ff87908000900f7b8f96f24000b800800090035fc9d170800090061a4947f08000900ccb23b6f08000a0065ce00004c000b8008000900c73f0a5a08000a009e9f00000800090014ed355b0800090042615c0f08000a002ee4000008000a00d986000008000900d4499e5908000a00"], 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x254, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a4bfaa8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a6fe780}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a9bbef9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7041}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37d28f31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa47b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e8e77a9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd00}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1dc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eaf5192}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66b99421}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb21975}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27c71c9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64532c03}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c0e46b5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x380c613c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3103188}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76cf5bc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ea9cc82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x574aa4c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ccc3add}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6938a747}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2310b3f4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ee6fadf}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b61b87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73257153}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7793045f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe31ccac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38c580b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51cf54f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e29a84c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e656733}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78bc3f67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a6b9062}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x144edf68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37ae0973}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17369b35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x161b1981}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xa5edfad35e182d61}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x254}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000004) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000500)='(/!.@$!]%\xde.%/^-\x00', &(0x7f0000000540)='{)+]!*\x00', &(0x7f0000000580)='NLBL_CIPSOv4\x00', &(0x7f00000005c0)='@\x00', &(0x7f0000000600)='\x88[/\x00', &(0x7f0000000640)='/dev/null\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/null\x00', &(0x7f0000000700)='.\x00'], &(0x7f0000000800)=[&(0x7f00000007c0)='#\tP\x81\xcbXE\x00']) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0xd) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000ac0)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) write$P9_RREAD(r2, &(0x7f0000000840)={0x38, 0x75, 0x1, {0x2d, "1b202e703ef845007be66932c4f8da7ee329d3bc99646d010c21a238cb69d65c356836a4c9a699fc49ac5c411b"}}, 0x38) 10:54:07 executing program 1: getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCNXCL(r0, 0x540d) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) close(r5) 10:54:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x200000000000000) 10:54:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x100000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:08 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) setpriority(0x2, r3, 0x8) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x300000000000000) 10:54:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x10, 0x82766da3d505f912}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pread64(r3, &(0x7f0000000240)=""/238, 0xee, 0x80000001) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x8) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc0000009e5a81d585974364c88164b2d495499b735c0d1be7940702fb81a5e7bc976db6d4f10c3a1e23b0900a856e6ddfbe84475c34117b5b67eab09b9135b6085d053cf6b783c1adf118150de6e1322152e18f0d1be0b0467cb9187666619e028072ec10cb1646bf81c88865bcee75800f757b4e8811a8fa43fe46e69f6d8857b4c5d1ce6aa90375eeeb", @ANYRES16=r6, @ANYBLOB="00062dbd7000ffdbdf250600000008000400ac1414aa2800070073797374656d5f753a6f626a6563745f723a64706b675f7661725f6c69625f743a73300014000600766972745f776966693000000000000008000500ffffffff2400070073797374656d5f753a6f626a6563745f723a63726f6e5f6c05bd779064ab58f208000400ac1414bb14000200000000000000000000000000f7000001080005006401010214000200fc020000000000000000000000000001"], 0xbc}}, 0x80) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2e}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0xc8091) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0xf3f5, 0x2, 0x3, 0x8, 0x401, 0x9}, &(0x7f00000003c0)=0x20) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) 10:54:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x9000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2210.398970][T10340] binder: 10338:10340 ioctl c0306201 20000140 returned -14 [ 2210.406852][T10343] binder: 10339:10343 ioctl c0306201 20000140 returned -14 10:54:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x810, r0, 0x55191000) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r5, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5e, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x400d4}, 0x28000) 10:54:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="b8d15ff9c7bfa729fa83fce2a90279ff8dde595c2d926ede8be2b4f27d18b180a704c453dc202508d63e67e7c1677fbd24b5ea3daacc432f2da262c663bcbdba15b6eddeb268c106a92ee32ad3db1c52aa340ae4e396b169111637299673", 0x5e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000df93ac0e852e04a8000000000000000000000000000000000000000000000000ec000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000500000000000000000000000000000000000000002ff9664f587b5d57fecea58db8026e15b153e5ec49c9fefed4083b0d0ffdd51f41f02efe5e306469320c12894ebb98e1360662d3032621351f333c2c07fddb18d921af1ad7bb5a949942a8d217c08bed8b0aaf27730918d0b2cba628ffc7be7033f9deed898f877d6d192d776bc923cc4869626d86b2338770924b81052f156782dc9ac7eb95340b78e66dee19e8f21889a5c6357030faf27ce170466f7b15a7d6bca635c730d819f24bd7b4b2df5666dc6eb1f3964dabb775e78699de4346c91ff48264ab2a23a4bea286418e61c4ad15c36f460e9f9a316d92b8323d08516eb80b5f036ef32c2113ef293bfa6786a2da000000002416a3f3cc02916ee0062d"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x220800, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') write$P9_RFSYNC(r3, &(0x7f0000000380)={0x7, 0x33, 0x2}, 0x7) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES32], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64], 0x178}, 0x1, 0x0, 0x0, 0x4004}, 0x8048) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x4, 0x2, 0x1, 0x3}}, 0x2e) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write(r5, &(0x7f0000000180)="f2d2ab103cd11e6a7966b839b2f0e20c5b485085dd0270f31611ae7d01c721c96285d8fc1824fc445c2d56e5a694e1b52f5ee8f6f6606b5ee66aabd19cc8d135ebe4c4b9f38290bc", 0x48) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3}}, 0x3, 0x0, 0x0, 0x0, 0x6f3, &(0x7f0000000000)='veth0_to_hsr\x00', 0x8, 0x2, 0xf7c0}) 10:54:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000000)=0x78) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:08 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x200000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:09 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0xa7a1, 0x6, 0x100, 0x0, 0xf, "84c2791e51fde6c3"}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="0c0000009100eb485722d47d1a81d42015a0df7ead901ba90300000000000000fbdf8c65b2fd2092a7f22ec08ca28bacc379731539d3b1c5c75388ba210049e3cdfe56d265d46b4855bda27bbf8e3bffffab12dd9be09a41ce031ef07b717690d2bd4269ec1334ca5e58296deeb05a666af9bb744d5d557243c373b85dde88ad4299620afc497f1ec6aceb212ef902ff2421f4e4df9442af6834"], 0x97) sched_setattr(r4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000180)) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') fstat(0xffffffffffffffff, &(0x7f0000000400)) preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x400000000000000) 10:54:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x194}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0xe494, 0xdc, 0x401}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = dup3(r2, r4, 0x57b5cdaccb473234) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f00000001c0)=0x7fff) 10:54:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x1000005, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x814) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) [ 2211.231712][T10402] binder: 10399:10402 ioctl c0306201 20000140 returned -14 [ 2211.239190][T10405] binder: 10400:10405 ioctl c0306201 20000140 returned -14 10:54:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:09 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r2 = accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x3, {{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, [], 0x1}}}, {{0xa, 0x4e22, 0xffefffff, @loopback}}}, 0x108) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:09 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x100, 0xffffffe0, 0x0, 0x0, 0x103, 0x10000}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x500000000000000) 10:54:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x300000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:10 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r4, &(0x7f0000004500)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/19, 0x13}, {&(0x7f00000006c0)=""/148, 0x94}], 0x8, &(0x7f0000000800)=""/4096, 0x1000}, 0x4040000}, {{&(0x7f0000001800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000001880)=""/137, 0x89}, {&(0x7f0000001940)=""/47, 0x2f}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000001980)=""/255, 0xff}, {&(0x7f0000001a80)=""/228, 0xe4}, {&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/126, 0x7e}, {&(0x7f0000003c80)=""/146, 0x92}, {&(0x7f0000003d40)=""/115, 0x73}], 0xa, &(0x7f0000003e80)=""/162, 0xa2}, 0x4}, {{&(0x7f0000003f40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004400)=[{&(0x7f0000003fc0)=""/156, 0x9c}, {&(0x7f0000004080)=""/130, 0x82}, {&(0x7f0000004140)=""/235, 0xeb}, {&(0x7f0000004240)=""/61, 0x3d}, {&(0x7f0000004280)=""/75, 0x4b}, {&(0x7f0000004300)=""/93, 0x5d}, {&(0x7f0000004380)=""/108, 0x6c}], 0x7, &(0x7f0000004480)=""/109, 0x6d}, 0x8000}], 0x3, 0x40, &(0x7f00000045c0)) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000004780)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004740)={&(0x7f0000004640)={0xfc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 10:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x600000000000000) 10:54:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:10 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x5, 0x1000007e, 0x4, 0x20, 0x3, 0x100000001, 0x7c9, 0x1, 0x2}, 0x0) [ 2212.066867][T10458] binder: 10451:10458 ioctl c0306201 20000140 returned -14 [ 2212.074291][T10462] binder: 10456:10462 ioctl c0306201 20000140 returned -14 10:54:10 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x80, 0x0, 0x7fffffff, 0x8, r2}) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:10 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x5, 0x1000007e, 0x4, 0x20, 0x3, 0x100000001, 0x7c9, 0x1, 0x2}, 0x0) 10:54:10 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r4 = getpid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x5, 0x1000007e, 0x4, 0x20, 0x3, 0x100000001, 0x7c9, 0x1, 0x2}, 0x0) 10:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x700000000000000) 10:54:10 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x80, 0x0, 0x7fffffff, 0x8, r2}) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, 0x0, 0x0, 0x0) 10:54:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x400000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:10 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x80, 0x0, 0x7fffffff, 0x8, r2}) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, 0x0, 0x0, 0x0) 10:54:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x800000000000000) 10:54:10 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x1, 0x80, 0x0, 0x7fffffff, 0x8, r2}) r3 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2212.898691][T10510] binder: 10506:10510 ioctl c0306201 20000140 returned -14 [ 2212.906126][T10512] binder: 10509:10512 ioctl c0306201 20000140 returned -14 10:54:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:11 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0xffffffffffffffc7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="896506a99ea9b85684774e0a29dddbe7d4bb8133baa9c5e1fb89933fdc636385e3ed3728a3a496abf28e6e9ab2ccf9b8c6abf34f35cb94f799536962007aff461d15e06843c01d4c869208f015193c0dcaaec3fe84bd9d3464c3e59768097e321860c2835e0a2c52ea7826cc83bcf63a74560b693f000019ba50354552569a873d3526bc37c4544d7f73ab917ee6cf40f83bac3efe21b670d79f7e1c41957bee1ff78492224d6b17f7845bd53aeb570712b959ee7558", @ANYRES16=r3, @ANYBLOB="05000000000000000000010000000000000008410000004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfac4d97e7246c4c6ad825ae26b55b8fdefe104d0afa68d319b4ca5f63e80df1068e1bfd5c5e82871e714b40677e44a78d0a38aa677a04ed2dd277ab10ee233b"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x400002, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7, 0x4, 0x1, 0x7, 0x0, 0x10000000000004, 0x101, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0xaa, 0x800000ff, 0x9, 0x1000, 0x0, 0x1f}, 0x0, 0xd, r4, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3a) mmap(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:11 executing program 1: getpid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000180)=@hci, 0x0, &(0x7f0000000700)=[{&(0x7f0000001a40)=""/230}, {&(0x7f0000000440)=""/42}, {&(0x7f0000000480)=""/187}, {&(0x7f0000000340)=""/98}, {&(0x7f0000000600)=""/155}, {&(0x7f00000006c0)=""/17}]}, 0x5}], 0x2, 0x2000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)=@known='trusted.syz\x00', &(0x7f0000000840)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001840)="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") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r7, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r8, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0xffffffffffffffc7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback, 0x4}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf16000000000000b707000001a600ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f26fb0b71d0e6adfefdf1d8f7faf75e0f226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000000000000000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3fd77f1563292324b7ab7f7da31cf41ab11f12fb1e0a494054127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a736770a71ad901ace383e41d277b10392a912ffaf6f658f3f9cd16286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bda144910fe47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d462357b22515567230ad1e1f4933545fe2c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cc1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61af5bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3a3ee6c00084865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942e367f603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf9900000000000000000000000000da473b037e8afffaeea0adb050c301895188292170132e3e67c36c477c3bf910c76aa45173308faad9c4b2ea64d66eac7b15adc73a3892b72ad372541f24e275f47479a68691accd8e2725eb633c5ec4dc2ffebb3103237436f602617f04e1f11ecfa184dbe5ed6979ffd93aeda03681b25a311bd7ba48faccd9024df0bfa75f0e428e39aedd69d6b97b968bd3e31144acaed3b7155f5db0b23869b1548cbd131da574025706d5e17e96be191b0f1157f1731aae627053f6f1f4d07a456ebf000000000061a00ea6b4f0f1"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x6, &(0x7f0000000180)='stack\x00', r7}, 0x30) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r8) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x500000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x900000000000000) 10:54:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, 0x0, 0x0, 0x0) 10:54:11 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0xffffffffffffffc7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback, 0x4}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x6, &(0x7f0000000180)='stack\x00', r7}, 0x30) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r8) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2213.733599][T10570] binder: 10568:10570 ioctl c0306201 20000140 returned -14 [ 2213.741028][T10571] binder: 10569:10571 ioctl c0306201 20000140 returned -14 10:54:11 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r3 = memfd_create(&(0x7f0000000340)='#\tP\x81\xcbXE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\xdf:\nB\x03\xe1\xd02,)\xc6\xab\xc1 z\x94/\xaf\xbe\x128M\x16T)dg\x8e\x9a6JZ\xf6\x11\xcb>L\xa4\x96\xc2\xb2\xe2\x1e\xf8\v\x9fD&\xc0\xffc\x13_\x90\x87\xe49 Z\xffC(\x96\xf2\xdb\x7f\xf5\x10\xba\fX\xa8\xd2\xfa\xa4k\\\xc9\xd2\xa4\xb8\x85h\x90\xbf\x18\xf5<\xff\"\x0f\xda\x9e\x84\x1f\x954\xc6_G\x1a\xc7\x9a\x03\n\xfb\xf8KVNF\xfe[g\xce>.\xf2z\x0fwY\xa8\x00\x0e\x97\x80\xa0t\x10\xc1\'\xc3\x95\xa5\xb4\xd6\xa6N\xbam\x88~\x1f\xe1\xbf,?\x86[44\xc3\xc28r\xfe\x01\xbe\x8a\xb3P\v3\x90\xdb\b\x1f\xb6\x02\xf8\xeeq!^\xb4\xeci\xb9', 0x2) splice(0xffffffffffffffff, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) sched_setattr(r2, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfefffffeffdffffe, 0x400000000003, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0x0) 10:54:11 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback, 0x4}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x6, &(0x7f0000000180)='stack\x00', r7}, 0x30) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r8) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000440)=""/30) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x20488d1) sched_getattr(r2, &(0x7f0000000180)={0x38}, 0x38, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x10100, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r4, 0xb, 0x1, 0x38, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/timer\x00', 0x20000) pwritev(r5, &(0x7f0000000a00)=[{&(0x7f00000004c0)="ca324594296580edea8cb45fbc53b398b6f6fe02710839820d6dc37618978bef078a6db443f5af6f868e497ec1ce92890beb60b41cc8500baf9320762b1a939bf2e6e84ce26c1da467ab6625c81ed7c12602845397f0c3b8c6738bdf1cdb56aae549c2f0360a48c521da0ca64d16ace56b", 0x71}, {&(0x7f0000000540)="32dae34fad49c3d400f835515acf569fc922cbd49bcac56f5f0f042052d41599d6fe6862969b69b88536cac70ce0aeafcf2de2a8b4a7a516fc19b4f61326d8676bd0c5ea157c7512ad2a03fc77a28d24a3cbd987adab58966336f7cfecab50ec147e8239965dbab6c345f5eacdc5d7a6f354606e60d8303ea4595454", 0x7c}, {&(0x7f00000005c0)="eb7132aeb9c3903fe8079be7cf9432db8155ba36b2c585f7d87188d82bbc2dd3", 0x20}, {&(0x7f0000000600)="a67eb2c16d062577831ce329e5b2c81943c0dde17bd4b3e05f19700414f558cd06772305f9d2c81fda8f56da382da6ea12b0960a03e572348beffe7ea962383ca25ee9637870606f3d1dfcd7a99a2a2d6067b9b5a8f0e386c840df69cbf5f1436deefc631abb9671a2b4f26a57aef3d166e56ff5b0df40f34dd7cf546a24e73b85eeccccc2212f7efd2aa6a1bb61ce6b9037eefaf6dd3f8ddeb67fc233d2fa733319fc094fac2d6f93771db169e49855cbae44b7a1621cfc2132b2526ace1cd205b066c53b1c8e0b095ea0009b1df9dc1c4dd7fb673d", 0xd6}, {&(0x7f0000000700)="36d74e00a442550598dd9c5164551b19f9f7f246bdfd829f9d980f096a6973f97ad29b098c99fb81dbc6819c61423d9b0102cda10aa8fe0f41de285453d6fba05be57483d9b4fc2de88d50f7f1b1d5", 0x4f}, {&(0x7f0000000780)="45786114314b2250630a074c3d93551178ceb714c7c7b458a824973e63a555214313d3c7b82a8ceb9dc335c41408f414fbd91ba364b06ed57d2cc0886e76cfca4c1d0feaa1b2f37c45e1db8a28faae9f521e737643dc16798f6bdcf9d38f3fbeb8a14c9105e0ec9a32f18a3f0740232d2af55352912457ab7ad913b89638c4", 0x7f}, {0xffffffffffffffff}, {&(0x7f0000000800)="423954f308b09cc2da54ff3daf2d9bbe7ba579f8088ca25a524e7c0209f233f0e7a6a07b2b349a2b932b5c32b59a721c623fb3e841b3ed73c1405b1686fdcfd125feb94082b24d7e09122d1fcf5ab28dc26cb41a0d22b7956d70711c60bfad5772832f871e170097390d87ad53bab6892b38a59f99de1799cbe56e20bd1b762e156b8dc0bd8f9b4b0529a3fba031ea93c3ea0fb2904c11a2340c2788edf923714a798c3a4f819620168f6282f5827fa96e37dd4d58a4e8ac4730eb1ef9aea134e7248d4f5151e0a0e888e6d3de4176ddf019d6f97518aafa64b85088", 0xdc}, {&(0x7f0000000900)="5d89f473207c74de1084c28dbe681ad9893364c95012a352fa7d253dfad7c52080b2f9de0d536bbc9980d6172dcb37a5ad4a3135b70dc4460e658e4669945e206c2461146fa9e8cc95a8291dd16d2dda6f76d5736c3d4d631928bdd1feee1768dead9a2eaddf1ef37b5278bf1e4958f842043efac38f2fe0bc11812fde88b3f2085871b16bbc703eb4b7a022c4862edc805d23e9f4c23aa50ba197ae884870b392a57810a106d6d690e801bdbd20615ecc33ae492a1121e4b765fe2096415d2e6c3261831e", 0xc5}], 0x9, 0x6) 10:54:11 executing program 5: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x9, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xa00000000000000) 10:54:12 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000440)=""/30) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x20488d1) sched_getattr(r2, &(0x7f0000000180)={0x38}, 0x38, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x10100, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r4, 0xb, 0x1, 0x38, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/timer\x00', 0x20000) pwritev(r5, &(0x7f0000000a00)=[{&(0x7f00000004c0)="ca324594296580edea8cb45fbc53b398b6f6fe02710839820d6dc37618978bef078a6db443f5af6f868e497ec1ce92890beb60b41cc8500baf9320762b1a939bf2e6e84ce26c1da467ab6625c81ed7c12602845397f0c3b8c6738bdf1cdb56aae549c2f0360a48c521da0ca64d16ace56b", 0x71}, {&(0x7f0000000540)="32dae34fad49c3d400f835515acf569fc922cbd49bcac56f5f0f042052d41599d6fe6862969b69b88536cac70ce0aeafcf2de2a8b4a7a516fc19b4f61326d8676bd0c5ea157c7512ad2a03fc77a28d24a3cbd987adab58966336f7cfecab50ec147e8239965dbab6c345f5eacdc5d7a6f354606e60d8303ea4595454", 0x7c}, {&(0x7f00000005c0)="eb7132aeb9c3903fe8079be7cf9432db8155ba36b2c585f7d87188d82bbc2dd3", 0x20}, {&(0x7f0000000600)="a67eb2c16d062577831ce329e5b2c81943c0dde17bd4b3e05f19700414f558cd06772305f9d2c81fda8f56da382da6ea12b0960a03e572348beffe7ea962383ca25ee9637870606f3d1dfcd7a99a2a2d6067b9b5a8f0e386c840df69cbf5f1436deefc631abb9671a2b4f26a57aef3d166e56ff5b0df40f34dd7cf546a24e73b85eeccccc2212f7efd2aa6a1bb61ce6b9037eefaf6dd3f8ddeb67fc233d2fa733319fc094fac2d6f93771db169e49855cbae44b7a1621cfc2132b2526ace1cd205b066c53b1c8e0b095ea0009b1df9dc1c4dd7fb673d", 0xd6}, {&(0x7f0000000700)="36d74e00a442550598dd9c5164551b19f9f7f246bdfd829f9d980f096a6973f97ad29b098c99fb81dbc6819c61423d9b0102cda10aa8fe0f41de285453d6fba05be57483d9b4fc2de88d50f7f1b1d5", 0x4f}, {&(0x7f0000000780)="45786114314b2250630a074c3d93551178ceb714c7c7b458a824973e63a555214313d3c7b82a8ceb9dc335c41408f414fbd91ba364b06ed57d2cc0886e76cfca4c1d0feaa1b2f37c45e1db8a28faae9f521e737643dc16798f6bdcf9d38f3fbeb8a14c9105e0ec9a32f18a3f0740232d2af55352912457ab7ad913b89638c4", 0x7f}, {0xffffffffffffffff}, {&(0x7f0000000800)="423954f308b09cc2da54ff3daf2d9bbe7ba579f8088ca25a524e7c0209f233f0e7a6a07b2b349a2b932b5c32b59a721c623fb3e841b3ed73c1405b1686fdcfd125feb94082b24d7e09122d1fcf5ab28dc26cb41a0d22b7956d70711c60bfad5772832f871e170097390d87ad53bab6892b38a59f99de1799cbe56e20bd1b762e156b8dc0bd8f9b4b0529a3fba031ea93c3ea0fb2904c11a2340c2788edf923714a798c3a4f819620168f6282f5827fa96e37dd4d58a4e8ac4730eb1ef9aea134e7248d4f5151e0a0e888e6d3de4176ddf019d6f97518aafa64b85088", 0xdc}, {&(0x7f0000000900)="5d89f473207c74de1084c28dbe681ad9893364c95012a352fa7d253dfad7c52080b2f9de0d536bbc9980d6172dcb37a5ad4a3135b70dc4460e658e4669945e206c2461146fa9e8cc95a8291dd16d2dda6f76d5736c3d4d631928bdd1feee1768dead9a2eaddf1ef37b5278bf1e4958f842043efac38f2fe0bc11812fde88b3f2085871b16bbc703eb4b7a022c4862edc805d23e9f4c23aa50ba197ae884870b392a57810a106d6d690e801bdbd20615ecc33ae492a1121e4b765fe2096415d2e6c3261831e", 0xc5}], 0x9, 0x6) 10:54:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x600000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:12 executing program 5: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x9, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 1: r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)=""/179}, {&(0x7f0000001400)=""/48}, {&(0x7f0000002bc0)=""/242}]}, 0xfffffff8}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000002cc0)=""/4087, 0xffffffffffffff15}, {&(0x7f00000013c0)=""/63, 0x44}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000001740)=""/32, 0x20}, {&(0x7f0000001440)=""/127, 0x7f}, {&(0x7f00000014c0)=""/150, 0xb6}], 0x6, &(0x7f0000002b00)=""/147, 0x93}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001600)=""/11, 0x5}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000000400)=""/92}], 0x3, &(0x7f00000018c0)=""/155, 0x9b}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/54, 0x36}], 0x2}, 0x800002}], 0x4, 0x62, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(r0, &(0x7f00000004c0)='smaps\x00') write$FUSE_OPEN(r4, &(0x7f0000000500)={0x20, 0x0, 0x7, {0x0, 0xc}}, 0x20) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200040, 0x98) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000580)={0x0, 0x6, 0x7fff}) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000540)=@srh={0x3c, 0x2, 0x4, 0x1, 0xfe, 0x38, 0x6, [@private2={0xfc, 0x2, [], 0x1}]}, 0x18) preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xb00000000000000) 10:54:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2214.564027][T10614] binder: 10612:10614 ioctl c0306201 20000140 returned -14 10:54:12 executing program 4: r0 = getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)=""/179}, {&(0x7f0000001400)=""/48}, {&(0x7f0000002bc0)=""/242}]}, 0xfffffff8}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000002cc0)=""/4087, 0xffffffffffffff15}, {&(0x7f00000013c0)=""/63, 0x44}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000001740)=""/32, 0x20}, {&(0x7f0000001440)=""/127, 0x7f}, {&(0x7f00000014c0)=""/150, 0xb6}], 0x6, &(0x7f0000002b00)=""/147, 0x93}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001600)=""/11, 0x5}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000000400)=""/92}], 0x3, &(0x7f00000018c0)=""/155, 0x9b}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/54, 0x36}], 0x2}, 0x800002}], 0x4, 0x62, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(r0, &(0x7f00000004c0)='smaps\x00') write$FUSE_OPEN(r4, &(0x7f0000000500)={0x20, 0x0, 0x7, {0x0, 0xc}}, 0x20) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200040, 0x98) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000580)={0x0, 0x6, 0x7fff}) sched_setattr(r5, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000540)=@srh={0x3c, 0x2, 0x4, 0x1, 0xfe, 0x38, 0x6, [@private2={0xfc, 0x2, [], 0x1}]}, 0x18) preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="77a186d1c6b9cf07aec1963a00c650db255486d9bc1b022777cafae0e6b27dd9cfb41c78512489d339416479aa0eeb19aee79c5037174a327091d17b25bbe1e591277abe5f9ddbc7617b01a50414ac10e710c00e31d70b91eacfb3db95bd624b26a17cd7b8692822180c3e59b8ed3f4146169c47656a6f883a0fcef72e3a59b8722818a587dd8c24883189a1e8f2d344e0bf0ca4ca28a6f5"], 0x0, 0x0) gettid() creat(&(0x7f0000000280)='./file0\x00', 0x1) 10:54:12 executing program 5: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x9, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x2f, 0x0, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'erspan0\x00', {0x72}, 0xe441}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc00000000000000) 10:54:12 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x2f, 0x0, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'erspan0\x00', {0x72}, 0xe441}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000013000)=0x2f) 10:54:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x700000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:13 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x2f, 0x0, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'erspan0\x00', {0x72}, 0xe441}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) sched_setattr(r2, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 10:54:13 executing program 1 (fault-call:19 fault-nth:0): r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:13 executing program 5 (fault-call:14 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xd00000000000000) 10:54:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x10000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2215.392433][T10671] binder: 10667:10671 ioctl c0306201 20000140 returned -14 [ 2215.400074][T10674] binder: 10669:10674 ioctl c0306201 20000140 returned -14 10:54:13 executing program 4 (fault-call:2 fault-nth:0): mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x3a, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000013000)=0x2f) [ 2215.528558][T10748] FAULT_INJECTION: forcing a failure. [ 2215.528558][T10748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2215.542177][T10748] CPU: 1 PID: 10748 Comm: syz-executor.1 Tainted: G W 5.4.47-syzkaller-00290-g5eb96e454e88 #0 [ 2215.553747][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2215.563880][T10748] Call Trace: [ 2215.567166][T10748] dump_stack+0x14a/0x1ce [ 2215.571489][T10748] ? devkmsg_release+0x11c/0x11c [ 2215.576427][T10748] ? show_regs_print_info+0x12/0x12 [ 2215.581614][T10748] ? stack_trace_save+0x1f0/0x1f0 [ 2215.586633][T10748] ? __kernel_text_address+0x93/0x110 [ 2215.591986][T10748] should_fail+0x6fb/0x860 [ 2215.596393][T10748] ? setup_fault_attr+0x3d0/0x3d0 [ 2215.601570][T10748] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2215.606930][T10748] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2215.612465][T10748] ? __kasan_slab_free+0x1f2/0x230 [ 2215.617563][T10748] ? __rcu_read_lock+0x50/0x50 [ 2215.622661][T10748] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 10:54:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000013000)=0x2f) 10:54:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000013000)=0x2f) [ 2215.628815][T10748] kmalloc_order_trace+0x2a/0xf0 [ 2215.633758][T10748] __kmalloc+0x268/0x2d0 [ 2215.638012][T10748] ? proc_fail_nth_write+0x18f/0x250 [ 2215.643291][T10748] kmalloc_array+0x2b/0x50 [ 2215.647734][T10748] rw_copy_check_uvector+0x8a/0x310 [ 2215.653128][T10748] import_iovec+0x113/0x380 [ 2215.658247][T10748] ? dup_iter+0x110/0x110 [ 2215.662708][T10748] do_preadv+0x1d9/0x350 [ 2215.666946][T10748] ? do_writev+0x5b0/0x5b0 [ 2215.671390][T10748] ? fput_many+0x42/0x1a0 [ 2215.675708][T10748] ? ksys_write+0x25d/0x2c0 [ 2215.680192][T10748] ? __fdget+0x187/0x200 [ 2215.684412][T10748] do_syscall_64+0xcb/0x150 [ 2215.689082][T10748] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2215.694948][T10748] RIP: 0033:0x45ca59 [ 2215.698823][T10748] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2215.718966][T10748] RSP: 002b:00007f0fc1b82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2215.727389][T10748] RAX: ffffffffffffffda RBX: 00000000004fb0e0 RCX: 000000000045ca59 [ 2215.735366][T10748] RDX: 000000000000037d RSI: 0000000020000500 RDI: 0000000000000007 [ 2215.743480][T10748] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2215.751442][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2215.759543][T10748] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f0fc1b836d4 [ 2215.769925][T10758] FAULT_INJECTION: forcing a failure. [ 2215.769925][T10758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2215.784378][T10758] CPU: 1 PID: 10758 Comm: syz-executor.5 Tainted: G W 5.4.47-syzkaller-00290-g5eb96e454e88 #0 [ 2215.796206][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2215.806244][T10758] Call Trace: [ 2215.809559][T10758] dump_stack+0x14a/0x1ce [ 2215.813914][T10758] ? devkmsg_release+0x11c/0x11c [ 2215.818857][T10758] ? show_regs_print_info+0x12/0x12 [ 2215.824047][T10758] ? stack_trace_save+0x1f0/0x1f0 [ 2215.829081][T10758] ? __kernel_text_address+0x93/0x110 [ 2215.834454][T10758] should_fail+0x6fb/0x860 [ 2215.839313][T10758] ? setup_fault_attr+0x3d0/0x3d0 [ 2215.845026][T10758] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2215.850469][T10758] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2215.856027][T10758] ? __kasan_slab_free+0x1f2/0x230 [ 2215.861238][T10758] ? __rcu_read_lock+0x50/0x50 [ 2215.866017][T10758] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2215.872080][T10758] kmalloc_order_trace+0x2a/0xf0 [ 2215.877014][T10758] __kmalloc+0x268/0x2d0 [ 2215.881271][T10758] ? proc_fail_nth_write+0x18f/0x250 [ 2215.886700][T10758] kmalloc_array+0x2b/0x50 [ 2215.891370][T10758] rw_copy_check_uvector+0x8a/0x310 [ 2215.896580][T10758] import_iovec+0x113/0x380 [ 2215.901075][T10758] ? dup_iter+0x110/0x110 [ 2215.905676][T10758] ? perf_pmu_sched_task+0x370/0x370 [ 2215.910963][T10758] do_preadv+0x1d9/0x350 [ 2215.915203][T10758] ? do_writev+0x5b0/0x5b0 [ 2215.919621][T10758] do_syscall_64+0xcb/0x150 [ 2215.924114][T10758] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2215.930514][T10758] RIP: 0033:0x45ca59 [ 2215.934760][T10758] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2215.954696][T10758] RSP: 002b:00007f5367c72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2215.963110][T10758] RAX: ffffffffffffffda RBX: 00000000004fb0e0 RCX: 000000000045ca59 [ 2215.971061][T10758] RDX: 000000000000037d RSI: 0000000020000500 RDI: 0000000000000006 [ 2215.979955][T10758] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.988512][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2215.996587][T10758] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f5367c736d4 [ 2216.230653][T10727] binder: 10722:10727 ioctl c0306201 20000140 returned -14 [ 2216.238052][T10728] binder: 10723:10728 ioctl c0306201 20000140 returned -14 10:54:14 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x800000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xe00000000000000) 10:54:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x11000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000013000)=0x2f) [ 2216.291521][T10727] binder: 10722:10727 ioctl c0306201 20000140 returned -14 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000013000)=0x2f) 10:54:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x900000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:15 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0x9, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xa) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x1, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x20000000}}}, 0xfffffff2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x80000000}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, 0x0) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x3f8000000000000}, 0x0) r0 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000e7ac00000000016796755a00000000000000050067c9060006400000000005000100040000000800044000002250b8bdf10800050000000000015f6a1bc106286730d5343676586dd8dd87791e89e57db97349ab81db4a1289d76ecbefd0b3f55f0000bf610714db4e5257ee0284afe53340167a3b2c1774ba32d94c11ad0a7b6f2b094ae91f56dc788d2d587612ae1569646ef63f7658f94647ca9d1d3a3005fbd5865b9c90f3ffbe12be0f43db377d19b3957ad45b23c92ee9"], 0x3c}}, 0x24040000) sched_setattr(r0, &(0x7f0000000340)={0x38, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000380)={0x28, 0x4, 0x0, {0x3, 0x3fffc0}}, 0x28) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback, 0x40}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1000000000000000) 10:54:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x12000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000013000)=0x2f) [ 2217.109679][T10769] binder: 10766:10769 ioctl c0306201 20000140 returned -14 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xa00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, &(0x7f0000013000)=0x2f) 10:54:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1100000000000000) 10:54:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000180)={0x100, 0x7fffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:15 executing program 1: r0 = socket(0x2, 0x6, 0x9) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1c0000000, 0x3, 0xffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') preadv(r5, &(0x7f0000000500), 0x0, 0x0) [ 2217.945070][T10826] binder: 10818:10826 ioctl c0306201 20000140 returned -14 [ 2217.952489][T10828] binder: 10823:10828 ioctl c0306201 20000140 returned -14 10:54:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x20000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x36, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xb00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x37, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0x5, &(0x7f0000000200)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x5e, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0x11d) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x1200000000000000) 10:54:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) recvmmsg(r1, &(0x7f0000001d40), 0x0, 0x40010000, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x7fff, 0x0, @loopback}}}, 0xfffffffffffffce2) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, 0x0, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xfffffffe, 0x3, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20010}, 0x0) 10:54:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x25000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000013000)=0x2f) [ 2218.777695][T10875] binder: 10868:10875 ioctl c0306201 20000140 returned -14 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3b, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000)=0x2f) 10:54:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3d, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xc00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x3d792c0ea7774f32, 0x3ea, 0x46, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) 10:54:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0xea8}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0xe, 0x2e, 0x16, 0xf, 0x3, 0x8, 0x5, 0xc, 0x1}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/76, 0x4c}], 0x1, &(0x7f0000000340)=""/40, 0x28}, 0x80}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/164, 0xa4}], 0x3, &(0x7f0000000640)=""/160, 0xa0}, 0x80}], 0x2, 0x2, &(0x7f0000000780)={0x77359400}) 10:54:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x2500000000000000) 10:54:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x40000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000013000)=0x2f) [ 2219.602822][T10921] binder: 10917:10921 ioctl c0306201 20000140 returned -14 [ 2219.630469][T10933] binder: 10930:10933 ioctl c0306201 20000140 returned -14 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000013000)=0x2f) 10:54:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000013000)=0x2f) 10:54:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xd00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000013000)=0x2f) 10:54:18 executing program 5: prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) keyctl$describe(0x6, 0x0, &(0x7f0000000180)=""/36, 0x24) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getdents64(r4, &(0x7f0000000340)=""/4096, 0x1000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:18 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x4, 0x1, 0x9, 0x0, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/173, 0xad}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/89, 0x59}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000001900)=""/188, 0xbc}], 0x9}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000001c80)="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", 0x1e9) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e25, 0x1f, @loopback}}}, 0x108) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000200)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x4000000000000000) 10:54:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x48000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000013000)=0x2f) 10:54:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000)=0x2f) 10:54:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000013000)=0x2f) 10:54:18 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f00000000c0)=0xfeffffff00000000, 0x28, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0x20, 0x0, 0x3) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000140)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) [ 2220.427526][T10967] binder: 10964:10967 ioctl c0306201 20000140 returned -14 [ 2220.455319][T10977] binder: 10973:10977 ioctl c0306201 20000140 returned -14 10:54:18 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x7) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e28, @broadcast}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:18 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x9, 0x7, 0xfffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40), 0x3fffffffffffdd9, 0x23, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1d1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}}}, {{0xa, 0x4e2a, 0x1, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0xe16f0ff5d6fc106d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xc008002000000000) 10:54:19 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'veth0_to_bridge\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x330, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xa4, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x4, 0x9, 0x81, 0x4}, {0x40, 0x4, 0x3f, 0x1}, {0x4, 0x81, 0xff, 0x7}, {0x1, 0x7, 0xb7, 0x10001}, {0x5, 0xff, 0xff, 0x2afe}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x2, 0x5b}, {0x0, 0x1f, 0x20, 0x40}]}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x37}}, {0x8, 0x6, r1}}}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) prlimit64(r2, 0x7, &(0x7f00000001c0)={0x1, 0x9}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/164, 0xa4}], 0x3, &(0x7f0000000640)=""/197, 0xc5}, 0xd55c}], 0x2, 0x0, 0x0) getpriority(0x0, r3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0xe00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:19 executing program 4: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001680)=ANY=[@ANYBLOB="d00000002ef30469e5e816b27550f004b742c13443dfea6fe1e1122ec9eab209f28b388f68b135cac441ebabb6a755fdc960ca147fb97eed53fe0500daaf48ba", @ANYRES16=r1, @ANYBLOB="000226bd7000fcdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040003000000", @ANYRES32=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x16c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0xfffffffffffff000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, &(0x7f0000000000)) 10:54:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r6}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) [ 2221.247750][T11009] binder: 11007:11009 ioctl c0306201 20000140 returned -14 [ 2221.276561][T11061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62254 sclass=netlink_route_socket pid=11061 comm=syz-executor.4 10:54:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000002300)) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) [ 2221.293052][T11022] binder: 11021:11022 ioctl c0306201 20000140 returned -14 10:54:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000015c0)='veth1_vlan\x00') splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xf60e, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000280)="30fddfaa41527f92399d", 0xa, 0x6}, {&(0x7f00000002c0)="8d5cfbe5b20691832c73d6eeb6c1dbef7d331320d28db9a117ab4148ce543447893c03b35e79d9c1ef9ec9f8f64982ead63393ab8e9b472a", 0x38, 0x7ff}, {&(0x7f0000000300)="75783078e629bc33c4b7ddd2865d8434a1ffb43812aa0dc5e146cd9fece059d653c3da950e4d550068775eaeab596f2d1585059d9abed71df0e6c2c1a5adfa1169f8ba65f2f444847634f3ffae2905b5a18b5509680d780fa48b84e8bbf98b47b4827779d3109101457d28ffedde2e8e3943d5a7ae8345a9a52570612bd4f358f243a797ac9781c950b4b16e7bef5731e16cf7e1e578e5f9a8e6aaabf2be01a0e834c130141a8b4c676a71b135e4992a1d3fa40d79f01c69b649bdab6af16269bda70057aca72732ba3362393c27ade556f2355b3184ad1a0f4bbf044821f9d09defae", 0xe3, 0xfffffffffffffffe}, {&(0x7f0000000400)="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", 0x1000, 0x100000001}, {&(0x7f0000001400)="82efde21fcd61baf7f3a0c26a0a9202ce76067b29462262318067ded99572c77d8c30442cbeebfc5bbbdff48a4b9edc9d0ceda", 0x33, 0x100000001}, {&(0x7f0000001440)="fe862b26ff9e3d920d7af4c503af5da40779f3daa76971c888142b22d8dd99625cc2342e72ed8c185ec36f31fe465ff5cbaed66dd7e9f93008d50ae15666159b1082de9ff2cd759cdfcdec226c68ce1b41c07f03b928ad4a5666628c11086bb1", 0x60, 0x100000000}], 0x10c00, &(0x7f0000001580)={[{@data_err_abort='data_err=abort'}, {@grpquota='grpquota'}], [{@permit_directio='permit_directio'}]}) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000040)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x105182, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000140)={{0x1, 0x0, @reserved="9f6a16a224c3c28dc3c07a655d898c9519d79e39d4c89d546bb3afee9e033037"}}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r5) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xcf00000000000000) 10:54:19 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="458b72391b211d9c61f5127a0ade470200e60e0cc00fd15826cbaff31b65cc6095ce801037c9df01e58d274eeaab579f0e4ca2556b038bb8599da7e6092893c72e35636ef04335d8b6a233f218ab29284015d07096d06a24222fab12ab8f1add02ec3e89b347623b767d351a40a35334154a1ee3", 0x74}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\rP\x81\xcbXE\x00'/19, 0x5) splice(r0, 0x0, r1, &(0x7f00000000c0)=0xfeffffff00000001, 0x400000000003, 0x0) fsync(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000040)=0x20, 0x4) r4 = socket$inet6(0xa, 0x4, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x2) getsockopt$inet6_int(r4, 0x29, 0x5, 0x0, &(0x7f0000013000)) 10:54:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='setgroups\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff) 10:54:19 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x3, 0x1000, 0xa5, &(0x7f0000000000)="3d80b571bc95fbba512f76ef52581652517f5a0ce8cc734a119fee1d67600f778b7ff66132e0052cc3b83114bd87ee8b8e9c9baac9afa4e2c9f87b5a1e02ae6f4c43c0c9b30d10772d6f2598e240dedb91fd36c31f256653a75a5d36102e9c6958b944e51979d17dbd6d0a55c5cf391e3e16de1410271c1c73a4da2584831ca99613679efe74494d2e5eecf82da7a399fd010fc698a08170a1c7bf32e9c54a3253b40ac3ee", 0xeb, 0x0, &(0x7f00000000c0)="59e6925f51364e317abe7584eb8d52a785374d15224a15182cef9bca3e6adb69232ddbc46f9e49bf07ee4751faa612fd513db78b8d28cfd3d46cd3b53c78e31f5094b7ca675c1a779a04c515dd65e657415c0072c421f69e0a117a1e4af2b68e2bdfd346709b9a471e16c3dcbe2b2b8f46267f401da970fbfc124bb81908f98816582371fff3d8581c4f9f19ebf7b6045d5481fa9041c7e7950940c102be6dba2ebf696ecaa6e4792b11666deae3443e4f4cce961ff1e5d15975ee4edfb30155304101cc085b44a3617e3cf0604d8d4eba515f5dbe62967311188c8d5e0053d71eb4965f9ebde565f70f2a"}) 10:54:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1000000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) getgid() 10:54:20 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x9}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xffefff7f00000000) [ 2222.074272][T11062] binder: 11060:11062 ioctl c0306201 20000140 returned -14 10:54:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x9c, 0x1, 0x39, "3baf52350bb91669572b52d4bc71a7b3", "db89a0e3caf04f4dad9939dd325137a2e6480ae4d68996cf05fdf9543a2bbe3b9aacb144071a985515337a680c3dd91162a8e71d81809bff4b2f410c28b391e0dc754f5944e5e6f32b94f767923e0f90ef02861745b4facd1fdbf074e28f5bcab38f06e7cf31b85de1eec8bd638af0d8786bbe2d3bf0807d3f1ee94c21fae1822302e69d956ec5"}, 0x9c, 0x1) 10:54:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x60000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, r4}, 0x14) 10:54:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002abd7000ffdbdf250e00000005002d0001000000050029000100000005003b000100000008002c0080000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000140)={0x80, 0x1f}) [ 2222.119537][T11077] binder: 11074:11077 ioctl c0306201 20000140 returned -14 10:54:20 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x80, @private2, 0xfffffffd}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e26, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xb2d, 0x9, 0x3, 0x0, 0x10000000000000, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r3}, 0xc) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xc0030, 0xffffffffffffffff, 0x8) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0xfffffffc, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1100000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xffffff7f00000000) 10:54:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r6, 0x390c179b360adb45, 0x70bd2b}, 0x14}}, 0x40080) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8840) r7 = dup(r4) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x100, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={[], 0x38}}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x3c}, 0x6f, r8}) r9 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r9, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x2, 0x2}, 0x26c}}, 0x18) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:20 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000001480)=""/105, 0x69}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x100070) getpriority(0x0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x40, @ipv4={[], [], @empty}, 0x5}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbd828da7daab3b30f290000000000080034000600000008000600", @ANYRES32=r5, @ANYBLOB='\b\x00\v\x00\a\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="fb4a155deab33f", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf25100010000800cc0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 10:54:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) creat(&(0x7f0000000000)='./file0\x00', 0x1f8) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x8, {0x7, 0x1f, 0x208, 0x2000000, 0x5, 0x1000, 0x1, 0x1004}}, 0x50) 10:54:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x68000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2222.899509][T11132] binder: 11129:11132 ioctl c0306201 20000140 returned -14 10:54:21 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x5, 0xa, 0x0, 0x9, 0x0, 0x0, 0x4001000000000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/251, 0xfb}], 0x5}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000780)="b79b01a9bc677a91488b47c52b148b732fff86d21277bb1207d5a0e90d062a31e42aa1417ef79e0b240c519c4aa4c7b60100000000000210000000000000d7120d5ae1701998b77c36235bd66ba9031922ac051f7d67dd1a329990aa3b5d645febbca8e324d5cbd00920f9ea6a92e63530023a001a9d5ebfade386a6697c7b9a75f1564a18aed1b9e0c9be8636e658e877464ed52a4f139cb81a629f2f20dc1a808f841e0233e80f4b1eb9f50c69f617a0f0094b16c51cc7b034febf4d2cfd46eeeb60fc29b23457b615", 0xca}, {&(0x7f0000000680)="5814c645d6e0e9e95a7533e1c3fde21206edf6a09cab26ed9adf3eafed0462e9cb02e398719f49a8011d20109302629a3af9dc35cb16600db556", 0x3a}, {&(0x7f00000006c0)="2ae47e310e1137b45c256b4e6ee2b8c69a428dc77f3dab7e454b04941d3dd589aab8a9e8a6a15013c4acd389e827b49427467683ab9573bc5b47bd995bab7db0259cd96c86c0370b6907e05c10e714d48df08d56c568", 0x56}], 0x3, 0x0) socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, {{0xa, 0x4e22, 0x0, @empty, 0x25d}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0xffffffff00000000) 10:54:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000340)="20b2c633178f7a925b43c2dda0f54903e01e872a6b655a80d3ea5896274d60d4775b22c8533316a9d9d91911f3712fa2749522d692b10957ed38c539b198f9698c30e387a1c13f68836516f45285d61e70d04ef73b952c56b57486f7aa659ebdcc217a59dc70cc7ac188747cb31e2e7a5c16c6734a1de591c05b42b971511c8483f8807cfdd972fb5fc05d925bf3a984c1ea158c56ea7c8fb4f5066c8795377ba6565c900f8dc9226b6ff5f76b5e27fc0691c956f67934bb6dd6ba6a6e2bb9dd2b4212d8b4", 0xc5}, {&(0x7f00000007c0)="0f2ae22feba834ec4b0d58e292bb43b9628e0fdf7a5c9d86ff63f8bdc9349415359309e9c942a1caf6f31fe0189554673b7cbf9d91f1c6999b3a06fd48352ed9feb9a9b77fd52e58148e957efab1d2075adb816e5be6404d97fe5c5db3151d0469798ba9a9ecfa335e5f83d65d7b7a8d2d846e8cce4eb8ed3cd041a087b74de2c373f8fd451a9fd9c59c18f75b2fb2cdbe49", 0x92}, {&(0x7f0000000000)="7f6af6b094a40a87acaec40e31aaa95280d047c097d7d892792475859a3793511bf89fd9", 0x24}, {&(0x7f0000000500)="651cb8a305774ca6058df4745c7f1b7babe7ab868397e588437515558ae1687c69701c151f5e3164d0e680f4248a7b315be097ea1b56da87dea08f293707ab67b5b6271842144036e609a1aa33755ac1", 0x50}, {&(0x7f0000000580)="60519561c988d41f7a3a2138a8f62e735d1b01be30bb95dd2d0b1e652ba5d980b3ce2b9f73dfe1e292d3420ae5fde0458866facaeb9ad7dfb1f99763b9329fec43f5e8ce710182c6c67d155d53dfa00d732099b932e5f54bc508a5da8c8fdf80ae2ab9d12e01cbe2d0332ee416c82a7cfd70954a49f259339d4838c24be9e284f87a433e710532e0c08c8bd02f87d5c20d1081266f566e824b1537be1070e12d", 0xa0}, {&(0x7f0000000640)="c8d2f6b25547a3e3602b0ba923fe4e9eab2a0481be6d35fc9f7c016f73a5dccbb1fe3ffef681a43f06bd3dea4f2eeb998b370d19938526d8d8a31196c7d18aa656dbc96fa34d159ee458a2285a597390d28ea60d1beb40fd7bf6859b48e77385cdb188038d24a3", 0x67}, {&(0x7f0000000240)="af28bdbc3159e1654fad8e9272be2853226e46c5f311848468ae75b96ffbec23c3", 0x21}], 0x7, 0xb) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x3, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x3, 0x100000) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x1200000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/149, 0x95}], 0x4}, 0x1}], 0x2, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ffdfff9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0x2) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) splice(r4, &(0x7f0000000380)=0x7, 0xffffffffffffffff, &(0x7f00000003c0), 0x1ff, 0xd) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000100d7b3ce12d835d45d7aab97a2c2b0533b97000700"/40], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 10:54:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xffd, 0x6}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() pipe(&(0x7f0000000080)) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) fcntl$setpipe(r5, 0x407, 0x1) sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x5) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x10000000, @loopback, 0x1}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2223.727873][T11193] binder: 11190:11193 ioctl c0306201 20000140 returned -14 10:54:21 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x2, 0x9, 0x0, 0x8, 0x1, 0x0, 0xfffffffe}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x100000) getpriority(0x0, r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0xc800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x4, 0x60d163f8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000040)={0x3, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}, 0x80}}, {{0xa, 0x4e22, 0x0, @local}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x4, 0x5, 0xc, 0xf7d6, 0xffffffffffffffff, 0xfffffffa}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 1: r0 = socket(0x4, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="ac2225058c6c6ebf95dd65bdf97c5fd704295f55bf1dbe9b3beefc0c66aea5749884eaf0832628ea84455c0da951f0fcf6a02e4868cbd46659c9ce94c02455cf421e3edca1842126964f2398ef8c7bfc", 0x50}], 0x1, 0xa) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e24, 0x200, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x4, 0x0, @dev={0xfe, 0x80, [], 0x33}, 0x200000}}, {{0xa, 0x4e21, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') utime(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x2, 0x100000000}) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x800000, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2000000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:22 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x49, 0x9}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x8210103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)="414e078bc63db28df6e1c8806579aa486c351f2fca2c414f8a7d8bc2ad37c6ba3625bbaf01ab89f8475a3d7962d8aefef3833f9fa3517d6d34d08c93bbfcfe9e34f864ba47a2a64bf9fa5a789b2f85e6cecf5d5613dd1e54b6eff3b01944d75fad7a14ca26b5dc25ace288728af9f56aa72a3f95780ae7556e65b8dd684729534a880ff733d7ae0d9a58fa", 0x8b}, {&(0x7f0000000400)="35eff9402db6e331e18ebc0f7311e8aed883423d1c53d34fc294af7e2a3a86c0cebb60b87a2482504be66f768656f51ffd078e7cb556fd4d1c8f7b2d5bf047ec52303b494b69107951df8cc634ffa5445f8013610706417ef8212e20da212e09d47a0af46c63cd4ac1bef19128a3c365b79d903a67cfa70bf09788d4200441b1b75458748f0e267dde4df673232bc405f883dba62baf4c6bb7e9f994a593fe1705d4f375e7d5ec4986e2a0220bafb8476316e4ef9e8b1d87d84053202c99fa332b808c238a3da81f347591b3f3d8f09dda4b4e3e1b90a36f4ce56a5607", 0xdd}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() open(&(0x7f00000002c0)='./file0\x00', 0x18000, 0x10) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x121200, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000003c0)=@generic={0x3, 0xfff, 0x76}) sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000340)={0xffff, 0x0, 0x400, 0x8001, 0x5, 0x86}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x7, {{0xa, 0x0, 0x20, @private2={0xfc, 0x2, [], 0x41}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x74000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2224.591697][T11263] binder: 11258:11263 ioctl c0306201 20000140 returned -14 10:54:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ptrace$peek(0x2, r4, &(0x7f0000000180)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000480)={0x1, {{0xa, 0x4e20, 0xffff, @remote}}, {{0xa, 0x4e22, 0x0, @mcast1, 0xa4}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0xa208d03, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x3e, 0x6, 0x7f1, 0x20, 0x80, 0x2e4}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@local, @in6=@empty}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x6c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '+^[user.self\x00'}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5632a0353fd354655e39460f538fe6ff4100000069136d92339d304cb104fb24af7b1e3579dc160f30850ae0fe5a4c9c964b2eefd8f185a817273fa020f583de12e658b27365e45e735ded9a2d4050ec331b7626bcb0331c78fe7a928fee110b6e9da6e34d2884966cb79b594f5846986d467a1be9aff986c758f434c24489838cc1941e06d3b5ee8f4efe", @ANYRES16=r5, @ANYBLOB="00082bbd7000fbdbdf2502000000080004000200000008000700ffffffff140006000000000000000000000000000000000106000b0028000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000082) 10:54:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read(0x0, &(0x7f0000000880)=""/42, 0x2a) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0x40}, {0xa, 0x4e24, 0x2, @remote, 0x8}, 0x9, [0x2, 0x4, 0x20, 0x5, 0x7, 0x80000001, 0x81]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)="e3ddb3a319ace3ba8d7cd88d97a7725b62620e3136a9e73bcd7fe4e5ea24cc4b6450458f1ec200046ed70d6fe5f181fbd5480fce97a77f097c1d944c1f17795618036026d4674105481ad3402b5e5327b79d2911beeb044408f379646623588f77594b31bc8a749da519b48fe2e647b633cc1b305aace6cb825b702265f23b1994", 0x81}, {&(0x7f00000001c0)="5cc3ce94", 0x4}, {&(0x7f0000000380)="8fefdfda720711c21e93d4eacfe654417892880775a1c80cf2264c2ea0b42180c6b97d62c37af61d233ce7d3e336a421987a18217a573c9b416c0e3792e646253da3b7f8693f934bc52a6e4c428ac5a29b3a", 0x52}, {&(0x7f0000000440)="853e624eab1fb3992de1373224f75cc563984b06a084b5129188cbbbd567b95694bd14f851b41edd579ac4f1c4e598af6c867d9415a73d4af7a070a2fac5960d7337d99aee9355fc3a637590eda57f01ba08792eb77039f7bdeb97a89f322f5ed889b947e0715c69aad462546b549f9702fe7ebc375e8f7dd01c220973b7d8c3dd5e97bd14ef2950d6bd5b11de2433108679173900573b8dd8c8e12c425e", 0x9e}, {&(0x7f0000000500)="3ebda38bdf98fdf6523369db291bf114fb9da80f37984411d3e170d23fa1c981853c27b4ce0b50dab8355907a843743e78a267c8f7d0728ca54c0ea03d2f23d7a24b58e88db77ae204aee7f911806aa6b469868966c30aad95edd5cd0c371bf8c38e25d6affdd1530c6af18c097da43cb54f36b3076c0f8e8ba57a", 0x7b}, {&(0x7f0000000580)="a5e753988fef6ce1e1b842a0f071f362d15207c59a1095ce91d0a65f8166b4e24721b4ec55980d52ea4bd1d5fdc3b00f83b00140dcb10689a5067e904b0888aad76ca873abb415f6f4b28bf3823ddcdd35e0cdb3eaacfa3b9743060952a287d58375b6a297681a181cfaa8a9bab1e6133a", 0x71}, {&(0x7f0000000600)="cd67fc2bf6cfbaa34536aa6f9861cc0936fc005ba965e537c71dc359f13a8a0c544b0be9151a8a9f5381548033f47422720f503de05ee4140cce25665966aa97fa12b9121443541d9b7d6037bacd8aa95ef23d94768b40342ef4e8f362eff2d2a505ce593ad5522713d9342b151683b8c54958fb2a600025ddb4a77f3e2dbae221fac17fe4259484fd79937f1f6c48", 0x8f}], 0x7, &(0x7f0000000740)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x60}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@private0, 0x4e21, 0xf801, 0x4e22, 0x7e16, 0x2, 0x80, 0x80, 0x5, r7, r8}, {0x1, 0x400, 0x2, 0x8, 0x7, 0x8, 0x8, 0x60d1}, {0x10000, 0x200, 0x37, 0x7}, 0x1, 0x6e6bb5, 0x1, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d3, 0x50}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3500, 0x3, 0x1, 0x0, 0x7ff, 0x10001, 0x96b1}}, 0xe8) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x400dc7d29322421d, 0x3, [0x101, 0x2e, 0x2]}}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000080)) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xa, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioprio_get$pid(0x1, r6) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) [ 2225.421737][T11334] binder: 11328:11334 ioctl c0306201 20000140 returned -14 [ 2225.484781][T11386] ================================================================== [ 2225.492967][T11386] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0x1949/0x2330 [ 2225.501631][T11386] Read of size 8 at addr ffff888181f8fe08 by task syz-executor.1/11386 [ 2225.509883][T11386] [ 2225.512200][T11386] CPU: 1 PID: 11386 Comm: syz-executor.1 Tainted: G W 5.4.47-syzkaller-00290-g5eb96e454e88 #0 [ 2225.523709][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.533764][T11386] Call Trace: [ 2225.537054][T11386] dump_stack+0x14a/0x1ce [ 2225.541358][T11386] ? show_regs_print_info+0x12/0x12 [ 2225.546710][T11386] ? printk+0xd2/0x114 [ 2225.550774][T11386] print_address_description+0x93/0x620 [ 2225.556305][T11386] ? preempt_schedule+0x110/0x130 [ 2225.561314][T11386] ? schedule_preempt_disabled+0x20/0x20 [ 2225.566918][T11386] __kasan_report+0x16d/0x1e0 [ 2225.571571][T11386] ? unwind_next_frame+0x1949/0x2330 [ 2225.576823][T11386] kasan_report+0x34/0x60 [ 2225.581145][T11386] ? memset+0x1f/0x40 [ 2225.585121][T11386] unwind_next_frame+0x1949/0x2330 [ 2225.590205][T11386] ? retint_kernel+0x1b/0x1b [ 2225.594782][T11386] ? unwind_get_return_address_ptr+0x130/0x130 [ 2225.600907][T11386] ? unwind_next_frame+0x2330/0x2330 [ 2225.606162][T11386] ? retint_kernel+0x1b/0x1b [ 2225.610741][T11386] ? __schedule+0x918/0xef0 [ 2225.615217][T11386] ? in_sched_functions+0x9/0x40 [ 2225.620154][T11386] ? stack_trace_save_tsk+0x490/0x490 [ 2225.625518][T11386] arch_stack_walk+0xf4/0x120 [ 2225.630172][T11386] stack_trace_save_tsk+0x2e7/0x490 [ 2225.635355][T11386] ? stack_trace_consume_entry+0x230/0x230 [ 2225.641197][T11386] ? _raw_spin_lock+0xa1/0x170 [ 2225.645938][T11386] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2225.652419][T11386] ? __ptrace_may_access+0x2b4/0x530 [ 2225.657701][T11386] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2225.663300][T11386] proc_pid_stack+0x12f/0x1f0 [ 2225.667954][T11386] proc_single_show+0xd3/0x130 [ 2225.672801][T11386] seq_read+0x4aa/0xd30 [ 2225.676945][T11386] do_iter_read+0x43b/0x550 [ 2225.681437][T11386] do_preadv+0x213/0x350 [ 2225.685705][T11386] ? do_writev+0x5b0/0x5b0 [ 2225.690093][T11386] do_syscall_64+0xcb/0x150 [ 2225.694583][T11386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2225.700620][T11386] RIP: 0033:0x45ca59 [ 2225.704488][T11386] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2225.724497][T11386] RSP: 002b:00007f0fc1b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2225.732894][T11386] RAX: ffffffffffffffda RBX: 00000000004fb0e0 RCX: 000000000045ca59 [ 2225.740838][T11386] RDX: 000000000000037d RSI: 0000000020000500 RDI: 0000000000000007 [ 2225.748779][T11386] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.756728][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2225.764684][T11386] R13: 0000000000000879 R14: 00000000004cb652 R15: 00007f0fc1b626d4 [ 2225.772628][T11386] [ 2225.774932][T11386] The buggy address belongs to the page: [ 2225.780548][T11386] page:ffffea000607e3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 [ 2225.789624][T11386] flags: 0x8000000000000000() [ 2225.795076][T11386] raw: 8000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 2225.803629][T11386] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 2225.812196][T11386] page dumped because: kasan: bad access detected [ 2225.818589][T11386] [ 2225.820885][T11386] Memory state around the buggy address: [ 2225.826489][T11386] ffff888181f8fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10:54:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x7a000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2225.834533][T11386] ffff888181f8fd80: 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 00 00 f2 f2 [ 2225.842580][T11386] >ffff888181f8fe00: 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 2225.850610][T11386] ^ [ 2225.854932][T11386] ffff888181f8fe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.862963][T11386] ffff888181f8ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.870990][T11386] ================================================================== [ 2225.879030][T11386] Disabling lock debugging due to kernel taint 10:54:23 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}, {{&(0x7f0000000200)=@nl, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/125, 0x8f}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000001400)=@caif=@util, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)=""/225, 0xe1}], 0x1, &(0x7f00000015c0)=""/75, 0x4b}, 0x599}], 0x3, 0x2020, 0x0) ptrace$setopts(0x4206, 0x0, 0x4, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x9, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x9, @mcast1}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:23 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) ftruncate(r0, 0x61e1) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) r2 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='-)\\:+?^+,)\xc7*)!*!\'^\x00', 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r2, 0x7) 10:54:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x2500000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="dcacafe1c920ac175506b4ebb8949d58050713df2567a30763c8c97ee149852315012d9d9ec1999876a63c88ab2ae9de1f58b3296282286cce1c52d1e9682e", 0x3f}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) quotactl(0x80000000, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000440)="26ea2f93725bfd87a4269008facd86ce58b1745f8adde65244d76dc32bbfc73d7918994f760d7f2a8061f138993e1b7d3c634c5dc2d836ed409f43c2bba46bb3a4a012f9e6df79ddad4d5e44740af70a2b793453999480d22a73ee5c02ad1118c5f233d804506cc984d55f0d3ee4d4f5835b80b91bc0736dada9a9765ac6a3bca8426ab3a34e5a8c") clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000180), &(0x7f0000000200)=0x4) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x4, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x161, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="7b374bd061f630a99b57917d44a066dc7d6823c4363d8a8daeb044f8434cd658960b145918c2a7d1564204e1aa1613f2459e082de58bcc7b2c", 0x39}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfb, {0x40, 0x0, 0x2, r0, 0x8, 0x3, 0x682, 0x1000, 0x0, 0x34a}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000081}, 0x2400c040) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r3, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf25010000000000000007410000004c00180001000073797a3000"/98], 0x68}}, 0x8010) r8 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r8, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:24 executing program 4: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @local}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000180)={0x18, 0xfbfde2b3d97d7e47, 0x5, {0xfffff51a}}, 0x18) fcntl$setflags(r5, 0x2, 0x1) 10:54:24 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0x1, &(0x7f0000000200)={0xb, 0xfffffffffffffff7}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x5}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="2aed5f50af2cded3ce0835475b5e300c881f7c46fc1dfced7f3e570c85953fcb67b855e3c1939d5aa5186ffd16515feef58512be39c70e9c0d324d80cad6d33a92505aedec34bbc4a4762c3f39940c8bfbda6c0f8d44a99c4e456c5863d3299a0aafebcaa84b0f6cbb866b03a5a8e639f6a93f539969eaf2a591249864c23dd103d0ded876e31d413823094e78309318fee13371f43d389f6341704be1e49808ee7d15cf", 0xa4) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4a24, @remote}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 10:54:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x100000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 10:54:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ptrace$pokeuser(0x6, r0, 0x4, 0x80) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4000000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x142, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) chown(&(0x7f0000000180)='./file0\x00', 0x0, r7) 10:54:24 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80000, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @mcast1}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\xff\tP\x86\xcblE\x00'/19, 0x1) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000f, 0x31, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) [ 2226.730359][T11395] binder: 11392:11395 ioctl c0306201 20000140 returned -14 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='#\tPc\xcbL\x93,\xa4^\xc7\x83\xb8up\xae\xd2\x8b`XE\x00\x00\x00\x00\x83\x83\xcbR\x8c\xe8G\xac\x00\x00', 0x4) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:24 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xd9d) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) write(r2, &(0x7f0000000000)="0eb3ead403fb15bca238d0c860ad2f10147d11d2180fd1b0aa5105540d019a8f49e27a623c2b6ebd02b60fbfceacd0ac1eb38c65522a98dbe405cf807d662a756e03cc2a51a3a624481a1033135256379a17c08b7dd6c19decea5ee727b55659b5e02d3495e27a27ee341a80163efae6f8f20da3e7f6d6c060f82b0e2cd24cbf756911047b3da866c28f3d8fb964c9b71531ca0b10a86acb7fd33505dd28f026e4e5b9f67a8e", 0xa6) 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0xa) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pkey_alloc(0x0, 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0x1, {{0xa, 0x4e22, 0x8, @loopback, 0x8000}}}, 0x88) 10:54:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) clock_getres(0x2, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x200000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:25 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @loopback, 0xfffffffd}}, {{0xa, 0x4e22, 0x0, @mcast2, 0xfffffffd}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x81, 0x3, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r3) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:25 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0xfffffffd}, 0x0) ioprio_get$pid(0x4, r0) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4800000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\xe7~Q\xa2\xdc\xb0?\x8d\x86\x81\xcbX', 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000180)) 10:54:25 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x8000, 0xce05, 0x57e, 0x6, 0x400, 0x3ff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000013000)) [ 2227.553951][T11452] binder: 11450:11452 ioctl c0306201 20000140 returned -14 [ 2227.561391][T11453] binder: 11448:11453 ioctl c0306201 20000140 returned -14 10:54:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000000)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000001, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xf, 0x1010, r0, 0xffffd000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x4e22, 0x0, 0x4e23, 0x1, 0x2, 0x80, 0xa0, 0x2e, 0x0, r2}, {0x4, 0x80000000, 0x5, 0x8008, 0xa742, 0x7f, 0x3, 0xffffffffffffff7f}, {0x6, 0xf1, 0x6, 0x40}, 0x8, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0xa, @in6=@mcast2, 0x3, 0x3, 0x3, 0x7, 0x8, 0x6, 0xc8a2}}, 0xe8) r3 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000340)='#\tX\x81\xcb\xd1\xbd\x01WX(KY\xd54\x91b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00', 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x202601, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x101}) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r7, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfefffffefffffefc, 0x400000000003, 0x0) fcntl$dupfd(r4, 0x0, r8) getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f00000000c0)) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x5}, 0x16, 0x2) 10:54:25 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0xfffffffe, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'geneve1\x00', {0x2, 0x4e24, @loopback}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000180)="404b57c3478fe8ceb8ed37b7ac5e7fdf1e2b0243ff8966b87acaa5517e60251b5cff1770e23e", 0x26, 0x4008080, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x1000000, {{0xa, 0x3, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) 10:54:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x80040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000200)={0x1, 0x1, 0x2, 0x12, 0x1ad, &(0x7f0000000340)}) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:26 executing program 1: r0 = socket(0x11, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0xa, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x300000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x4c00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="ec060a000a0002000106c20000000000"], 0x28}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x2c, 0x2, r6, 0x29}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)="a9ba225310a3afec0a36c46238a5661258c4e7f149b50df6cab12d96835f89ef34ef7cd5c46cde1062de09e40b7adbbd1eb12c0a49288c2ecf7b84289e704d9727f08030a70d26f6bdb3ad658d8815dc8c5037068d49015a6801f9b9ed742feac06cd789846578bd31b4c6cf4fa69556278076725073e982d996b7f3f881842b5b08745b0c3ba8da3caee3c195a8ced6571fc68c1040d6fc285b07b8d9b616563eda288ebc6b561b41bde7d5197f34ed4ba7dea6ceceff2f0ae3739e2e4846323e50604aeed499a7086f73bf0bfcdfcd5d89", 0xd2}, {&(0x7f0000000240)="0fd5e2280eb5d12727e061cde70d6b95fc24abf22d2920185ef4a4f3646ef5d2935aa00a79e1202c701c984a11e884b24dca13907fb236745715d01ac37a0dca30668f31989cd2f2733b925584", 0x4d}, {&(0x7f0000000440)="0351775e4254dac218512f48c7c91e7456b0dd16f23013577cf35fd18799da479f86544180d590e6971e0fa739524663246f5b2b90b15022c864a5fffb5aa399c7f15c665efea4882056b0bf45f3527dc5180e3aac6b193da64b1fc1207d833d7fee00d51b934e0202ffdf49e0a11f169b45f912201cd4c1de9e3aa37c6ab7188a1416dc8334ef692c4ae8a4a51a5883f1dfb782d7f6e3f8c38f30d203f9078fb0be04af9b53057f9f2dbfdce4fb7523e0a25f97", 0xb4}, {&(0x7f0000000500)="bff98c4d387f62936c80c990a69800", 0xf}, {&(0x7f0000000680)="923d010400f3eaf588dabd6ae6eda359a7bebc0e93f4820411108a9f3b1bb8be5bd67aec44907693196369d1ed2bc7abc9adbd7c5a4331bf4f9a27cfca11482d3c9203adbf86aa5cd6ba2b8bda82f70019657c18d63c226399170a557b2e9ebdfbaf", 0x62}, {&(0x7f0000000180)="9f511eb320b086305aacf2a70297a6869916b131cc9a7459a8a56c035fd5355d7212b907ad8e1c818538618841ed7afbbc473708be886eb75971f24c3493", 0x3e}], 0x6, 0x0, 0x0, 0x4000090}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) [ 2228.390453][T11513] binder: 11511:11513 ioctl c0306201 20000140 returned -14 10:54:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000000340)=ANY=[@ANYBLOB="d00000002ef30469e5e816b27550f004b742c13443dfea6fe1e1122ec9eab209f28b388f68b135cac441ebabb6a7550300000000000000ed53fe0500daaf48ba", @ANYRES16=r2, @ANYBLOB="000226bd7000fcdb5f25ffffffff0e0001006e657464657673697d0000000f0002006e650900657673696d300000085e2bc32f000300030000000600040003100000080001087063690011000200303030303a30303a31302e300000000008000300ea45c2b115970100000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003649e37fa4e0fdc047f00000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000001", @ANYRES32=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="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"], 0xf4}}, 0x8000) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:26 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x7a5a, 0x51279f05, 0x100000003}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r4 = fcntl$dupfd(r1, 0x0, r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() clone(0x80, &(0x7f0000000180)="fb57cab1069aecc1c58b920773069cf3e4d7c11ffaf2d7734e08e8601fee5b4d269da933e21c53", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340)="efd7597f22b130b7952eceb4626ae201b8f6355223d77569d8d4a45b08186d9d2392a2f19d04c9eaa1961e78c636df1af9927850cfd801f1bf790aa69e976bbed70d03e552c841653c1e171700c9b858ace4cd41e7c92740a43c64791b207524274580a6e7d9be8530d31d57065b809ffadeec21c006073473ad6b4d78a7059b2b4a38495539f7d7872489f18bb61e83fd3893c5ee334eead2391cc8876bfba099e3bc9e9ae10e9e24283d3fa85eab4e0659aaab0c0acab409c608") sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) prctl$PR_GET_KEEPCAPS(0x7) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x90200, 0x18) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0xff, 0x7}) r3 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6000000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x400000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2229.255074][T11581] binder: 11579:11581 ioctl c0306201 20000140 returned -14 [ 2229.255396][T11582] binder: 11580:11582 ioctl c0306201 20000140 returned -14 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000200)=""/91}, {&(0x7f0000000340)=""/174}, {&(0x7f0000000400)=""/163}, {&(0x7f00000004c0)=""/236}, {&(0x7f00000005c0)=""/33}, {&(0x7f0000000600)=""/233}, {&(0x7f0000000700)=""/204}, {&(0x7f0000000800)=""/4096}, {&(0x7f0000001800)=""/141}], 0x0, &(0x7f0000001980)=""/4096}, 0xe9fa}, {{&(0x7f0000002980)=@caif, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002a00)=""/168}, {&(0x7f0000002ac0)=""/130}, {&(0x7f0000002b80)=""/98}, {&(0x7f0000002c00)=""/217}, {&(0x7f0000002d00)=""/24}, {&(0x7f0000002d40)=""/114}, {&(0x7f0000002dc0)=""/222}, {&(0x7f0000002ec0)=""/159}]}, 0xf053}, {{&(0x7f0000003000)=@pppoe, 0x0, &(0x7f0000004640)=[{&(0x7f0000003080)=""/156}, {&(0x7f0000003140)=""/4096}, {&(0x7f0000004140)=""/235}, {&(0x7f0000004240)=""/203}, {&(0x7f0000004340)=""/176}, {&(0x7f0000004400)=""/176}, {&(0x7f00000044c0)=""/167}, {&(0x7f0000004580)=""/153}], 0x0, &(0x7f00000046c0)=""/4096}, 0xfd3}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000056c0)=""/206}, {&(0x7f00000057c0)=""/96}, {&(0x7f0000005840)=""/135}, {&(0x7f0000005900)=""/48}]}, 0x9}, {{&(0x7f0000005980)=@ax25={{0x3, @bcast}, [@default, @bcast, @bcast, @remote, @netrom, @rose, @rose]}, 0x0, &(0x7f0000005d80)=[{&(0x7f0000005a00)=""/130}, {&(0x7f0000005ac0)=""/11}, {&(0x7f0000005b00)=""/173}, {&(0x7f0000005bc0)=""/76}, {&(0x7f0000005c40)=""/101}, {&(0x7f0000005cc0)=""/109}, {&(0x7f0000005d40)=""/50}]}}, {{&(0x7f0000005e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000007080)=[{&(0x7f0000005e80)=""/106}, {&(0x7f0000005f00)=""/54}, {&(0x7f0000005f40)=""/19}, {&(0x7f0000005f80)=""/22}, {&(0x7f0000005fc0)=""/4096}, {&(0x7f0000006fc0)=""/113}, {&(0x7f0000007040)=""/18}], 0x0, &(0x7f0000007100)}, 0x9}, {{&(0x7f0000007140)=@ipx, 0x0, &(0x7f0000007340)=[{&(0x7f00000071c0)=""/61}, {&(0x7f0000007200)=""/151}, {&(0x7f00000072c0)=""/71}], 0x0, &(0x7f0000007380)=""/233}, 0xf0}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000240)={0x5, 0x4, 0xedf0000}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOPEN(r5, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x80, 0x3}, 0x5}}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x38}, 0x400000}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = memfd_create(&(0x7f0000000380)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(0xffffffffffffffff, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x200000a0) r3 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1000000000004) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x3, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @rand_addr=0x64010101}}}}, 0x108) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x0, 0x9, 0x41, {0x41, 0x5, "666b7e61fc17060a40673904c19c0f9f6e2c8db5d49424605f6716cf26883d52f4245ede7b5a5e95fea5ccefb0057b350f043dde352390030aff80c17a3eee"}}, &(0x7f0000000340)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "e26e8db5c65e1144d2965756693de39ec08ef8d201809068671e04e408fa2aded79d49f5f68742c0a708a7b22a47951039c34dec9cbaa07bbaf082185b96b87db237e17e2ffb00ebb4b1ab8dc7cd5370305cf5ac8df1b701013cc33ad8f42d11e650d8b692194ab2f0bc001c62f7b31d52f7f82732133d4a484c9a36717a57b9cfa81595e5d4bec638e70b34f17125ab83a14a8b1ded50eb40139c8d72efac211d3e965da3d292403c5bc4aab6d6e3d0868fae2f5f4f6105ae5cfac9862a038ba76041ab198796e34bdb518ba09a10dd324ea028829bfb70ed724586af22202c5d7713f57792fd8be085cca1cdc81701a994cb6f4000"}}, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "aefdcbd8"}, @local=@item_4={0x3, 0x2, 0x4, "6df1d5ab"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x2d, 0x1, {0x22, 0xafe}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="2001aa0000003d8a555b23d36dec4c9968e7ae1d85ebbd4587aa610e77c0b0742e49e27d23601d66eebc854c027eaf28b833a0b905792c1933b360b0e5d7998293aaf62dff010000c2c8d9dde589e29e77b02a1c61cedf44c339c7090229fcf34bbc45c7c86d40fc51af3e7010e478ef2e4fa6c51e2385567a223cb0e1cf61d552fa108eae78d80ea63d715dc17f53c8c6e4c21a99220100008000000000c2c4fa96c307e11df20922796a0346b0f03204"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x18}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x1, 0x45, "34a60b790216edee7722e558ad35500095dc827c72ffc502de994c83acecc8179836465474937c063c0f00f1483dac4013cacb84f7dfeb945a8c8ac27003194509a81425c8"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x31}}) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000180)={0xb1da, 0x1, 0xffff8001}, 0x10) preadv(r5, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/169, 0xa9}], 0x1, 0x80000000) 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0x101, 0x2}, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x14, 0xfffffffc, 0x400009, 0x0, 0x2, 0x2}, 0x0) socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40), 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xfffffffffffffffd) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000006c0)=[{&(0x7f0000001700)="76c13c539daa0325625d1e6072812c233be34ee8007ad6229ed5a69c2cd06c96037320900eb8958db50a654616073372ad279883c2fd32abffb64586474ec1feb6c2719ba3a4122416f27bfd786ff56974942ed01244a62e1e5a204c568d31ecb1186ee8c5d44f94ee810c0e801f35ebefb8adeb85f92c55b387d9771679d3", 0x7f}, {&(0x7f0000000340)="e7ae7e1dece959abe49330caaa7726f778d955b664f06a508de42fd631efe79f9e9c87e0881650dbb931e4006d1746e3fcaaad1083602e2f05e02738a1eed8f0d409ff26e4a9f10b7e6d64426804dfc264e10ccc97731e0b0d30e9", 0x5b}, {&(0x7f00000003c0)="84911bb3c1805eee69271b0625d6bd7ab13deed0b1a949bcbc343f95b0ba75d11461bec13f6c07a41ca0b539f5a5049e47b926165c809374cbe6e92e26aaab77ff5ea18de30a8614f5e396128c07b57368f592c35c22984a76ce213b98d61ceb30f311012a8efc86e6d0437801a63c0c3f6be30baafceb70487d74b234a10665c055af4c86c179db62e0d7b77a5ab4c0ad8c4b05c913752b2a11", 0x9a}, {&(0x7f0000000480)="456c64667b47e15838f9832aa7576b4a068ba03a5ae3f9f440bee39105964e2f6035e79c484a8d99ea72a3d7f0093459a6ae7d2112008b05fe9f0dd1f6510d9c03559734e1e85fa8827273abd219ed2df159ff3b8bafb090b768ea517c220b2a7ce8ad36fcfb1ab5ec381f0db3dd7c89247d8189f7373ede82dcd2d8b460c9a9fc154da98606d8667712b8b01db06d29fb4a47ae7addea1baef3ab907681a7a91c326a3403074088024a283ff17ff2f355ea", 0xb2}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000000)="abbd2ef3889e5a", 0x7}, {&(0x7f00000016c0)="5a3cab68a7c7a08831", 0x9}, {&(0x7f0000000540)="89b7a0d090414d510e71fad4ce834e8c07edc7c58a03a8a8d03cf22a0a75527b22ef0c19f1562f58243d66bddc2ba6789db6d633062b1bd6f3b35124631cde5ac3557ef5b86a4975850eb665f97598aec3f42a96aaf6ba4a75c388d65211e677dc409698c7a953582ba5807bdb32832b9c0b4be1330f2b50449796c9f16facc2d4efac00f9f3b9d6ec2b565f3aa8d5fae8429ae1f50de555d5a2", 0x9a}, {&(0x7f0000000600)="cd7eeb76d63680f544180cd59b3d47d409cbcfc79187cf71d100c3b78d6fd96a3f201d4f18e22a445740f8ceb53389e5ce07a70a12da0f899e8da0fa5cc8ac46ea395c9bba71c6ab7cf71589737c64dce6fd9e7df7a75385904ffb84aff505df272d0e71981801b855c0955976ad34768cdc729b96e311519a8acc2e856a3afade5687ce99d5e7b78517e70b0a381210804d06faa7", 0xb5}], 0x9, 0xc) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x2, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x8) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x3, 0xfffffffd) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000280), 0x0, 0x2000000000000001) 10:54:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6800000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:28 executing program 1: socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x2000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/125, 0x7d}], 0x4}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xfadc0614fc5a6c93, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) splice(r5, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x7ffff000) r7 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '+^[user.self\x00'}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r11, 0xbb5ebd4957fad7ae, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '#\tP\x81\xcbXE\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r12 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r12, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x500000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) [ 2230.109736][T11644] binder: 11643:11644 ioctl c0306201 20000140 returned -14 [ 2230.117023][T11648] binder: 11642:11648 ioctl c0306201 20000140 returned -14 10:54:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x40000000000) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) memfd_create(&(0x7f0000000040)='#\x00\x00\x00JXE\x00\x00\x00\x00\x00\x00\x00\x00\xfcF\xb8]\x8f\xaf\v\xd9\xfa\xe1{\xf6\xc96c/\x93z\x81\xffXR\xcd\xc4U;:-h\x81\x9e\xde\b\x92\xf7\x0e\xad\xbf\xe9\x97\xed\x99Y4\xdd', 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x7ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 10:54:28 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x9, 0x9, 0x0, 0x0, 0x51d9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4ea2, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00', 0x7) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$9p(r1, &(0x7f0000000000)="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", 0x1000) 10:54:28 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0x7) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="b1db199af802e531f5266771cd5f647f81346ed7dc169ecc944bb0cd7bd57141ca302867604fa497a324ac4ea9b8f9c719048bb0c0ede2ce811114c0645c3fa2d71b7f3d6e29c05e69a53b069c3cdb3375c565d19b3f451564d6a99613abaf5223d16f564d0096e5325079b2ed2dc265667c4b8956d9fd693be6eff214e47b0d4777cc074dac18670998a0e7b04f8a2d2f6eee5df15e82adf3", 0x99}, {&(0x7f00000000c0)="37c3a7481caa67156ead34aca1d0bc1d7ea919ee8d5ab41749b95503750260c1295522db527e390f968a1397e1a406cd3bffcd16582a81c68658ad03beaa73ecd831955dd01517735d8a6062197fe9932212ce75650eb968deff29dc6938c6aadd9a56ec2c5e469228d22b6a0c90a183269824d74d53e2171ad17e9cedf0b70e38fff0a657947fa78b5214f57807568c59", 0x91}, {&(0x7f0000000180)="5b0dabf246279a0dcb143c05569add95196d9d80772cc3cb429f0b4b3f51d9a21e624cf1d442e3ad6c8222489a3f92c678d59c04888438bcf98c0b967a1ac35059c2528c7f684ee87b1f86dd59855005b6e0cbfb19ab7bc5b50c5476f57df969ea35b6978e4b37e8592a00424c2d901c6a665ffbe15e22da43bf320053ee11a794959ab62c8b0c4efe07fdb3c13e4351570f99eed0938b1ef4baf0f64265a54f6aa1066c05c8417a1b3340a71aee6701a73ebcc6c5294290eae470c8af5c57373636b49b70342a9e0c46a18aa1881dedb2fa7ddd2fe16dc84431f4446e5a826adb6e6a9a1476e4f52e", 0xe9}, {&(0x7f0000000280)="c65d0011422210c6a80ebba98a53e63e7afe354ea5bddb349771ef2460d9f7d417b145bcfd28584c7c7da5a78cfc5408f04157e63fccc442b53eb076a9528dbd9c49ea8b7d37fc45f3ba74d8d4d3f4f0a7febe13fbe6ad791a2751cc08a959866cec5c8d818129b3db2400f20d276d3096524d690a41918ce8fc79", 0x7b}], 0x4, 0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) fcntl$addseals(r2, 0x409, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r3, 0xffffffffffffffff, 0x1b}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) dup(r5) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r6, 0x0, r7, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000010401041100000000000000f78215a40a0009008000000163350000"], 0x20}, 0x1, 0x0, 0x0, 0x24000}, 0x80) preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x2}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f00000013c0)=""/141, 0x8d}], 0x4, &(0x7f0000001c80)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f00000014c0)=@ipx, 0x2a, &(0x7f00000019c0), 0x8, &(0x7f0000004c80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006f00)=@caif, 0x80, &(0x7f0000007100)=[{&(0x7f0000005c80)=""/4084, 0x1000}, {&(0x7f0000001ac0)=""/89, 0x59}, {&(0x7f0000001b40)=""/68, 0x44}, {&(0x7f0000006c80)=""/245, 0xf5}, {&(0x7f0000006d80)=""/215, 0xd7}, {&(0x7f0000001bc0)=""/37, 0x2a}, {&(0x7f0000006e80)=""/115, 0x73}, {&(0x7f00000072c0)=""/120, 0x78}, {&(0x7f0000006f80)=""/214, 0xd6}, {&(0x7f0000007080)=""/124, 0x7c}], 0xa, &(0x7f0000001c00)=""/22, 0x16}, 0x7fff}], 0x4, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffffeffffffe) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x5) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x4e22, 0x80000001, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') ptrace(0x4208, r0) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 10:54:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x6c00000000000000}, @clear_death], 0x1, 0x4000000000000000, &(0x7f00000002c0)='M'}) 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x80000000}) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:29 executing program 1: r0 = socket(0x0, 0x80002, 0x7) prlimit64(0x0, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getpriority(0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x4, 0x3, 0x0, 0x7f, 0xfffffffffffffff7, 0x400000}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e24, @local}}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) 10:54:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @request_death={0x400c630e, 0x0, 0x600000000000000}, @clear_death], 0x1, 0x2000000, &(0x7f00000002c0)='M'}) 10:54:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) vmsplice(r4, &(0x7f0000000000), 0x0, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) r5 = getpid() sched_setattr(r5, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000180), 0x0, 0x0) 10:54:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r3, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x3) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='stack\x00') preadv(r6, &(0x7f0000000500), 0x37d, 0x0) 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e24, @broadcast}}) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r5, 0x0, r6, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0', [{0x20, '@}'}, {0x20, '#\tP\x81\xcbXE\x00'}, {}], 0xa, "8adc21f1070ba79ca932bf3fbab8011a4a37f3e7e170162cd947f81468204d8aa8f20a298ca683e16fc900a9fc8aa17fb3a744832da1ea066225497a1012585c3257fb3b4908dd674182637df3e65eecb10d82ca754b1a6ce6765b3d4dc0b769b6af5e590de40ae4c093f4b03d47f73b6d7dead6d04f4291a28b6566428a8aadbc201946f7"}, 0x9d) splice(r3, 0x0, r4, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000000), 0x4) [ 2230.976461][T11723] binder: 11719:11723 ioctl c0306201 20000140 returned -14 [ 2230.983858][T11721] binder: 11716:11721 ioctl c0306201 20000140 returned -14 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xbd2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x45) r2 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x6ec, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x0}}]}, 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000805}, 0xc, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\b\x00\x00', @ANYRES16=r3, @ANYBLOB="000825bd7000fbdbdf250100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e08000100", @ANYRES32=r7, @ANYBLOB="30080880300000800800030007000000240001000000000000000000000000000000000000000000000000000000000000000000280500803800098034000080060001000200000008000200640101020500030001000000060001000200000008000200e00000020500030000000000200004000a004e21000000802001000000000000000000000000000206000000cc040980d0000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200640101010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200640101020500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200e000000105000300000000007c0000800600010002000000080001000a00000014000200fe8800000000000000000000000001010500030001000000060001000a00000014000200fc00000000000000000000000000000105000300000000000600010002000000080002007f0000010500030000000000ac000080060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200000000000500030003000000060001000200000008000200ac1414220500030002000000060001000a00000014000200fe8000000000000000000000000000430500030001000000060001000a00000014000200fc010000000000000000000000000001050003000000000088000080060001000a00000014000200200100000000000000000000000000000500030a000000140002000000000000000000000000000000000105000300000000233eff11a56313652500060001000200000008000200640101000500030002000000060001000a00000014000200fe800000000000000000000000aa050003000200000040000080060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200000000000500030000000000ac000080060001000200000008000200000000000500030001000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002505000300020000007c000080060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac14141d0500030001000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200e0000001050003000200000088000080060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a0000001400020000000000000000000000ffff7f0000010500030001000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000058000080060001000200000008000200ac14140e0500030002000000060001000a00000014000200fe80000000000000000000000000003a0500030000000000060001000200000008000200ac1414bb050003000300000030000080240002003fb309c62e7934ae507161ea0651325f48a11f744943f06394a1d153268029b60600050000010000f40000801400040002004e23ac1414bb000000000000000008000a000100000008000a0001000000cc0009801c000080060001000200000008000200ac1414aa0500030000000000ac000080060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a0000001400020000000000000000000000ffff7f0000010500030000000000060001000200000008000200640101020500030001000000060001000a00e90014000200200100000000000000000000000000010500030000000000060001000a000000140002002001000000000000000000000000000205000300020000005c000080060005000206000024000100975c9d81c983c8209ee781254b899f8ed9702e14e9488b6f60fec1d0cd25ae9f0923c23c62f53c57cdbf691c060005000900000024000200041d4c5d721292d5ca446e86594978a6ea6d18c9b781e4f61bf9d9c27f5f25d64c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922240002000649ccf5e0ac3d88207dbef7042ffcb7ca55a57d9464241cf4d2e8d1cdcd7d823c0000801400040002004e2200000000000000002400020094d143e3fa9db10afb85a600c7930febfb918830320713d91c0b0fbe42c1c6748800008006000500200000005c00098058000080060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200640101020500030003000000060001000200000008000200ffffffff0500030001000000200004000a004e2200000005ff0100000000000000000000000000010002000044000080240002007b081178543b970cf0eb9d300f1c1708575d6f3d1345237cb06100a54ec02d371400040002004e00"/2087], 0x870}}, 0x4004000) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) write$char_usb(r2, &(0x7f0000000240)="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", 0x1000) splice(r0, 0x0, r1, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f00000000c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000040)) 10:54:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000013000)=0x2f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000003c0), 0x2720c01581fe6684) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r1, 0x0, r2, &(0x7f0000000100)=0xfeffffff00000000, 0x400000000003, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="c42ea668447e4cdd15e7c43207845efc70b0a28bc2d0867026becbe212d34437e1c73aab628841af6b604159c91261deac10243b0e2b79042786836517415ad4605e5912dff2f2dc2e3e975c87609370f82e27f69fadcf50b8cb91d61bec99ba93e73b5fcc3d90be7c733c", 0x6b}, {&(0x7f0000000080)="2a70f4c49ac4f5b75c3871ff35b045406af31801c11822dadac24e40150a72f5c991f8c944ddb23db5366ef18cad78617af0e654e2e84ebfec6f242658b1912953afffcc33068d95f79bbe54d2127f19bded8368f746f3ce38e30df1a32e5f8bf0a3fffb0674c62564d02a11e3d5ee5ed9d8b0e8b190e54e541e4e9272373cbd1d50d8114919f5a9c9979b95afe475e0cf30149a9a3f4b5fc649218c22c7855d93fab8229ea007e3024994ee9e507cd7e8ffac87897e13718439", 0xba}, {&(0x7f0000000140)="16fb8ba55fda07fe27d0cfabde5696da6b7cfb4b70ae26eb2640b3e63d4bb06d4aa5b5cf07a36c7d6880efcc6a9f3b0749d084a202dc", 0x36}, {&(0x7f0000000180)="4b63a7e112fb359ce0d6adcee2c0cd7a5966fb83b8b8c74b0674df66d0e4c6b5e838ee101c9664535e6a22c250e35fac20f03d6c68d1ed2da20335d188caf87222153704b2a07d636f29c46c28960a510a1c2504a7908a0389ba5a1e182b98ded1da84e24a5b2cafdf4416a159ba41463c77174810e90121cfc557fb63cc2c1b72d81ec540bb20793c3eea93998d910c69697bed895d867714ec", 0x9a}, {&(0x7f0000000240)="0b944aeea34c9e21bd3ad5bb769157ea60c75c4a581720f4ecda6a8f56b4b2cf98cd69e10ea64b4cbe534592f43d5884764d4ad5fd7d55585c5acaac9a100a948e43c937ead35a5a9c5c4dc51e1448fa62f2221440bd4026faed7872da2093364ad5c2e6cccce252646e0fce2f8112b27f16d86bd1d3cda0dede4870250d8e951d6c30029b15", 0x86}], 0x5}, 0x20000000) 10:54:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x1}], 0x1, 0x0, 0x0) getpriority(0x0, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, {{0xa, 0x4e21, 0x0, @loopback}}}, 0x108) r4 = getpid() sched_setattr(r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xffffffffff