[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 102.041643][ T30] audit: type=1800 audit(1564428416.081:25): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 102.066181][ T30] audit: type=1800 audit(1564428416.111:26): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 102.105923][ T30] audit: type=1800 audit(1564428416.141:27): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. 2019/07/29 19:27:09 fuzzer started 2019/07/29 19:27:15 dialing manager at 10.128.0.26:46103 2019/07/29 19:27:15 syscalls: 2365 2019/07/29 19:27:15 code coverage: enabled 2019/07/29 19:27:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/07/29 19:27:15 extra coverage: enabled 2019/07/29 19:27:15 setuid sandbox: enabled 2019/07/29 19:27:15 namespace sandbox: enabled 2019/07/29 19:27:15 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/29 19:27:15 fault injection: enabled 2019/07/29 19:27:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/29 19:27:15 net packet injection: enabled 2019/07/29 19:27:15 net device setup: enabled 19:30:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x20000000004e23}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') sendfile(r1, r2, 0x0, 0x80000003) syzkaller login: [ 325.908485][T12115] IPVS: ftp: loaded support on port[0] = 21 [ 326.094124][T12115] chnl_net:caif_netlink_parms(): no params data found [ 326.162179][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.169408][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.178330][T12115] device bridge_slave_0 entered promiscuous mode [ 326.189321][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.196622][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.205601][T12115] device bridge_slave_1 entered promiscuous mode [ 326.243860][T12115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 326.256429][T12115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 326.292852][T12115] team0: Port device team_slave_0 added [ 326.303238][T12115] team0: Port device team_slave_1 added [ 326.608093][T12115] device hsr_slave_0 entered promiscuous mode [ 326.752710][T12115] device hsr_slave_1 entered promiscuous mode [ 326.900178][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.907483][T12115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.915482][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.922737][T12115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.028867][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.054404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.066326][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.078171][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.094064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 327.115981][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.133300][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.143328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.155303][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.162562][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.203220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.212897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.222991][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.230193][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.238940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.249464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.259837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.270130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.283846][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.292941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.303017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.320494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.329900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.349447][T12115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.363154][T12115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.373223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.382555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.428294][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 19:30:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 19:30:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 19:30:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 19:30:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 19:30:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:42 executing program 0: socket$inet6(0xa, 0x0, 0x0) 19:30:42 executing program 0: socket$inet6(0xa, 0x0, 0x0) 19:30:42 executing program 0: socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) 19:30:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x2, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) [ 330.970746][T12226] IPVS: ftp: loaded support on port[0] = 21 19:30:45 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:45 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x0) [ 331.257632][T12226] chnl_net:caif_netlink_parms(): no params data found [ 331.344343][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.351583][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.360683][T12226] device bridge_slave_0 entered promiscuous mode [ 331.379363][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.386621][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.395855][T12226] device bridge_slave_1 entered promiscuous mode [ 331.435712][T12226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 331.445757][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 331.445802][ T30] audit: type=1326 audit(1564428645.491:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12237 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 331.464101][T12226] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 331.522075][T12226] team0: Port device team_slave_0 added [ 331.533312][T12226] team0: Port device team_slave_1 added [ 331.627653][T12226] device hsr_slave_0 entered promiscuous mode [ 331.753582][T12226] device hsr_slave_1 entered promiscuous mode [ 332.000198][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.007544][T12226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.015491][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.022773][T12226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.136055][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.161625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:30:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x0) [ 332.184308][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.205936][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.225894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 332.270342][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.288542][ T30] audit: type=1326 audit(1564428646.331:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12243 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 332.295419][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.321527][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.330701][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.337997][T12118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.414459][T12226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.425888][T12226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.441401][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.451078][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.460897][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.468131][T12118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.476773][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.487124][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.497924][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.508117][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.517900][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.528014][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.537748][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.547058][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.557091][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.566588][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.584042][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.593644][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.633021][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 19:30:46 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) unlink(0x0) clone(0x100012f, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2010, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000000001f) ftruncate(r0, 0x0) [ 333.014922][T12257] ptrace attach of "/root/syz-executor.1"[12256] was attempted by "/root/syz-executor.1"[12257] 19:30:47 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x0) [ 333.230885][ T30] audit: type=1326 audit(1564428647.271:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12259 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:30:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) 19:30:47 executing program 1: getpgrp(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={&(0x7f0000000040), 0x0}}, &(0x7f0000000180)) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) shmget(0x3, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000008440)=@nullb='/dev/nullb0\x00', 0x0, 0x0, 0x0, 0x0) socketpair(0x1b, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000008600)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, [0x0, 0x0, 0x6, 0x80000000, 0x0, 0xb6a, 0x0, 0x8]}, 0x5c) 19:30:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7d, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x80000001, 0x101000) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000140)=ANY=[@ANYBLOB="f9ffffff04000080090000000b0000000100000000000000ad00b2793c255f62732e00000000000079b100000000008048000000000000003546e6ba94"]) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x800) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r0, 0xe5}) 19:30:48 executing program 0 (fault-call:1 fault-nth:0): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:48 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0xc223}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000007000000d4000000200000009500000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x80, 0x100) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000340)={0xc023}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r2, 0xcaa, 0xffffffffffffffff, r4) 19:30:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) unshare(0x20400) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000140)=0x51) ioctl$EVIOCGKEYCODE(r0, 0x80084503, &(0x7f0000000000)=""/202) 19:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x600000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x20000000000800) read(r1, &(0x7f0000000280)=""/1, 0x586) r2 = gettid() clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080)={0x43}, 0x0, &(0x7f0000000100)={r3, r4+30000000}, 0x8) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000240)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000180)=0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x15) 19:30:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2}, 0xff71) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000100)=0x8) 19:30:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x10000000000002, 0x1) 19:30:49 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x111000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x4713, 0x100000001}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x4000) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x5) getsockopt$inet6_int(r1, 0x29, 0x6659b9f83b90ce0b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x80008, 0x6) ioctl$RTC_PIE_ON(r0, 0x7005) 19:30:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000340)={0x0, "add8d9ee5589a0ac848df3c0baf883fd9fc0d49f0333c214aff4eed8ab0de39b", 0x2, 0x1}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x131080) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) socket$inet6(0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x140002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3522}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2fa}]}]}, 0xd8}}, 0x20000000) 19:30:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x208081, 0x9b) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@report={0x54, 0x20, 0x108, 0x70bd2a, 0x25dfdbfb, {0xff, {@in6=@empty, @in=@multicast1, 0x4e24, 0x9, 0x4e21, 0x7, 0xa, 0x20, 0x80, 0xdf, r1, r2}}, [@replay_thresh={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) 19:30:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101400, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000240)=0x4) write$P9_RCLUNK(r1, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000380)='vmnet0security:trustedkeyringtrusted\x00', 0xfffffffffffffeaf, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x4, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) 19:30:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0xfffffffffffffffe, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) socket$inet6(0xa, 0x0, 0x0) 19:30:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180)='/dev/rtc\x00', 0x100000000030040, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000001200)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2d, 0x9, 0xf, 0xb, 0x4, 0xb29, 0x6, 0x77, 0xffffffffffffffff}}) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="49a4d252", 0x4}, {&(0x7f00000000c0)="5a0744ee819cc0ee1914912980889cb8c028b8d46b94fa15c31a7d6f09e05789083593212ec4045e9d8fd8155e9332ed9b5fda192a582b6542311ac0b805ffeccfc6a2d2af84899273fb100885c4c6128242075d3db75c684e894cd706e0f3d30ba188d24772f43a6765aa2a575a6d54a13c2f65fe", 0x75}, {&(0x7f0000000140)="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", 0x1000}], 0x3) 19:30:50 executing program 1: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8000000000000001, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, &(0x7f0000000000)={{0x0, 0x6}, {0x0, 0xffffffffffffffff}, 0x0, 0x2, 0x6}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x210, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40044) sendto(r0, &(0x7f0000000200)="5d1b88c87b7e0623f007be2f7f23f74758eadd5063a109fd77ee4d14e144f11c4890ff66dba85266d5bce5e66f3c6fa7562efe583fe041e4f0605e622ad533", 0x3f, 0x24004044, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x1, @local, 'rose0\x00'}}, 0x80) 19:30:50 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xa262, 0x117040) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0xfffffffffffffffd) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) getpgid(0x0) set_mempolicy(0x2, &(0x7f0000000180)=0xe692, 0x5) sendfile(r0, r0, 0x0, 0x2000005) 19:30:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0xfffffffffffffffd) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) getpgid(0x0) set_mempolicy(0x2, &(0x7f0000000180)=0xe692, 0x5) sendfile(r0, r0, 0x0, 0x2000005) 19:30:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x30000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000200)) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x4) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000140)={0x5, 0x1, @raw_data=[0x2, 0x80000001, 0xb1, 0x8, 0x12, 0x1f, 0x1, 0x3, 0x4, 0xe2, 0x8, 0x200, 0x0, 0xb01c, 0x0, 0xfff]}) ioctl$IMGETVERSION(r1, 0x80044944, 0x0) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000000000)="dea551509cc965c2cb447a04ea1bc7c106bcb795e35fe3113f074e6d27ad9beddf717a61f631a375e779d999b3ee6908ec207c0f33d6a7caa0f2c7c94bfaf1fb765b2733e7688324db29dc048883c025bfc4906429920e98a0310729d15d2edc1cfde39c1a4251af1b5af30e93f8a9c368d57bb081c9e6ea255a6b648f0040fd8a1bd313f8548b891cb9e380388321c39c4bbb1fb66f7141bb4fb9f39d4fd57aad3ac9f492ce9c4fe4cd6880ebbd736b5283c68803d9ecf1873b92ec64cfbf7934c4e85d4d0aad64eae97063b756") 19:30:50 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10000000, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) 19:30:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/48) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 336.663658][T12358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:30:50 executing program 1: unshare(0x400) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 19:30:50 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x12000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x8000000000000, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000240)=""/75) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) socket$inet6(0xa, 0x80000, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x0, 0x9, 0x0, "b103bb8589420a8ffe3400c9a608d4148838d5c1057ddd68340423de5e7b91edadb9b59bb67ec6d0b9834bc502dc7cc48d8fd859599ae44b509bc4817e436d254b7ec4f4b61aa240909ac06d5d9bfa51"}, 0xd8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x70, 0xc647, 0x549ea262, 0x1000, 0x0, 0x0, 0xfffffffffffffe00, 0x5001, 0x4, 0x806, 0x1000, 0xef, 0x7, 0x2, 0x7ff, 0x2, 0x5, 0x7, 0x280000000000, 0xfff, 0xf7f0, 0x5, 0x2, 0xe84, 0x6, 0x1922, 0x99c, 0x7fff, 0x1, 0x7f, 0x80, 0x7, 0x4, 0x1, 0x6, 0x9, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x570}, 0x1000c, 0x8, 0x2, 0x1, 0x1e9b, 0x1, 0x8}, r0, 0xf, 0xffffffffffffffff, 0xc) write$apparmor_current(r1, &(0x7f0000000200)=@hat={'permhat ', 0x3, 0x5e, ['/dev/vsock\x00', '/dev/vsock\x00', 'ppp0\x00', '\x00']}, 0x37) 19:30:51 executing program 1: mkdir(&(0x7f0000508ff6)='./control\x00', 0x90) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x2) mount(0x0, &(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x200000000001ff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000002c0)={0x1f, 0x1, 0x4, 0x58b, 0x10, 0x995, 0x80, 0x6, 0x1, 0x10000}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 19:30:51 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x4, 0x4, 0x5}}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@local, r1}, 0x14) socket$inet6(0xa, 0x0, 0x7) 19:30:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000003c0)={0x3c61c2d9, 0xffffffff00000000, 0x1, 0xc9, &(0x7f00000000c0)=""/201, 0xba, &(0x7f00000001c0)=""/186, 0xc5, &(0x7f00000002c0)=""/197}) r2 = socket$inet6(0xa, 0x802, 0xf1f) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x3, "0323c8"}, &(0x7f0000000480)=0xb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={r3, 0x7, 0x6}, 0x8) 19:30:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xfffffffffffffffd, 0x105086) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) r2 = dup(r0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) fallocate(r0, 0x32, 0x400003, 0x40003ff) 19:30:51 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x1}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000180)=""/103) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'osx.', '\x00'}, &(0x7f0000000280)=""/4096, 0x1000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001280)=0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000012c0)={0x7}, 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001340)='trusted.overlay.origin\x00', &(0x7f0000001380)='y\x00', 0x2, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000013c0)={'ip6tnl0\x00', 0x23}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001400)=0xf2ae, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001440)={{{@in6=@ipv4={[], [], @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000001540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000001680)=0xe8) setreuid(r1, r2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001740)={0x0, 0x2}, &(0x7f0000001780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001880)={r3, 0xa0, &(0x7f00000017c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x6, @rand_addr="ec024ca5990f9dc878caf5bf750033ea", 0x6}, @in6={0xa, 0x4e22, 0x1, @local, 0x5}, @in6={0xa, 0x4e20, 0x8, @remote, 0xacbc}, @in6={0xa, 0x4e20, 0x200, @local, 0x3ff}]}, &(0x7f00000018c0)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001900)={{{@in=@dev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000001a00)=0xe8) write$nbd(r0, &(0x7f0000001a40)={0x67446698, 0x1, 0x0, 0x2, 0x2, "ee189579a3b1a5d39f7ff4ccfae1521d088d19851d738d7fe48e63c0aea06d83d31d31bab8197a557f2b5ea15cddf67d6345cb59252f793a9bb012105fced0a03ee9cb90d4400597336594b2ab333a689d7b65015307b09101e225afc53a20f55df3e1ec5a97afe2b3d1ef11f98fb6d000bd891eb34016584c5b5d809d8149c302b65ea843820fa3cee25c666e2ecb1458f58fedb78c2800b27c857c56fdb3f5b43af91cff7e526a9b6c36f62239564845c201dff298b5630574539e714412d5ef2b5c1a1f615d0e6b768a2b0a857f57e7aeae2823029a333ed2b9afffc7d3760b15bce48d80071039376f22b28db3e7162f2ddd96c3b9d2f3cde70db06fb071bbf6605b91afbf8943714be3660d5e1974894c0f9cd36d92e15de456a4e0a2469bdec399b574fb44c88e9548426cfaac220495ec772933c8454b2aac18952ef062b88d34efa8f27dc4a32b58e0239a0a209f6f485b8e5885dd851e0c0a19bf69d3dd6aa4ed749807339419033d3a44e66f26beafc0efbd6497b12fce6af7842c685e73dd01c25b5c960e25fa0aa39fd46437bf74f701595602981e7cf659313648e690ebb05aec28023e33486843c7efabcbb1765acfef473b39f0266694dde0f00f1f39b6bf7d8164a2ff32a2f1d35a058aaf481d6b06f71d093f03f6ff44f4581b99a68849f64ab943d8fa6e2056063ec01a3214146d01125855e7e0ba436bacee4b78e68ea2915f44eb43e246ba2189dd00aa75d67a522526245fbbb541695d8b24ffa0fa28352ef35d3ae25cb4b0db3dd54d2f7aeb22a0d5433ec0db58ef96b80f7001def9e87d1178df75395ad3865565717c933090fe40b42252051a8823b51912f90061f804d25218ed5c36c7f7ed6288177af47d969754c8a3abbe1703a0e076c93a453c8ff5538bac6075e77233b7980d7bfcf70da81e84c9da43debd30c794b5fc988cbb974bcaaf31c2ceb1ade8e3f261ebed0a27edf883893925e38db80b0d0ab2a2192b4be9b51d64de9d7a2dd37acc18caddc2229cb3ecb4d6106332f2cb2d0fd4da796fae31c1139deae7095032b04aa9c63ebf2ef721160a4137dc19b0667f086e494f77213702892dadce3d109cf1a706b2e25d87f41ba94de5f81f0cd3e4e6c9b0522ee53b0c29180bb448013b2e6607e8a25c02b5d2c0c5972162ce368b245910f8f5cc73c36f1fc495a634bbb1edb5651f284f25ab16c9e6b1f6213b1d73024a241b2fb11f8e116fc5b6e566934256e929f6f98fa2d2a6bb8617fd13bfbc0c2ce097349e57e11c988d57a0fc028a88b9a26c21da50d89fff68a74100f8c19a3901fea863e5637e2c7823220e827611daa355e36e9a95ab1c51d5588b691f81232b2b33c76fa84ba13d78fbcb6e495448fab5e13a4acd3c11582f95d529afd803bd2c3f53c0190dd0d82af32483116df9f5660863f85c837ad3baaa1fd94ce7fa872872bf11c2d6f2ad36e9a0aebb425e6fb60cfe17f3984de784fd8e1e564905e5844e5b4e2133fc2d168b13cb01ef08b3482d292f6445b1b13c92f885e7aae0e2107c58bc1180e0ca35773b389d7daef8d9af10de6f5e6b3c7c34d64d1031a1a9016e094734f4c99127cd9b8e429a26a9e0d0711a7c19366f65b00e9cc136b3240b53ae3f7e0f7b09b592e83560924f6ba0738d8eee992c098f3699e4809c009917a67cadd72e0571e53a7290f7014f5b5304c2eb0919973f71238407864864f391b11a3692820ea569504c0900b6d6eccfd6f2df73492b1806b34107fe3fa7d4a6155622bc01f4a966aa91cc3657f787860783317d49d5648e268cb03fa9b8c3a597ca32a9096c5ec61b960ce374d5f30ab1abe5f54f8efdbb419c42c7e68d4725d371dcb46dc52061511558fb186ca2987002325f8566eff9439ae8a57b5fb7e50941c6194c4f02e4eddca14c26690eda329363fd485cfa7b9cf744a6e6cc261910b2990c1d2ca84d18257d53c313fe30f58ab39419ece99efbb28257f3ec548f1bdd9a3288cd7f71a1de74a3aad91026c1266e051531ddd7ec1d0d8f708a45371336fcadb22fd23d4be7869ae5bc29e83d519277bedffc922157e59341266b8b052350fd78de4d25d8b6c65d70715bec2054eddc4d0826a27d1009152c976e206d2ed3fb0bd783b802b6cb90b7e114f580662fc2bc699beb66a353677059f530e9ece6afa9c2f8869da903c2194c0da7143260dec65b42b65285b58e07a00026d1215331978d07f986b0e5960fe143285f1e3e18c5c6f5b6377ac430fed599e2ec301c402f5e90e21dc6ac559e71c5bf48029d4a942009ad03c6298946ad928199435539eff693e31b4bb286045682321727a5315a04b0a6db377bc758a8984d8c43ace791470274b2c6b47160a63482b84b42e0e4390a116a26c61f848cea8d7f7d37efe5df67551324ba8a3e6864f548f2a55a18efab071498f8b73b8fbd98f2848686405007c92eaf9a7fb9eb063bfd1fa06a34e844fe337478fd11947dae9b60d2fd5856beb88bb2709b649737e1adfb1d6c271566b952e737689050f8ba712e3d5dc72d4ed55df79b54b7cbadfaf2d5f50047e9341c0aa42f4b260dddbfc14ac4e3ec6bc493035b856c65f36fd719b0949d5daf93ba3a8eae243ee487587f81da3f0c6f2c9f4804b11c27865ba0651dad651593edb76fcd06550e62165c8a7aaca7b7f2e6254310aa9e5e39b8442c7e39a5c8edb2d5805d1299144b7b56a4f4dc13f77a6601bc33339433fa410850bea3314e8040460e9a6c2fd0188c3ec37f658e2fe61ef7ee0b73ec8892661c20e27a804be05b034c57caa157648174a7e1fec387c13cc42c91ebbccb3abfb322a5199f7329ee027bb0078d6c0d7a211998522838b359e5dca81822d621bb3fd50a65e82e352eaad59842e026aacf4b17aaa9cf9cfa52b2a1d8821c24ba39350b04a6fc3dc3bf6f2d428adc7b2357b21e42d26ede940e0cd3d102a0bd81fafe13af2711ec120e41a30c70b103d314dd06ecaca074e0679671061e660552d908bfae4397a9a85a93439b6c21761db6458d4ccd57280e1a8a60728f20a21b092b8eea587203f9a938aaf89eb23e5f60896580afd032cfe6388566f4227a5874db74e30da2daed309d7c81643269cddd2d396cfed290de635e0dbbf00ba196d7d44161caf9af399321be1895ba9a1b130060751c6a76dfc3764effdecef7da97999c4c1358c7386818fba859446463874cf7cf8daae7769ea0c92f226834a190336c5b78366242c5c30ca2c79cafc0ae3abd0cf94bc7958b41ce902380498a9f173dbd05c2bf4701664a9a90beabe1522bba928be64c448cee1fc7c243c8815e54d1beac0757229242804ccf13353b2f955ee6ac7f68aacb9af413a8d5483bb4c2d82359d3b5db9ab97ea86eafb6fe0c4b37fd0b0bc4f87db88adef023ed2317a91a834c14415c2b252f90beb52d80dacb7653cd44dec78cac932f6503a6ae377a3afa1d0c7fc58921c7338b320602b1f35d4f231a12078c79a12d9e8cb8c56e424be7d214667d96d22b1311fe6eb7f3624fed0981ec955ed73169b7f4f3525f407f991ae45728b444d46199f31a73313c8e79600bd32e3a244c2e3d8c3fa56cd70a9a00db2b28bcad3b365ff380c0e053b3d2eaa71d803ab4cf7f8f502f16ddce1c388c452b2299d89899327be5caff47f83c808c83fb0c2ef836565cf86b9575d1d331ff103b47089e26552e5143a378ec23e6e5bbb0086fea986fa534f07b04a0c4cedab59754a13237f4cf7f1786cc6c82f2f5cd088d3c9200c5936aef341850ddf949ce8468abfb14bb6b4644d535ecedf22aa95068fff731317c37277fee7a9e65b957ed092fb904e168d7ba8b3d66e69b92ede75cfb28e6999085e00a70a1a1e6ccc26d9ad0140d4e14a96f0afb8e193ffa238107f745bb33b31a77e3814ca75f0c7b95ce09d0cf1bf65354dcc5c12f6a4db33e6139aac884144b8e4ea51f9b1c3af804cbb6a5b060a65a1cd3a644096c91ba8e86c9682c420089589521b57dcb99e0b1a1f9cc6539296b42163e4439a20224ef99e8d877682a567d649c940c9548c4eb1408d6517abbc080b78c445e7d1975aedc1138c08e89d0e17610d3655a482780741411b1341e66e32a38119a10967041d8233156b73d5a1f2fc48a7144b13dcf6ed7d723be7175bc1aeeaadbc4468e5b728772bd5883eca599a6f499f4494d3b92e94bc64466b867bdddd4271dce632287fe4362d92aa38c7c6460c0ba506d87a0daa39696508f912b426eadacabc5402524ae04313b37c118247edb2d80564fa6368804716134f54359d519ec3ed40742623935d3c2a48ace16c0de3ce9133d60286d35fb8b17fc81abf442b62f41857d6de4433d196bc85f1f8e161dd20e5161b1dd792ab0b87cbae40ebfffb82f3f88d26283592d7ccb8396d85f1dfa2bd9336d49726a829d87b9f216f4176977fe10603714deba612c58c2264539a941325b184897b40f4ab0352ae2bd0c77c861354494a102633544b247709edf3cb9091971bc64d29d075a6627010bfdc8ad4afd670d2e7fb6dd0a32ecc1dcdbd582d56411aec7ecaac78f1d86cada7eb0fa56aa7c81ba6c7956336b5da2a302d365b8c3ba35373159422a58e9e653b68858fac433da692a0040c3aa7b1f68f67b2f2deb20396a6f78800cf705127006d6d1bf4e9e67b980a889b3e3bef73ad3442bde37fb661b9dab7c2fc835fd5b7029d06f38880e07c6806b226d234ddb0e799cdb55927b3258e78976c3ed38cd1041541548a76d102d45279bfe068c6ecb7a4dfd4958a27e79ad82589144c542acd1388c12de35ce86b610ec2cd88e322e106e42b5b51198ba38d634d39ccb92d6f437c7fcc4448a973d67dfd1eaa7ae57ed296a5a01aacecb6da64b83f68013a1042c52f1f1e8248e281a6cf6fa349654c2b4c252d4b988e93f379596764a3ff551845fe79cd23d51bc8b3e9ff1eb2523a5316f6bbc2eb6d8d35c806c7df7b33972143ddcf510ed748c7871eee35a2a05f357c7d29b5699da9fbd5bb15457e3ae84d7a2b55ede92ee5c1e1ab3eb9e06ba531263a89964ac1f390f4691b8e515083766b3dd7a5e3f454137f99328f5b7abdeb1714adc1fa55755129764dbd0f986d4b9c2000496ad6e8fa9a29b42c9654e6790fa4cd0abde72613a6bf5d32078ada0828f5f838e76401e38516f5123012cbf0f99b5801331599eb39298211a44617095ecb099f94fb12600355361b2e965e4459879d93d6f3a50ba22c3e0a9a766862db13cbd8503fc47392ae15b569e0dccdd60bf3b6453a72bafd35e0dee4cffcbc1c42389e897434a6c8f57bcbc84e83783e0772f33864d9b6dc16881aff79deb0766b3005d301a0d180fc8dd1bd7eff27c2eaf9859e38a7ce6de99f0ee58f3b23d542fdfc9d64fb7a9ef47733033b9315a3bb36425cb3cb5eb3ca07ec61cb7b4a9bde02953d126756c7ba4345be7e86ef02a6d12b19099876c90e37a7bac3f04d876a5254649a59719bc138443c775b602a5e23a6e0625ef9ca1a7adb3cf3c1f26de98b4892c87fb151e29ed0ef4bdd87eb98bc69e2b22bd4d00866cac942bfd2f4721c487dab1c5c020b5e5fd29bdfe4ceb7e2bcc51363b9dc4238c2fc32ab9fa8d3fe6ea6bb462ecb8294f4e7521b384760adf3cffb07fa0ca6ea79e02704658f03ef50aeb0ab817dcabed401d5c6e0d767a3521a2d0197f3f2c234f927820fe7fa4bcbacbc3b47b3eac102f06e5c65562675dce299ec0599b0549f0bcdc1b456d2097bde70ba4e8ddd8cd86421ba7"}, 0x1010) modify_ldt$read(0x0, &(0x7f0000002a80)=""/104, 0x68) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b40)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000002c40), &(0x7f0000002c80)=0x4) write$binfmt_misc(r0, &(0x7f0000002cc0)={'syz1', "224e82ce77fd61a9659641a7d70f02172c248c5b33ea06e36d59b7e1287c245872dc6e79244069df2fc45d24fc86df84fd77c04def14d83ae1dfde3806ecf17d2abbb4475eebc55ccdefcde18c49c8fb15a343e4f998567c1de8d00f1b92a8cac27fdf0e7052266489bd4ab0fe"}, 0x71) pread64(r0, &(0x7f0000002d40)=""/211, 0xd3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000002e80)={@local, @local, [], {@can={0xc, {{0x1, 0x6, 0x800, 0x4}, 0x5, 0x1, 0x0, 0x0, "191180abfd8216a4"}}}}, &(0x7f0000002ec0)={0x0, 0x1, [0xada, 0xad2, 0xae8, 0xebf]}) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x38, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000003000)=0x12, 0x4) write$P9_RXATTRWALK(r0, &(0x7f0000003040)={0xf, 0x1f, 0x2, 0x800}, 0xf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000003080)=r3, 0x4) 19:30:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x200000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x1, 0x81, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 19:30:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000aaf20fd44e080000000300"/30]) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0x8) unshare(0x8000400) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/91, &(0x7f0000000080)=0x5b) r2 = accept(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000240)=0x8) r4 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x80, 0x101000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x9, 0x301000) creat(&(0x7f0000000480)='./file0\x00', 0x3) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000300)='+#wlan0[vboxnet1&#keyringeth0\x00', &(0x7f0000000340)='./file0\x00', r5) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r3, 0x1}, 0x8) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) fcntl$getflags(r2, 0x40a) 19:30:51 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/dlm_plock\x00', 0x200, 0x0) socket$inet6(0xa, 0x2, 0x3ff) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x101, 0x4) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x39, 0x6, 0x0, {0x3, 0x3, 0x10, 0x0, 'eth1cpusetvmnet1'}}, 0x39) socket$inet6(0xa, 0x0, 0x0) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000100)="a27ff75a8a3cb5a60c2a5dc78616e7a0d4a1ea543db6cd7d99a22638412fd6d15d69205d9977fd18f175e3232f90c4269b4d349283b809e09e3d0800d8822ef7c07e1141b5ba74cdcba54f850c98330998f543d5cd7b4bf6c8ab5ba2bb2adb3fff4178e3d1f8618ce033d4492bd7dc605e1b870d0ee643f7de0fa339d5cbf148810a5f19a54177c24f151e4bdb9852d1c283fa86d51e5a3329e05c7e5842972a", 0xa0}, {&(0x7f00000001c0)="2459c716f2951193fb57cc7aa9893d27c2465e865a997372ecf51a48a44a620d160d42e69a6e7eef87d6207a7e383a15b0072f3ab1b0a2968bb5671c4b9731f563b37f59b31ef894fa8e45377ecfb9543610ace290b1cf67c78ca0b5ad72d60cbbdb4bf99b346556075eca0c509d7a362bac1b96eebd13ec0ccb259d93627fcd9b2bf1da4ba303077d8a59e1cf8ffd21f08256c0d1cb725383bf7024b96de9bd4c7049bc84f59d2f2f5d43789a42ab49930faafa8b87ac1acfdaf5b7e25a8970d90e9179af2a76378631227aec1ef44d4c791ff3df24bfa121b4a06f6d0f675b3587f050803638df525243", 0xeb}, {&(0x7f00000002c0)="be423d253e09f93376a6259137779279e0d3af001263bac9c9be0b950bb200494cbaff3b950c84455ff9fcb16dacd13be1326bc5ada2d69074ad438c6c0dc3e809e9476e25440428e594ae88872546542e2afaa7059a58ae565c57db2d472db6ef1fe2b10cf45c2bcec1af3319187af452ae606dbb2ae0fa7db781b68aa06acd62d7d5f8d26850cc1f56a6cc7e18afc8f9fdc087c45d5e71", 0x98}, {&(0x7f0000000380)="c71783558769c9ec1ee7c4d47bb027cd4d2de68e3e086478fa9689f8e48e19012b", 0x21}, {&(0x7f00000003c0)="6fe8aaa77c266e", 0x7}, {&(0x7f0000000400)="933ac2d2e41a193906d3d0c45106b5e573a0e5c2968b8445deae8fdc0f125151af78b608f4d7553f52e6c37638e55408e2d0b278c60bbb43f9dfed90d1eebd3f39b7d4813a1418a9fff8f8990cd59f83fcb2bdc4410f87bdb6a02b4b092c66256b7a36704bb242c22f8bf79d21ecb81aa825d48dcd0becc2ef415209a580e534ad820e7eb58ecd48238f89e5e7931947307046db58e8ca4fb4ff190239c4390ad4b499725809b0a21479aac7fe896dbfc9187caec2a2b81b15f4bef415c4536d6aac9cff2febcddb79e417de6dd7cebba72cc746fd50e9deaa04f0c2750d00082cb388e4631b867dcd7d6c789be2cc0fabb51285abb648923e7425dc263ac74c55a6a2e183dedd7ba386f376c1a2e47dddf105cf2382954f64b2ee66b20e1aa1f23ec68256f80a51e00a9f6a27b21659ce3ad197d784d47730d43d83480457a88ba241d73134f5788f6a28aa14c78bec6f97fb4d1b7cc0623c0fa2f2249381b952d6a774a69c99f896c532a4fa33a29dac9d9cb05c69a68f0ea9abea7c46ab593c5cc543fadd7348f77631a289dbb9c58600c661184d4c108548cd92df1b09bf6cc2a8bd6dd2c89dffb5127dbc038df81669bf4c73a1556aa14f0eb64c44e867bc7a85297ffd83ea87daa260caa63800b0f619a9c218f5b722e70a5ce295bd636a2fb3ed8d517f14d9520a8b1b24645c5f08e1d011190ba6607e8960d4c7b08dbfdfcf2bffa008f6f2ab2f4fbc21b87ecd0c31434c5141b4519b595cc68ec23a23aa701d7eeb7c9310ec764cc424af18c3b95649d7dd62d33dfff1633ea3633e261c68b826168c38ef2a6ac67b2c9271aab778aedea11ca0200c9096283a9d1e27316ae06834b6c7360cd3f4f9da79f45a37993e002ae177a726a141b74c84521562a59187b2a9f876d120e3d0d14e8e2aefd48b4fb6206d28e4070390461bf37c5b81017631f64c087de1d9687e9f05722a86e9ccf58f7f3e2a001ca92229f9724cd90bfeb56385f699ed30a3045f918c900753356cbf732bd9e347e1b0dae683be74ce3890601846acccf1effbdcedd4b00b0cd557a13314f2544450542e3811f97a39d9c1bc1f1f0a4688e9428679a63c8d91cdb7bc1deab1a04513108e222b6a0b602e192cbb996979c633954a6967eaf16d6e68ca269700aeec5ac52cdccb4c9eb9655e5b3050a9778d460ab30ef339a1146e6ea9caad150791004378e8174d98fb8dbb1cbf26138252390cb77b102d008d63fd831a7a25738602147c6b3320baef370a7cc2814690c9f3cda5538ce7fa7d155c2ad9cdb35568e8277ad9316cc606bf442eb0d7508f1bca1c338a8a78a89c7e3694335cab70066dea38f1dc1a9f2c8565ed264470cefb504cbfd5960ffc3674a445722fa1846a764f5e9bed51d40230a8b4b7e95d7b6d239a7560e74a208d1b84a1e660143eab0df9bb49af7c6e79de9ef5a0e8266f1047dd4c45a2d145eeda2f2c5d6f2dc192ccd2a942f32c650c8f51a143f88d116aeb4c113f194513ce7924d04fa2a4c55c5bf0f8b4991bd87ebfed7ca378a28cc910be218ce4ac1dafd37004bbaeda094b54f69872edc364a0b476659c75dc64c4b2b9c246f44991e54dcf706e5b807049e0fb47db25814b7f79df909407f17137abb22c3f25896a91cd99deb9c172aacf6c560bcb6ff49f2193a1951a033779d1947b992490a91ba4a7dce44ebc67e7b756683b5bbcf45910d134fdca402f9f6ae0e7de922975589f5766dd944ce6b18547d49ed5383ba184e81e9dbc444f85543bc4de898ac2dd23b85115dc9cf1610cb33e8ef2bb684b96bf12d1aa6342eea72aacff2d7436653b6f6e1d33cbe942193370d7bf917cdc43a43eb423f75c5d64972c6335d3fb7f9a784fc4cd1ddcd4f21ac53394fd8e134b5fd93c17fb6f96b55838decc65a527add661219095cde6dc1d3ff733855fe5f6718f8f23c5f462f38ddb703eae7b54315870944f4d152278d441dcedb0ffaac0fe798a0ad7d446a3de2a65aec616eeb9e743052894b5ddccfcd78ef78cc343d0ef28c92f633800f0da1f65ff0511080d903d6c422f0bc97a140d63b17229a5a860c49b0b623fba20c40ee34b88bd82bc0e544f78efb3b6a27e5c5212b3e3648faad3295edbddafa553ed282abc33b9b7e113f76b709ab76e7cb59e0ff651c89d68e701ed2d2b0c2c28e6c8196b6305c9cd53462d56d4485c91629edb481363eba15c9562a499e59265f2466dce8db251e8e9b0e4c47bc6d3b4f5c75186a7feaf432d06ae2a9849f78d90251ade1e1b2fd000bf9d2b3a1ba3ae13828e48d31e064bcc020ab705de2eba6a849904cb4dbf269eedff5087872fc5371e636a1487e383f9b48ddc5e800dc5e580f532c3ce23e4cfc92cae9c31a294d6dffec99e95aea764e67ecb217eee8a1e6472a3a9721640f4e478096d8455e7729253c269b2bd84f5d9e11f93cf7b34d65357fa030ef277d132f68bd2889a1c0be909ccd33cfb9b9fe8566961eb6154aa9c779c1e753229898dead186ad1cfc5fb9981f5c554d58762dfba3ea6b4ce915da2fb911f570794d35be5414e363946342850ec474d6fecb1d865df53f294370f5c751a0b3ba517ef1e149551e2d6703c87fa970119b6f86a6f5334ad00298927f521363cab6015909a29f8ba4fd361b82e1822ab5db42a2aa23df19e14550ad41f6c4ae0e8d7569ffcdf4fa1f119e91291515e10ef1fedbc1e45baeeb1e5b286cf15fe9ae003347c7d169b1519bd2f87a7d84460f2dfc20e7c49c455289db72a344a3f14b6b0fc9f57c4bb1fd9c2e8151ead188a0e3a6d017aa6d6b60123057b040ce179b0a2d184526f7410ca3bc10c40357a4c30d6c01dc09cbd27667c581baaf1fbb8d243fa1c87d0b462de739e3a2283adfee655af3b8f123d177873b615ebea92769e58ac4b95c066c6480594cc64c595eb95635155997fe0e35a87177afca429080832b4d430d3a1498bd859582a9abb6305e8e7adccdbff9fb721a902e85b26227f2af66f1168feab84cb837a175a3dc00339d024637cdacb7cde4fe35ed4488f4822e88d000f8287573a7ee898a0a2799afea0acca466d98d8404e5fef8a3c832f7dbafbf866022829f142279f3985d99f22d39f5f169b3a8de2bf812589ca076e02ebcbd12ffb7e8009d5d01ec18c2f8973711d3ad8229dfb706b31a56b51f48c68193d06831f59a26494fbb1b5456fb1e04e1a62285784fd1883d06f7c726c7a8dd352e8ba6fd740a3ea580834eb4693588251f939f8a35b7069e5545d1adf52f593e6bc15ea8265ff9cdb521285ce4eeda63a6d9f0d5e79957ada4c05067503128670ce56a87a952b35b817c9e7f8c1b2214a4ac6f2576ed68210d1ec721e85ae71b65ae546d15f7d1d3284de107af7f69dc629400fa37a16292665a86994d7981d3c19b4cb10f4c30268443b2b95ef24e4c0f2df63751b9e39db6da2abee2eb2edcec15f98507f588cc64a768b464a27e81a4f2d030241a3194758d5663149a4b37dc957d0eb0defaaed99583517bb882d8df9d2ce1fd39aedf54c59b264f6d0037dec7a7a13a7e4930c93037c41046a143782c161c14f54fb6401a0503562e66cbb20fd3d61322ca02ba8a3ed753c4c8c4facad0f886507de1e92475992079fe7da26b449c266339578827ce72919b0071e8d92dbfba57b6aa0e8439c466120720899e1bfd78a4a91bb0fb651475bd320471d7b7e0ee6fd46d0ba1372ca3cbbdea91aff39c0db0d00a4a47feb687434d9f0c887fccf451593092d2754bed3a4422396800657b90ee28dfbfb940ef828fda6bbfa9815980c4dff1c7d3323c8940915a49428ff5d74e664662905b1c70660baaac0ef5f72185b651170a8fa713096f9833dd897cdd51d30918695797b19d916eaa4135dc95dd309c1e1d77d3aa4152d9d8c6a254a42837695fed34d63a77ccdb45a135253f6447296cf86abbecf660c9d84e98bc2818c9a9d9779ff683685cbd1cc37cb53f1bdc5b572ab4b7818086d7fa81b9f923ae7ece01e66d30578ad22a249424542d1754ad3d461738132fd0d91acec7e604a671c663da34e26bf4ad420e176acf01e1b01378212cbc52f3618f18d42ceb2c1454f15955a1612cf1dc7d31392954134e26501cf5f3e6e182b9616b31a62bee1f0e52ba2f5a39c89debfc2a3de8fed23d92e930270a7117e99bbfd54753d40ddb455b90465f4e5f9ee43ec96fb87c5df95c840e8478b5038bccb9fe1923ecc9f5ae04331fba0f10f06b04992e142bde6fb82e8fb1b7d118855f2cba5b50810cbb62734ed87c6a21f75080d00f175b3742df11941dd020051664e1d5caa82aad0bc9ef91215d0c396e9a53990873b3eebc8d56ff3c8b3941bb44f13a2b735bb0edf472dea8a56c3a5a602403db7ef2a7030244692836db318f699ad2c5cfa39d5ee084e501575eda56a7fcf036e2bd35bae78ccb6731634936a6bd15e42b8c99039c3a514f75f08417ed2b5f115b7c680efe7866f3761a60aa9347c2cd608c8e6bd64e1e8e868fe7526b928e2aebfee1992e938b7e966d40e8268a1727b68da8eeee8e4e449dc7a41c5b7276b635c2a87ae7e693bcea2b0b492f9332667d684c6843a383c50bbc02a2985539ca0d7545f98781797e0cf4543329d305fea9a419074f77e7d0a13960f2f01ed63cb4d145ecad2946811406aab3519ac25f04efaa9e8841a2ef39408710c010f0cac2cab0645de0fa21c97015a906cd3023855004c1c6a6c056d43dd7d329ee3270070839e08a1390567b50ae8d3438eaa62f231ade6c62329eff7052fd6aae3b07eb0e07e5874d7d4fbd44543a1f7f4b88f30bd6fe63c0046a5db4cba5f4c380929a6aa7755ff3650507f7710beee7ad180a7f2be6dcff5fd423cea533d5b7dce6228da4e219139535c699beb82c85615610f0a4535f916dbf610161ee2a35a181f6b76e580167af7b00f0ba05ab7347a3a162d7fd6c403c341d161ce8c760cd5bbb90b673b85f9976abec3ebc040386dff5fb94544b42b1d4b7d4913f2f5311eefd7be2abf07f9ff141b923fbb1c6652a11c2ad8b473d6fa6cf74a48ef21b097adc62e8062396c51ba43dcc53c9bf2913b78bbf5f689000b431d96080ae9ffb444e64c0bdf055587728ecc23600e44983f114c49b53d8ec0cc09d47fe0d044802026765f9f0007f02be0487b6df4079e432991ad0d5196eda5bf7b2ee8db888bf3be1c8645563fd90a49f700f962feef4ed4a589ce83e9b0b724151d22ff2c32c0bb2822e2a462895af545d0ecda77dac8abfec8466fe15ec93a0ef66b41cbb441446aa8be02bf99e23aa3808ab401acc0e8fbb0b9352b6246c8507a8310b84a3200970d575d333b24f7ec0af308a2e2ee849fc8cc1d6ed1f06923fa94e922d71ded795c2e7d6c04741f8bdb8ca467bc77ba569d0393fc43cb9e6d57e6e287d9bedb93d9471dbf959d1dbbdd422248286e228ca2baaa65bd1d7a7e064a8038a3789fc8547e1e20e0da8850d8a53b39ea4e9676b1035d825f9b188deb355d721fe54370071c59a5a00136a519998d0644cf1ac05ee3b92efb942461448c7cf0b3caee2fd78b1cf3a374b71a0b9bcbedb0d0f40a38e0a15bad1ce7c7399fec99ff6fd272ae2b07894175b20ce850a1998f2502690ef905ce427050252c8bd09af68bb91a573d1e44ed331e8db0ee600a5ae4fea440d4ce4965753ee4f2ccb2bd2b437b6051bfff958be1cdd91f590df248f224bf04dd5d4a85781f4b195670d7150bc8c2b15a0560cb4b8c54a6b2eb0e83e62822bf4545596", 0x1000}, {&(0x7f0000001400)="e6e7ee6cc8727feafe6a38e9bac52c73eb81f2b6cc1efdc4b6a9d4ad0f1770edc48535ef7f3d17999c828a431c07bd1563e4672fe380321d51d08992b7c6e13ac53dde65a19b20cb135c90d4ca67b3d483907abb0132c101c247ae34412a75b7f843b4a24b40afd9b3288401ad94f60f9ade07f0e2c2c86e426608b1846b11acf14e59b7022a71d0fe93e4638de2bd91b2737e484d910ac1c27ebb9c8555b5a31edc8a", 0xa3}, {&(0x7f00000014c0)="5ab61f81ef0f5fa32b8cb9310937ede102d6627a8c40bfaacae3d669c76ebfe190184e997149753bf7c3fee65bba1fc0ff8f52ee599a04caff6dafc0e7530b3041a5791a93fe6a57acde037e3de4b9fb10a8109214b643a054a82bff88eaf4fc840c0e0c1f4ef4b9cc80ab91270838d6013bf592bdee0e264a331c1d8d7759ec286e9a2c7d08605f95319df40f641e678613255d597863239afc", 0x9a}], 0x8, 0x4) 19:30:52 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fff, 0x101000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x10000004, 0x8, 0x9, 0x9}) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000100)) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x46) socket$kcm(0x29, 0x0, 0x0) 19:30:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="a0", 0x1}], 0x1, &(0x7f0000006300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}], 0x20}}], 0x2, 0x0) 19:30:52 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/45, 0x2d, 0x100, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @remote, 0x9}, 0x1c) [ 338.263486][T12410] IPVS: ftp: loaded support on port[0] = 21 19:30:52 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000080)=""/61, 0x3d, 0x6, 0x401, 0x623, 0x0, 0x80000000}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, &(0x7f00000001c0)=""/235, 0xe, &(0x7f0000000040)=""/14}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559}) 19:30:52 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008500)={'\x00', 0x0}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="7e7fbf0f295c36628ba466f09c0ba7020830dcbabd00dff5b08f90dfac98b39c110008e24821b2334f6d6b7c0cc057c604e8bb7bc58205443c7cf60581c413e4f0d8575c580f528fdc8282f838a24738aeea3422cde7fcd2b1c3467d6471135699bc01733ec24dcf2472429155309dbec8252950fb53ed625508050e818d59513171128669226949c6888efa9e3f5b46df6ed7c1d40654f3d5") bind(r0, &(0x7f0000008540)=@xdp={0x2c, 0x4, r1, 0x1}, 0x80) socket$inet6(0xa, 0x0, 0x0) [ 338.617022][T12410] chnl_net:caif_netlink_parms(): no params data found [ 338.753393][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.760653][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.769754][T12410] device bridge_slave_0 entered promiscuous mode 19:30:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) socket$inet(0x2, 0x1, 0x4) shutdown(r2, 0x1) [ 338.803205][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.810460][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.820342][T12410] device bridge_slave_1 entered promiscuous mode [ 338.876519][T12410] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 338.911442][T12410] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 338.966604][T12410] team0: Port device team_slave_0 added [ 338.990431][T12410] team0: Port device team_slave_1 added 19:30:53 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x4fffc}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) socket$inet(0x2, 0x1, 0x4) shutdown(r2, 0x1) [ 339.168779][T12410] device hsr_slave_0 entered promiscuous mode [ 339.213715][T12410] device hsr_slave_1 entered promiscuous mode [ 339.300764][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.308071][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.316092][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.323360][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.565253][T12410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.590209][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.601402][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.616484][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.632308][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 339.655018][T12410] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.672767][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.682453][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.691470][T12248] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.698717][T12248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.728984][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.738596][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.749180][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.756464][T12248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.815729][T12410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.826256][T12410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.841743][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.852690][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.862989][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.873022][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.882765][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.892907][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.902697][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.911941][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.921624][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.930960][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.943120][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.953447][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.004751][T12410] 8021q: adding VLAN 0 to HW filter on device batadv0 19:30:54 executing program 2: syz_emit_ethernet(0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaa55a85095aaaaaabb0800450000700000000000019078ac7014bb0000000000890000ac1414aaac1414004440000000000000ff000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac141400"/126], 0x0) 19:30:54 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x921, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1000000, 0x0, 0x50002}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) socket$inet(0x2, 0x1, 0x4) shutdown(r2, 0x1) 19:30:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x74cf, 0x3e2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) socket$l2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) close(r0) 19:30:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) socket$inet(0x2, 0x1, 0x4) shutdown(r2, 0x1) 19:30:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:55 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)) 19:30:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:55 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffff000, 0x4900) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10048003}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5432}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20000}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4008841) mknod(&(0x7f0000000080)='./file0\x00', 0x20, 0x484f) 19:30:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm], 0x6c) shutdown(r2, 0x1) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x40000) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x402000, 0x40) write$P9_RWALK(r0, &(0x7f0000000100)={0x16, 0x6f, 0x2, {0x1, [{0x52, 0x0, 0x8}]}}, 0x16) 19:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x0, 0x0) 19:30:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/10) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x8001, 0x1, 0xa3, {0x77359400}, 0x4, 0xfff}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x3e0, 0x3, 0xf7f4}, 0x736, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x7d4, 0x4f, 0x9, 0x8, 0x9, 0x6}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x10, 0x3, 0xf1b}, 0x101}) 19:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10200, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, r1, 0x8000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3f}, &(0x7f0000000100)=0x8) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x1c25, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x1, @loopback, 0xff}}, 0x0, 0x1}, 0x90) 19:30:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xffff, 0x100, 0x1, 0x0, 0xfff, 0xfff, 0x3d2, 0x67, 0x7fffffff, 0x8}, 0xb) socket$inet6(0xa, 0x0, 0x0) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:30:58 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:59 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair(0xb, 0x80803, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000000340)=@isdn={0x22, 0x9, 0x1, 0x4fbd, 0x100}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="25f5ec8a07c0725bca270790a11cf50b8b64b21c8956e52faa0e3eb184d5bbeb6da151dcb8f26f6f6bd644bb9f1fc3ebec36169592efb778a4f18726666576ac4427c3c76a3b9e038e3a3cb159d4d5322c9fac44041ce3d00cf8e7dafb8b428034c08ca7963632187beb60630e46feb737a7eaeb7d2341e4c8eb5c", 0x7b}, {&(0x7f0000000440)="08d33f90793749be24947108532628a0610255863353b0ff2072a97221ac9f24da5eb2c1ae4dd13a95afdc909b0fa70a59db64f0dba3", 0x36}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x11a8}, 0x40000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "15a615ed0ec44f5bd87922071fae9863c8c98aaaf1849b9fbf3a8e9e33ae1a07da0c020a911d69c8fff5e25d591b8ea6c7962412a2cc8f16b5dbd5a00db20de811c99c88f510c746101c4353f680ef88e848d5a1a324fb1de9d92a60329d8e"}, &(0x7f0000000100)=0x67) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001740)={r2, 0x15f0, 0x10}, &(0x7f0000001780)=0xc) r3 = accept(r0, &(0x7f0000001840)=@l2, &(0x7f0000001800)=0x43) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x101, 0x30, 0x6, 0x1}, &(0x7f0000000180)=0x18) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001700)='/dev/ashmem\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r4, 0xf9f}, &(0x7f0000000200)=0x8) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x802, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000280)={0x7, 0x1, @start={0x80000000, 0x1}}) socket$inet6(0xa, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f00000018c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r6, &(0x7f0000001900)=""/36, 0x24) openat$sequencer(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer\x00', 0x400, 0x0) 19:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 0: lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x2000000000000281, &(0x7f0000000180)}) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x40000) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x4, @vbi={0x5, 0x8, 0xffffffffffff5928, 0x4f565559, [0x8000, 0x5], [0x4746, 0x3], 0x10b}}) socket$inet6(0xa, 0x0, 0x0) 19:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x80004, 0x6) 19:31:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020b000102000000000040000000000067ffe5bcf50273146ea6cdbcc8b38e6ea9804e458e8662a09efe6f75c44014108378078b24f4981380b03dcb86b76934003be40b4d717e6e8bee537c22c9c009fde66e38c5eb5048c28a1868865b77a63e899a013fd4957788f0885089ed0fcf383604f993c56d2797fa97190780e4d305337c180c71d1c8533fb66079b6e2d8772cd205e58b660e43480bb4ffd984fea355f96ee05795a71ed14492aebcf2fcd31619a9e6e0cc8900003b879ac6458a8d8c7471cfcf5d4276a4721225d01236df0b1c2b8a2808e6194d0df4ce007a5156253671844891b2a00cf9bbab85e7b9707cd007a945682573f888852b9fcc418869bf7ec01f0bf5fc2176ecd74dbb24e5fa6f6a5c022ee5b201c1ad4952b948bfdfa9572c4a89661f66e8ee6da43ed714b893a2470f764e9d27875a37e2b5e0994aa6ea"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff00, 0x20082) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)={0x80}) r2 = socket$inet6(0xa, 0x0, 0x0) syslog(0x1, &(0x7f0000000300)=""/159, 0x9f) times(&(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 19:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x26) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x80800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) r3 = getuid() getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback, 0x6}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r4, 0xfffffffffffffffe}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@local, 0x4e23, 0x3, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x89, r1, r3}, {0xfff, 0x0, 0x9, 0x1000, 0x0, 0x21, 0x3}, {0x2, 0x40, 0x4318, 0x4}, 0x6, 0x6e6bb2, 0x1, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x4, 0x4d5, 0x7f}, 0x0, @in6=@rand_addr="42aea40c9c6ac92380c219d0817b68b7", 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0xf2e, 0xbfaa}}, 0xe8) 19:31:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:01 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:02 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x4, 0x0, 0x0, 0x50001}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r2 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f00000003c0)=0x4) 19:31:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:02 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x1}, 0x10}, 0x10) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$TCSETX(r0, 0x5433, &(0x7f00000000c0)={0x5f, 0x6b98, [0x3, 0x8, 0x7ff, 0xcfe, 0x3], 0x34}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000040)=0x8561457, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000240)={0x7f, 0x4, 0xf7}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) 19:31:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 349.358424][T12816] IPVS: ftp: loaded support on port[0] = 21 19:31:03 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001540)='/dev/hwrng\x00', 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000004c0)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x1015, 0x1, 0x8001, "7bad17a0f347b77038e2089755d32a16", "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"}, 0x1015, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) r2 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r2, &(0x7f0000004540)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x20}, 0x1c, 0x0}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}}}, {&(0x7f0000000300)=""/152, 0x98}, &(0x7f00000003c0), 0x24}, 0xa0) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x800) sendto$packet(r0, &(0x7f00000001c0)="2628558930df6bedff70b208a1a09777513ad65c90a40695eea994958d90a31dfb451cba72422706971d31583b75b156dc7b91b7e37bbbdd78a6ece65ffb72a743a802a4", 0x44, 0x1, &(0x7f00000002c0)={0x11, 0x1a, r3, 0x1, 0x7, 0x6, @local}, 0x14) socket$inet6(0xa, 0x0, 0x0) [ 349.808658][T12816] chnl_net:caif_netlink_parms(): no params data found [ 349.944990][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.952389][T12816] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.961221][T12816] device bridge_slave_0 entered promiscuous mode [ 349.974246][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.981505][T12816] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.990479][T12816] device bridge_slave_1 entered promiscuous mode [ 350.033325][T12816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 350.056577][T12816] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 350.120299][T12816] team0: Port device team_slave_0 added [ 350.131981][T12816] team0: Port device team_slave_1 added [ 350.247734][T12816] device hsr_slave_0 entered promiscuous mode [ 350.334261][T12816] device hsr_slave_1 entered promiscuous mode [ 350.570723][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.578038][T12816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.586066][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.593336][T12816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.705473][T12816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.730194][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.740903][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.751187][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.767344][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 350.789910][T12816] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.805310][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.815563][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.824808][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.832036][T12118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.883540][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.893089][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.902267][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.909449][T12118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.919129][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.929679][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.939974][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.950167][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.960141][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.970279][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.984723][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.993846][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.003223][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.024255][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.033587][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.048053][T12816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.095438][T12816] 8021q: adding VLAN 0 to HW filter on device batadv0 19:31:05 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x1}, 0x10}, 0x10) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$TCSETX(r0, 0x5433, &(0x7f00000000c0)={0x5f, 0x6b98, [0x3, 0x8, 0x7ff, 0xcfe, 0x3], 0x34}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000040)=0x8561457, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000240)={0x7f, 0x4, 0xf7}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) 19:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x12}, &(0x7f0000000180), &(0x7f0000000100), 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0x9af}, 0x0, &(0x7f0000000200)={r1, r2+30000000}, 0x8) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000240)=0x3) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x1080000000000002, 0x400000000000405) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x1}}, 0x18) 19:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x20800, 0x20) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/21) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x6, 0x90d, 0x3, 0xff}, {0x3, 0x3, 0x1, 0x7}, {0x4, 0x3, 0x1, 0x1ff}, {0x100000001, 0x81, 0x6, 0x9}, {0x8, 0x101, 0xfd, 0x4237}, {0x47, 0x2b, 0x8, 0x5}, {0xfffffffffffffff9, 0x3, 0x0, 0x205}]}) r0 = socket$inet6(0xa, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000500)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e21, 0x401, @remote, 0x1}}, [0x2, 0x5c23, 0x2, 0x0, 0x5a, 0x4, 0x1ed, 0xffffffff, 0x401, 0x1, 0x2, 0x100000001, 0x83, 0x7fff, 0x1f]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r3, 0x0, 0x30}, &(0x7f0000000380)=0xc) getgroups(0x8, &(0x7f0000000080)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee01, r1, 0xee00, 0xee01, 0x0]) r5 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000480)=0x2, &(0x7f00000004c0)=0x2) r6 = getegid() r7 = open(&(0x7f00000003c0)='.\x00', 0x8000, 0x2) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000400)={{0x1, 0x200}, 0x52}, 0x10) getgroups(0x80, &(0x7f0000000180)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getgroups(0x4, &(0x7f00000001c0)=[r1, r4, r6, r8]) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r9, 0xb547f7a5857cc62b, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x50000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x30}}, 0x10) 19:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) shutdown(r2, 0x1) 19:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr="ea9dfa4deff40c3f3559e00844354bfb", 0xfffffffffffffff7}, 0x1c) socket$inet6(0xa, 0x0, 0x0) 19:31:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) shutdown(r2, 0x1) 19:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) shutdown(r2, 0x1) 19:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:07 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@un=@abs, &(0x7f0000000100)=0x80) getsockname(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x80) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3ff, 0x80100) 19:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x52200) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'bcsf0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}) socket$inet6(0xa, 0x0, 0x8000) 19:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x20000000000001de, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80100, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1000, 0x4840) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0xaf, @loopback, 0x4e23, 0x3, 'none\x00', 0x20, 0x2e2f}, {@multicast1, 0x4e20, 0x3, 0x659, 0x8, 0x3}}, 0x116) socket$inet6(0xa, 0x0, 0x0) 19:31:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x80000, 0x0) 19:31:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x1000, "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"}, &(0x7f00000010c0)=0x1024) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x18c, r1, 0xb, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8f4}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffac7}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$inet6(0xa, 0x0, 0x0) 19:31:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) socket$inet6(0xa, 0x0, 0x0) 19:31:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2053}) r0 = socket(0x1b, 0x482e1962de9da40d, 0x9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000010c0)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000001180)=0x84) socket$inet6(0xa, 0x0, 0x0) 19:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x800, 0x0) 19:31:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:11 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x3, @local, 0x10001}}, 0x0, 0x2, 0x0, "5052003b80e5ce2528f019797e7f8f67d2f6b13ab45712a52d8ecc1fe5a0fef5991b250b0111505a9727623c16c7f88ac0a0197ad01b0d1b059e376b666477b9a112210df4b4df1303cdfbb69fbaee3d"}, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:12 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1ffe, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x52d, 0x3, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f0000000040)={0xd8, &(0x7f0000000100)}) socket$inet6(0xa, 0x0, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon0\x00', 0x100, 0x0) 19:31:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000180)="000000cbdf5ca560949ba11400a0e0b29e") getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) socket$inet6(0xa, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x2) 19:31:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) eventfd(0xa2) socket$inet6(0xa, 0x0, 0x0) 19:31:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:13 executing program 0: r0 = semget(0x0, 0x3, 0x80) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000080)=""/218) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x81, 0x2, 0x401, 0x1}, &(0x7f0000000280)=0x98) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xe6d, 0x20800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r2, 0xf76}, &(0x7f0000000380)=0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000440)={@host}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000400)={r4, 0xc3c}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000003c0)={r4, 0x5}, 0x8) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x200040) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) 19:31:14 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0xffff, 0x0, 0x4, 0x8000000000050000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x0) 19:31:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) process_vm_writev(r0, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/21, 0x15}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/234, 0xea}, {&(0x7f00000012c0)=""/136, 0x88}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x7, &(0x7f0000002780)=[{&(0x7f0000002400)=""/84, 0x54}, {&(0x7f0000002480)=""/130, 0x82}, {&(0x7f0000002540)=""/245, 0xf5}, {&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/65, 0x41}], 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001180)='/dev/audio#\x00', 0x3, 0x10000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000002800)={0x0, 0x0, 0x3, 0x7, {0xffffffffffffffff, 0x6, 0x2, 0x7}}) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10080808}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getsockopt$inet6_buf(r1, 0x29, 0xf3, &(0x7f0000002940)=""/238, &(0x7f0000002a40)=0xee) 19:31:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x5, 0x2) 19:31:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x1, 0x4) 19:31:15 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1ffe, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x52d, 0x3, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f0000000040)={0xd8, &(0x7f0000000100)}) socket$inet6(0xa, 0x0, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon0\x00', 0x100, 0x0) 19:31:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x20003, 0x10) 19:31:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:16 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x470200, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000000c0)=0x6) socket$inet6(0xa, 0x0, 0x0) 19:31:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 362.666911][T13329] IPVS: ftp: loaded support on port[0] = 21 [ 362.902149][T13329] chnl_net:caif_netlink_parms(): no params data found [ 362.975254][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.982989][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.992053][T13329] device bridge_slave_0 entered promiscuous mode [ 363.004345][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.011557][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.020766][T13329] device bridge_slave_1 entered promiscuous mode [ 363.059824][T13329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 363.072862][T13329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 363.110442][T13329] team0: Port device team_slave_0 added [ 363.120968][T13329] team0: Port device team_slave_1 added [ 363.197783][T13329] device hsr_slave_0 entered promiscuous mode [ 363.304562][T13329] device hsr_slave_1 entered promiscuous mode [ 363.710713][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.718062][T13329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.726098][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.733363][T13329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.840800][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.867535][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.878681][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.889746][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.905249][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 363.927173][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.949293][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.959272][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.969866][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.977114][T12118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.023359][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.033733][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.042944][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.050124][T12118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.058794][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.069210][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.079569][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.089864][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.099760][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.109917][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.129258][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.138777][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.148202][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.164625][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.173987][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.190712][T13329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.244295][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 19:31:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x61) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x290080) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{}, "203cd287e6614b6e", "455279a8fa9d85922577eb2f6ee34c61", "6f025764", "02debf4c0f877a9d"}, 0x28) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x5d, "12079870df3b508a5d0556c52bdb2b17fd1a38fcc548fc89fe1114a83084674e05f22f5a69ce8921b9508472df17a34480262b791916f03b72b3fd8f9c6434a3f3571d039f525df7ab2509d90e8d00c47e2f510a07ae1058918cd95afb"}, &(0x7f0000000100)=0x81) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000140)=0xfffffffffffffffe) 19:31:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:18 executing program 4: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0xc, 0xfffffffffffffd88) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) 19:31:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)}}], 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x78, 0x15, 0x200, 0x70bd29, 0x25dfdbfc, {0x2, 0x3f, 0x2, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_LABEL={0x14, 0x3, 'bcsh0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x2}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0xffffffffffffff81}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x468f71b6) 19:31:19 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/200) socket$inet6(0xa, 0x0, 0x0) 19:31:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 365.359445][T13379] binder_alloc: 13377: binder_alloc_buf, no vma [ 365.396530][T13379] binder: 13377:13379 ioctl ae44 468f71b6 returned -22 19:31:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 365.430932][T12118] binder: unexpected work type, 4, not freed [ 365.444228][T13384] binder: BINDER_SET_CONTEXT_MGR already set [ 365.450309][T13384] binder: 13377:13384 ioctl 40046207 0 returned -16 [ 365.514894][T12118] binder: unexpected work type, 4, not freed 19:31:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000080)=@ax25={{}, [@netrom, @bcast, @rose, @rose, @remote, @remote, @remote, @null]}, &(0x7f0000000240)=0x80) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000280)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xffdc}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 19:31:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x80}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) pwritev(r0, &(0x7f0000000480), 0x0, 0x0) 19:31:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10000000000, 0x10001}]}) socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0x8, 0xffffffffffffff9d) 19:31:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 366.379777][ T30] audit: type=1326 audit(1564428680.421:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13430 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 4: unshare(0x20040600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x20, 0x100c0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x1}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e24, @remote}}) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x2000}, 0xc) 19:31:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="240000000f0607031dfffd946fa2830020200a0005000100071d85680c1baba204001b7e", 0x24}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_DIRENT(r1, &(0x7f0000000080)={0x138, 0x0, 0x7, [{0x5, 0x1, 0x12, 0xfffffffffffffff8, 'ppp0cgroup*:md5sum'}, {0x5, 0x1, 0x0, 0xf5f}, {0x2, 0x1, 0x4, 0x19, '&#.%'}, {0x5, 0x400, 0x5, 0x49b, '$proc'}, {0x2, 0x1, 0x0, 0xfffffffffffffff9}, {0x2, 0x5, 0x1, 0x80, '%'}, {0x6, 0x6, 0x0, 0x1000}, {0x0, 0x1, 0x14, 0x4, ':-\x9aprocvmnet0selinux'}, {0x0, 0x7, 0x1, 0x10000, '('}]}, 0x138) 19:31:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 367.099242][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.169441][ T30] audit: type=1326 audit(1564428681.211:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13430 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 [ 367.205141][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:31:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2000000000000193, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x4, 0x0) 19:31:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00006dbffc)=0x1, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x8}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) pread64(r0, &(0x7f0000000040)=""/228, 0xe4, 0x0) 19:31:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:21 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00006dbffc)=0x1, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x8}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) pread64(r0, &(0x7f0000000040)=""/228, 0xe4, 0x0) 19:31:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x160080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:31:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000280)={0x9, 0x3, [0x5, 0x3, 0x7fffffff, 0x800, 0x9], 0xed66}) r1 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x16}, @void, @llc={@llc={0x8e, 0x4, "c296", "aa1189e0cfe0992a8bef94fdcab8078d9976281c83cc98e1f69b78d1248e94b9a23343f30220d2b4e4eac92b620b67605a4bbde072f7e920b85d0e788c667ec68b4d84a1626d0cc177ff33bdb4b9737fe2ab"}}}, 0x5a) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @broadcast}}, [0x0, 0x7f, 0x5a, 0x9, 0x1f, 0x8, 0xed4, 0x2, 0x101, 0x8001, 0x9, 0x84, 0x20, 0x7, 0x4]}, &(0x7f0000000240)=0x100) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000380)={0x0, 0x5, 0x1011}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0), 0x4) dup2(r0, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:31:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x0) 19:31:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000280)={0x9, 0x3, [0x5, 0x3, 0x7fffffff, 0x800, 0x9], 0xed66}) r1 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x16}, @void, @llc={@llc={0x8e, 0x4, "c296", "aa1189e0cfe0992a8bef94fdcab8078d9976281c83cc98e1f69b78d1248e94b9a23343f30220d2b4e4eac92b620b67605a4bbde072f7e920b85d0e788c667ec68b4d84a1626d0cc177ff33bdb4b9737fe2ab"}}}, 0x5a) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @broadcast}}, [0x0, 0x7f, 0x5a, 0x9, 0x1f, 0x8, 0xed4, 0x2, 0x101, 0x8001, 0x9, 0x84, 0x20, 0x7, 0x4]}, &(0x7f0000000240)=0x100) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000380)={0x0, 0x5, 0x1011}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0), 0x4) dup2(r0, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:22 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x160080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:31:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x46301, 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r3}) socket$inet6(0xa, 0x0, 0x0) 19:31:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 4: unshare(0x20400) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xdf788b86c7f20d60) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) 19:31:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 0: socket$inet6(0xa, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) 19:31:23 executing program 4: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80680) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000940)={"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"}) fcntl$addseals(r0, 0x409, 0xd) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000500)={0x4}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9a", 0x1}], 0x1, 0x0) 19:31:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x40c81, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0xbee0, 0x4, 0x0, 0x3}) r2 = semget$private(0x0, 0x2, 0x20) lstat(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002000), &(0x7f0000002040)=0x0, &(0x7f0000002080)) getresuid(&(0x7f00000020c0), &(0x7f0000002100)=0x0, &(0x7f0000002140)) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000002240)={{0x40, r3, r4, r5, r6, 0x10, 0x89e1}, 0x100000000, 0x5, 0xff}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="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") r7 = syz_open_dev$vbi(&(0x7f00000007c0)='/dev/vbi#\x00', 0x3, 0x2) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)='Z', 0x1}, {0x0}, {&(0x7f0000000800)="b0", 0x1}], 0x3) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{r1, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}]}) r8 = getpgrp(0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001a80)=0x0) lstat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001c40)={0x0}, &(0x7f0000001c80)=0xc) r15 = geteuid() lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001d80)=0x0) r18 = getuid() r19 = getegid() sendmsg$unix(r7, &(0x7f0000001f00)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000380)="d1ac543ecf6a3d4aeed434934bc6bd7d19a55f2e4869698115011e2287a0ea68b5284bdb22035d15e733c952fda5e2407634fcccb31287e3dff1de008d6d721cef1a377e7da6948dabf069a2a1ba452f57eed2a9e3cf7f9bbcb15f93b773f9bd83ed1a8ed7ede60c6a8e1998e208866eeebfa7749cbc6135eb2f869124b2f4bc6e3c197e2bf86771", 0x88}, {&(0x7f0000000440)="4b0c620258198ae184e943ad89c420f222ac0b90fe64dbd6ec2f1fbeb36201ca877bf524962631e90acd2db8900c9d388ff26be2d790443658799acdfd7e6803ec76c503ac07e2e8699c4a04fb40c9cbe4f7da5686299a516e6ef86f004b5e7754a38a92ce0ec4fe655026480ffa8b44dfe9ab72c492d0bd4cd9ea0d9a5ab5027ad836a4bfe28d1ec0e034ca876fbe5ed83d75b0", 0x94}, {&(0x7f0000000840)="409a0da13dfceeb59aaf4f2a698d75c716ee31c38f97439b7c0652b378a59a2f78d19614df2a487e619e97d292510beab22900e96fcda1593f0494cb3de0810cc2f188011af5f424d7cfab59100ca63a8468b97705f155a3cecee55fc62a89feb7917b57ee13fe5702aaa0a49e00266fffb94ff7913a193fb9aef6968c7c4d6f33a51d28637bc0453cc18319b4f1c051366c535fb04b18a28ea1fa18a37e918e55ea94009be477686807c25e12f9bafbc797da59527dc3b9b101d70d3d76d1aa7c47cfe472205524c5c3ced2eda72ef56eb317fef6b004614652f6b33d4a6c62443fcc21b68df5107211ea8e856ea7798b312c6bb5b18454c008f30c01aa3c6f2b8e2cf379ec9618d341f9e11bee3c8fc008263d44c3f523a8c9de4b3974fd670efe8d86c2f0285b988ea5f0204945bdf602f50581987d45a975ddb75a64fe602981943d345ea1d5ed8acb52495785e03a0a5af18330f713475f7096c1c635f115a66b168ded251ef5cc74c89f3c5f85ca6ba4033bce05dc58901813c08d1a5dee7d60e3843d2a83e15a693cc6e36b201817759dc3202c20d9f3357dd637dfdbdf0e5a3a6b1bda323b70aa8087913d3903f1a7f5358614fdfa8cbab61a8136d47af38f42cb7d9a5705be63da655600b32f668b7d6e3741484772cf5ed1518205e19ed2d5b158b2cee9c2471a4a637b566c116d85b2c22a2da0657ccd6515b2ddd104cbfa68331a884136cef7b8098d25d9c8d830efb9b561fccb1b506745888dfe2f00953e90226d784b5470194738fbcc5e25d696bd7b6d3b823a18b4b31a020acfed029fdb4d7fc081ab82773df21c2109b65ec4a31c00ae2aff7c4e7167c67b48ab98ed72e592c2978ad923378d4be0476afbadd088a2254880ed6d396cd857617f842d834d667af062ab65cc78cd87ee66cfb0269669877626a71d47ef2d11a1189092b84404f0854c468a7c71634398855f2bc0bea90120cf71ab1090f5ca7f49960933de16a89b3058b641f1368dc9ea207ce4bc5406fb54ef56b3c633584d8eeff82f7c7d0acb8b835091a2b97134fd8321cafb4070e4dbeb99dbf2d0400011086a292a933562c38fc71f117a75ac5d1e782bedcb8919440b6d8ab30a6ca8ac4b5145dd7b24cb9e08f7963af740152df64642f168bf6efe91ba86a97d3b9980db638bceee7e2610bf865b2da533373aa2b424300e88b48eac2db3ad1daa4dfd2f4a5abcf041a80c1a6a8b0028cea286ef5ce3968e5ba0e2c34e219f9c4a6ece2debd62c2130cb38a136b2f762db4d66011dabc9f6db58a8bd0f632da14f1b2b9a2e52fc83f452c86ffea3282a376c929cc18acb8b63601b0e0cbf6e8709aeaf124d50dfb47675e86fae0a965a606f8284640e1037a7c0aef1e5d19edfb3edac6f5ea7689eae6f381bd2c1d3df4bcdea510f254f56713f4862bb2f6c82c8cc6e699efbfc36b11b64627dd614f5c2e8f5478f7e27251fef18de11fdf48b6d05ee289b1383f28aedf3aa616e3de270f8251b82928d25edf4296f597a9b1b9613ebdf4ff811db2b078948f535dd158ea81f329d8eb86e53fbf475d53839ffaafe31a3d6ceac714456ab47b6bad886e5837eece900bcb9bb5cf8735ff318fe57ce37c47f7e500ed9b011fc0a871c6cfb6f4464eb674368a36ae3ed5551b50131c85006dd6b2b897887da1ffa02804eab057af03e4a52aaaef4ce16e16669a473e3057f0ea61c8e23ee3a3e459a0a4ece74aa5de3d5f204fcf66256a81ae2edbce0f3b008b2748b270a6b13be5d9e26cd19bd5d95f411ef14d4165562c2eee580635d7d09542a3fdbbd85d2df2c93b01b4e2b9a295da4fd56818c10730dccdf740b7eff7a6e95cfc05047cf1f0234815558256b0d586789eededc495d28a2962ffee71e4aff0f97f079777a01fc340d5094970ca94a3981bf07f22224e7061e15a0b18a5cc821edd1178abc95e7b3afab081daacec49a368a886219d169c4452f92cfcf31c77ce0845965f00a99eb591384c57e0771e7107cd841cc82b30458067b4ba8efb955c28eb329694982f7e8396c6a042b0e79b33e063407d2a8202a9ca835c54bfa3b9452ba0e38a1e28e3746f9d36163a435772f05b1885fe43755bc9ca196330ff622d035989909a07cbd3a23e2105bd1a850e3cfc77b77ebffed41f9b4ebaf91780542dd4415f88bec265212001e07d5e08ea0f6cc92914eb39d5fca6179ea09121a723ef03a1a09682c4ef790e20d8aa53d906e412ca0bee1e76f01c7841275f715f926faaf0b3107ed641950f7439a5581d738dc32a96e7efcd9bffd3507a680eb9c24696ff938ddc8060be7400983ed41dce9f59bba897320b49a31b9bd52b624237d32c3880f4c353d55ae5161bfec6ad4adc9be6aa5b5816cff631477184d12170521370160c9920126aee937a828a9bd8329ffa28381a1e76b0f41d2d77fbd0ae94eeac2ab2e06ae1a951ec507b3f6f04a2e6e2cbae0e5067ebe53dfb3b20f274001bc0f7c5032c501008cfd77779a8cb322edeabea2ae868a29c07b865b21d7beeec27ef73aaaf3bbeaf336023b26f910f3257b612f5f0a57920ec52363037cda34122d9c9d81110927444edd0e0e11d4959954fdf6240d42a798948215cc47fc82ff8a3fe4af012c5e5d7823650bea107c5c72f9168751c197594c6eda303e5c0bbb5f3d1e994a05592693aca3d76d2934dc7cc51852d4840a61ae9f53ad9124b8159eee0bc879da063f1124dba50300c78fec2ba57c332573f8517156dce34c28cabb9eb20515040b0d5fb1990c190928461f087edf33b2b00bb25995f9c0483fbee655322daa0515de056d0e0a456c03205487f15e987de9c7e642e83750563a38081714f469cbfcc6c5c6c32fe7690c847014d457ae10aaf0455339064eb61c6b6fe1a7db1af08e55cef53a99270bc6c16a9e22d653288135ed72978ee10849950709987559deb8f5b3fa9a93092d6394f664f25a1eb29f5a534500de44a96d9e39d1bb3148f05203693dd2f99c0f77faeb892c26a9b5180eeff029a7e82f2574e75f20699a52e09e2f2cfc7a270bef9d0912da7d63ab7e4430a5c616165d634fe6e4f26749646718ec54dce31cd25058d47fd57ac9405e19b4093ad4ccfdb0d2c0f3190996841db793a7f22e15c07fd238399b8bc4133912b3e09c36318378217efdd085ea1af3ba8f9f9a72e2b6e4f9485976e6c7dbbed230bc91318877308b2fa0bc2fb347cf4b86d2acbde51915a5debe9981f4cde073de12d9db3409a10ee439a7d67d5df9e1986dfcf78977b6bfeef1838f462932612d4db2458376f5886d99a5d0f1e947473da16888d810777550e8ef9ff3183197a9660ac2d30ae973104796b75b1f3e9cd1cbdf8d916697585ddc7f41bc71b0ce89c55eaab78bd1f6f1253320e293a84f112b1723b8dc54a0d517bf2ac02c61a6c1933078555c1d1c3aa794eb868befcd213eb4d7ebabf7b84ddc0900a9f1fdfc9a022123df9fd2db98b82fd6a7289ed63d1a1525e5485a22ccd77b6acb2dde69256dd7318a207cde0f56d3e5911e3acdbf56b7095f6660f5e6974fa40af57ca259e24d2b969bcb82e85321efc0cd1ad0f70b62943250071cb7d51df054273f20bdddae90090ee3d04491c3ae85ffda3f24781ff2e45c4fc0166318da882d68ac3a2d66bc3fc9359c15211e2d945b0838ce3b58f7b187964a0f5ef73e4edab02d8925d9b9de1348808d64dd596aefdef75e6c95f12ce08f5987e59f44c8050f83f00bd12d43aed2073a04b799324bc77ec3c45f86b67e4d3c9513fc874863c996c1a8b9f92b02725caa6e8c1808782114a15c2639a6b8f014802c01b39d25e54312211cf881594a3189090e51f0fcf4673a6dfcbd325799bd64c4dfd88cc0378dc766c1fd540abd4281ec4016bdaccb0d9621e8ff3c7abe86f1e9d337900f626a73856dce67c3b646dad9fe9809710e69f635c56afee7f4a001bdcdeb301fe6cfd932e02f92e222c810d0dfb37472dfd3c7af0bc45089e01b0adf1c88c2bf128d1fc1af51765d7ecebde7e803f47ce8f74bd4a0497223c37df68b07e508532e38f5606de06fe213c5eacc8eab851e2637ff35e2bfd2f3b8263e26e5d1264b63bd0a3748cafbcdef73932ebb1ca1c2e7a7f1ec025ba5fa6ec1f8be94fec365acf4cc7609e2fcac06bad63ae4ed7090aa06382a309109a378c345990d7f313a10cb7aab1efa448f2b015c17e45cd2dcc2b70ef2afad5f18b1a70d094bcac3a0cb7e2c9918b349044d8be398e5c16b351049b8df897adaa9ab9259401701421e528ca0c69a3d5b5a96f82d86d55ac280dc84a8285d587a5e7c0323e3d9a88a066ea86c1858a50ad1c28c5930947514cef523e9ee57c677ec05ef9f8c3babe152db04409fe196e4cc68ef72ddc5ada6fc8cd1e4d7ca0eb7d65264660d8cf2f9711e41da990037e43ea5abd1187bc8b32323264457f59f3077ffca9b08bce3d2c53ee315aec5eccdb5c3fdb702d56bd1018a8735292a2c264b8e06d7ac08444a0a6e21d558a84124db9683e216eb2959cb9d7b2f246ebb6a93f61619cd7833c820bd332b12e30fa55223052723f3786f0f326e38109d4bdad3e9b3e6fb5cac62e160b2c3e020f35c3120ecacc5a27e158a1e8e428b1fce319641e39fe01f2e2534ccd1f172d8b57c4d055601e559207a6432f3e9c60040f54b6e17252e397380a7c4eea5c420dfb1c490060d3135c9a47e6da81668d58bfca48f2651380920354b5cbd8aabecabd0352f87dbe0a2f857ac607126289e1e10a3525ad9451456bd0966005752a631d26d1d2c3e64a5956407da1476a004ff1ed9dea7689f03abe79af2fc5825868782533f109a7bbc3055b198069321721676aed1cddcd48b972ae38faa48e57ba08aa5194bedc0b0fdc03201b9f676a21b65e7598d0fe9fcf47c880392db9c05dd9d7d59e0e2a778fd51ee58bd690dd1b5025d78622b0df519c3d2cc3ca680da9818ca467de2a217fd6e4989529ec53bc5edcaf218aa40c366e3c27eeb044c6e1c7a3851171d84cd8fbecf3b04fc2204e258f4104bf00f658a5b8a2fad9e08c144d0214cca2f098b0b4f425fd2e1547280f7636c9d0f58fcf86a6ffd9a412e1b1f8f4a2f72be36f975564594159d1425c7547cc788c8f3e1e516a9390038c166fa78a79c7fe0ae9fd6d6998d0e28b4aa20904e714010170c309cd2b0472ccf450ed1e06537d8fd14187addbedcebafebfe748742df9cd6269d8330b6d9a675b857e2de9d43aba1823293b7b5748213f43277dd097f5979b3a96fde73dc53f7ad875a0a922aa58ab2b0189fae48ead03b36559d48f4e99f8a4bc290d26e6b2ffa9f6bc65a30640179c61b4e5a0266d0ad01e3a6d01e29eae76107dc6b5faa470760a0834ed42f96691d31813ead107207d8af704f6ae596b796b07c036616e031a9347cf9386fe388d49a8df967bd3b539c17bad533c58bb6ededaff522b30148cfb1184f1862b2d6128289fe3f2561fc4db5d02dce53de641eaa2217868776caa1145ad2c96e21135b49499d23c738015b45e6bfc1ad1a221f7e9a8833d349935ce520547e7245e0b1ae097bc7af025a42b26007b670e11d4a64d79b4987d75bbb33a30e1ec03fcf7d4ae3a2dd024593c8fa35387788bff7403bf9b70cc62845c6a0940a48e4fe0f17b14af3e97c57f6cb6038b1fbc9a936994b0a9c076d7158be8a94ade36fa5cfe0fc5b97658fde45704d3c933705ef98a3aaaaf9a2e8e17037a6fdf2bededae8a793099661d54d636c47fa105dbe2c8be6", 0x1000}, {&(0x7f0000000500)="1a4a1550a556085131125e93098409396d74e896", 0x14}, {&(0x7f00000005c0)="de254664fc4ba666c99fe798d46b665e37b7d5dc892437770194e8eec7359aa430fa592518bad40174038b947d768606e84b52206e23eee52614a98b58239624a5c2d8d3ac6fe679f73c2b887cd17d91b1eecb38267162dd6d6a8845c98bbf51be63d66e3d4a20aca3bcf5cb22e98de1d3c6ec6956748ff9ed385dad9faf37fb2cd612a124e62784e4da9e683f0c7096b519262895ced9c808e0c07149d51411d41a5ff12fabea629120b8c265", 0xad}, {&(0x7f0000000680)="7089f9ddc1b17709e687b7586fcc46cd744ab995425310b3343ddb4735284feb7f3fd988212b5a5f1e7bb6dc13e814b07d4b389183578607e6e95882d4bd76da24b6e770dda385547dfeea864ca6429efd3ad09da956995777a59c6e8701fa62de4326bf2b189a00692f6f9499b812377c61a2bd3e9000a2d6acdcef4e68b9e8796090c3424a3c12af8476936d2de7d571cde10ab71e9ff24b3cf4da358c9f8f5c15a560a746fcdfe0b5787e24948b52c57679822614215700206bd0157ba30f6a2115ad80c0", 0xc6}, {&(0x7f0000001840)="c91df218d7babab026a451880096a77f75ae274fb3090ac59af826fd6d2fc4a7ab129fc384f32f5862344848146962fbdb2954cd2ef6688f466040a2deb56529402313041828b37ce06b1727258812526e5f1214a37054eb348a88138c36b39036826e10305e886208fed0c85d25126ce5a4fba2b47c1ef8614a47a935a27af162414f4d35f628d6ed5f1d0a28ad215cea704344d63bf0816ddfa07da6b131bd0783e2dfd43e8e99e332be62d6c393a35110e0cc3fb505f55b3b8b65d19a9704abf93f5c9662ca45378c1ba9e87f512cf99ac738c3353807832b75133c28d85fbf258a0e3c3a7eb5a37aa2", 0xeb}], 0x7, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r7, r7, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x140, 0x48000}, 0x20008004) 19:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x9, 0x3ff}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000005c0)={0x81, 0x2, 0x7fffffff, 0x8000, r1}, &(0x7f0000000580)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r2 = socket$inet6(0xa, 0x806, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x80000001, 0x20002) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000300)=0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000680)=""/228, &(0x7f0000000180)=0xe4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="8600d5100000", @ANYRES16=r5, @ANYBLOB="340e08000000fcdbdf250e000000080005000800000014000300080004000180000008000800030000000c000200080002004e2100001c00020008000600a10200000800080055da055b080005000900000008000400060000000800060003000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) chroot(&(0x7f0000000280)='./file0\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x1}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={r7, 0x3}, 0x8) 19:31:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 370.005430][T13609] QAT: Invalid ioctl [ 370.052342][T13609] QAT: Invalid ioctl [ 370.088597][T13609] QAT: Invalid ioctl [ 370.157365][T13609] QAT: Invalid ioctl 19:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 370.186982][T13621] QAT: Invalid ioctl [ 370.244124][T13609] QAT: Invalid ioctl 19:31:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x06\x00', 0x0, 0x80003}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) 19:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:24 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000001580)=""/121, 0x79}], 0x9, &(0x7f00000016c0)=""/252, 0xfc}, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001840)={@empty, 0x0}, &(0x7f0000001880)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x84001020}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=@delqdisc={0x80, 0x25, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, r1, {}, {0x3, 0xe}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x44, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xfffffffffffffff7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x95b4}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044015}, 0x4080) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x1000000002) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f00000019c0)=0x6, 0x4) 19:31:25 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x50000}]}) 19:31:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) [ 371.057069][ T30] audit: type=1326 audit(1564428685.101:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:31:25 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="550000001e007f5300fe01b2a4a280930a06000000a8430891000000080008000a00000000000000000700029b84136ef75afb83de448daa720c036041526a7735c789b06dca27c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 19:31:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r1, 0x1) 19:31:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 371.335323][T13678] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.4'. 19:31:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 371.598018][T13688] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.4'. 19:31:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 371.835110][ T30] audit: type=1326 audit(1564428685.871:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:31:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x20000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "48427c92ef478ea2", "23364db96814983b91fe75c00f235bc99d32f76ff5c7229a86b22c7d075b5c0d", "df02002b", "d6021a7145b48d3c"}, 0x38) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x4, 0x3}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)) flock(r0, 0x4) 19:31:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x12, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) ioctl(r1, 0x53, &(0x7f0000000100)="ca6037bc632e3e050cc90734f4fe88dcd1c1b63172f7f6956a665f428ffd887bd39a5d203a59edc8f11e3b1272ce682ad83e14ab64985743902ac53be415bf9e766d9a4d20f9fdefda066b58e58f58a6ad1d0f7d8b20a703ed81da7bc3fc5953ac6931304aa8dd1bc7ec00234f8a7b2202a5c9b9b703c5008afb2e3ea35d12cf4411308b259aded1a42b0e62b19b7debbc4c3723b7e2011bdf7f04b9bbb93b26e192e071aa65cede351f08e7a4221c0b8db9743151bf45ce") 19:31:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_nanosleep(0x8, 0x200000000, &(0x7f0000000000)={0x77359400}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="c301faac2b9f6b4e6057a71ea2736c2cd4634de8f5bae83c418964aa68498582b25fe94c962a980a15ec54e6b71f1aa83cafbf6239") [ 372.190631][T13717] Unknown ioctl 1074816532 19:31:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x200000000000006a, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:26 executing program 4: capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)) eventfd(0xe7de) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) 19:31:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 372.662657][T13738] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 19:31:26 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x367, &(0x7f0000000080)}) socket$inet6(0xa, 0x400000000003, 0x100000002) 19:31:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xb, @sdr}) 19:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 4: r0 = bpf$PROG_LOAD(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffda4}, 0x70) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e20, @rand_addr=0x1}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000100)={r1, r2+30000000}, &(0x7f0000000140)) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) write$P9_RRENAME(r3, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}], 0x1c) 19:31:27 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) tkill(r1, 0x6) 19:31:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:27 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00'}, 0x10) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="3420e0ecb761e528073a3dd9e5c11bb532eaa4f0079d4f0f57c3d7e108a7ca09054ad5f0983bb664bc04442e88e89e19e0473d79f4bc979159b61a3f8277152078461f4e120882eb44edc7b4f3c7931a5eff286c85903b4f41f557d2a48f7d53d1182168c5927525b2ef7c756e8ce0c50caf9371541d64fdefb8ee29fb091b3dc64a3066106a5678de9cf20d2b8ea21907a0ccd973bbc454261f43d41d0d6466dc80ddc5c613449ffde57e9df62621478a9bc0eae1dcb7759cdb0936d2123d351909d11c", 0xc4}, {&(0x7f0000000200)="b83fcc4c6483dd3f24e903ffb0b02beae76b82e10c561ff3035520744b4a306b1d4cd176d1d66eba8547e37e821b89efa22960ab678294cd8efaa2f1857c774aace7c72d0e8b77d32d1c8b26b1cc2b86fdad4981ae3cd3422b0ffa8de792a0a97e51de113efb7ddbd7744e8c518387824507cf7dca51be365781f4df790bf33258a07d11e4dcb56e85164069bad5c43500f29f4ad52b8892731d5f2afb94a5673e6ab23a0c5fe0933a4e0ec893e3f42e9964d5fa1691d3d52cfabb72cb7a4bfcf46ca091a9baa556b3c1639f1c2f2ce1a01293cb", 0xd4}, {&(0x7f0000000300)="7d90be6a9ed26dad5a69d06c974bc95b186485b6224e5258ccc41029844dc2", 0x1f}, {&(0x7f0000000340)="3671d5639f31a7334364b5595493eccd5912c89f4b80a48e5876e7e43b1022e8643ac25e4338fd807f1096829574071d2637cbf5fbf216bd42057f59b0f7e43fa384e1e3", 0x44}, {&(0x7f00000003c0)="aec2756d05950e3430fcc83e99adc8ecc6e2b1565d82b1fb2c3159b4cfeddb5e207387737885fe3fa79add977bc878925ae885604270c243a410738aac79cf8cd426db52c02197b53259f716a0c1bfb95bf7eef7ccdb067aa2a6f62c211cbaed3c3a2f782f96463dc45ec14f3298e3b5be02419443b32aea998423fe61ce9a59eb9da90482ff2fecb5733735678812dc55aa87e01421d0c5cefae1b1b125b217268eda47bed1da3adc8fe6", 0xab}, {&(0x7f0000000480)="a9fd9c5e283e3bda46afea7ca61ee8e1c77d7eb48c9ff3d9a3f447f4c9e32a81032e96eb328db16370d1b2178a79d909a1f9822a4a841372dd2929883014361a088d239fc3e5b38ff9dae39e04fc9208409214a3c1a2767fd23e6eda646ec2c0032248", 0x63}, {&(0x7f0000000500)="4017d3444d3acde5dfe881812c932f16d93bc1d5e52f300a65fbd7c2caa35493c998780194c80f29e1ac3495de2c5e5736b02b478b888ef6a6356971b635d243d454ef26b0d44b7d92180b6ca02324fd8344af33962ecca8f94da2b89a85bcdeb502d8724cbfeca9e1d34161069d13808fc18f015ee8117482e850df60ba1a74564135866ea952b0415aba6a7dd3bc6cbdca8f56dc0e649b87765ab20ac5d8af7346644e573bbae16bc9cbe7", 0xac}], 0x7, 0x0) socket$inet6(0xa, 0x0, 0x0) 19:31:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 4: unshare(0x20400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1af277d0d0a35767, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 19:31:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:28 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '/dev/dlm-monitor\x00'}, &(0x7f00000001c0)=""/146, 0x92) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r1, r2, 0x4, 0x3}, 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ptrace$cont(0x1f, r3, 0x100000001, 0xc1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xb0082, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x9, 0x0, 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x6}) r5 = dup(r0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000300)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) 19:31:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/175) 19:31:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xfffffffffffffffb) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) memfd_create(&(0x7f0000000100)='/proc/capi/capi20\x00', 0x5) 19:31:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 375.233427][ C1] hrtimer: interrupt took 29579 ns 19:31:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss={0x2, 0x1000}, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x1}, @timestamp], 0x7) socket$inet6(0xa, 0x0, 0x0) 19:31:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) [ 375.637723][T13857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:31:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000050000}]}) socket$inet6(0xa, 0x0, 0x0) [ 376.028846][T13877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:31:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:30 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xfffffffffffffffb) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) memfd_create(&(0x7f0000000100)='/proc/capi/capi20\x00', 0x5) 19:31:30 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) 19:31:30 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50000, 0x0) recvmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, &(0x7f00000012c0)=""/213, 0xd5}, 0x6}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f00000047c0)=[{&(0x7f0000001440)=""/32, 0x20}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/117, 0x75}, {&(0x7f0000003500)=""/154, 0x9a}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/159, 0x9f}, {&(0x7f0000004680)=""/246, 0xf6}, {&(0x7f0000004780)=""/17, 0x11}], 0x9, &(0x7f0000004880)=""/241, 0xf1}, 0x1}, {{&(0x7f0000004980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004a00)=""/12, 0xc}, {&(0x7f0000004a40)=""/183, 0xb7}, {&(0x7f0000004b00)=""/22, 0x16}, {&(0x7f0000004b40)=""/111, 0x6f}, {&(0x7f0000004bc0)=""/63, 0x3f}, {&(0x7f0000004c00)=""/241, 0xf1}], 0x6, &(0x7f0000004d80)=""/145, 0x91}, 0xfffffffffffffffe}, {{&(0x7f0000004e40)=@x25, 0x80, &(0x7f0000005380)=[{&(0x7f0000004ec0)=""/100, 0x64}, {&(0x7f0000004f40)=""/160, 0xa0}, {&(0x7f0000005000)=""/129, 0x81}, {&(0x7f00000050c0)=""/240, 0xf0}, {&(0x7f00000051c0)=""/183, 0xb7}, {&(0x7f0000005280)=""/238, 0xee}], 0x6, &(0x7f0000005400)=""/130, 0x82}, 0x30}, {{&(0x7f00000054c0)=@ipx, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005540)=""/79, 0x4f}, {&(0x7f00000055c0)=""/97, 0x61}, {&(0x7f0000005640)=""/177, 0xb1}, {&(0x7f0000005700)=""/15, 0xf}, {&(0x7f0000005740)=""/68, 0x44}, {&(0x7f00000057c0)=""/236, 0xec}, {&(0x7f00000058c0)=""/215, 0xd7}, {&(0x7f00000059c0)=""/192, 0xc0}, {&(0x7f0000005a80)=""/184, 0xb8}], 0x9}, 0x80}], 0x5, 0x100, &(0x7f0000005d40)={0x0, 0x989680}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000005d80)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, 0xf72, 0x3}, &(0x7f0000005e40)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000005e80)={r1, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x5, 0x8001, 0x2, 0xffffffffffffffff}, &(0x7f0000005f40)=0x98) bind$netlink(r0, &(0x7f0000005f80)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000005fc0)={r1, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000006080)='/dev/zero\x00', 0x5c1b48ac2692ab0f, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000060c0)={0x800, 0x7, 0x1}) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TCSETA(r2, 0x5406, &(0x7f0000006100)={0x7, 0x59, 0x7, 0x4, 0x1b, 0x101, 0x4000000000000000, 0xd732, 0xffffffffffffffac}) unshare(0x10000) clock_gettime(0x0, &(0x7f0000006200)={0x0, 0x0}) select(0x40, &(0x7f0000006140)={0x401, 0x6, 0xcec, 0x613, 0x80, 0xffff, 0x2, 0x101}, &(0x7f0000006180)={0x3, 0xc7, 0x100, 0x2a00000000000000, 0x9, 0x3f, 0xfffffffffffffffd, 0x8}, &(0x7f00000061c0)={0x8a, 0x3, 0x9, 0x81, 0x0, 0x9, 0x3, 0x400}, &(0x7f0000006240)={r3, r4/1000+30000}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000006280)='/dev/null\x00', 0x10000, 0x0) r6 = syz_open_dev$admmidi(&(0x7f00000062c0)='/dev/admmidi#\x00', 0x800, 0x480801) lseek(r6, 0x0, 0x7) geteuid() r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006380)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) getxattr(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)=@known='trusted.overlay.origin\x00', &(0x7f00000064c0)=""/90, 0x5a) syncfs(r6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000006540)=0x8000, 0x4) ioctl$TCSBRK(r0, 0x5409, 0x1ff) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000006580)={0x9, 0xbd, [0x8, 0xcb, 0x7, 0x6, 0x9]}) r8 = gettid() tkill(r8, 0x29) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000065c0)={0x8001, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000006600)=0x4, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000006640)={'bond_slave_1\x00', {0x2, 0x4e24, @local}}) 19:31:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) [ 376.648509][T13900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:31:31 executing program 4: 19:31:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/240, 0xf0}], 0x2, 0x0) 19:31:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:31 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) clone(0x80000000, &(0x7f0000000080)="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", &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="9a2946733d072410ffe4b46fa9369d7d1f30c9c4acb94162206ef89dcd2872638db29e0949f338d02fb2ce93f9d7cb1cd875fddfb6eaa1c500c7d22155507bb0052c7c710c86709902e1379acdd0f5deada8fec06335f9c8d7f65d29c425cca6edce263f356803") 19:31:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) [ 377.898246][T13953] IPVS: ftp: loaded support on port[0] = 21 [ 378.057911][T13953] chnl_net:caif_netlink_parms(): no params data found [ 378.100099][T13953] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.107294][T13953] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.115948][T13953] device bridge_slave_0 entered promiscuous mode [ 378.125715][T13953] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.133115][T13953] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.141267][T13953] device bridge_slave_1 entered promiscuous mode [ 378.167606][T13953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 378.179561][T13953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 378.205516][T13953] team0: Port device team_slave_0 added [ 378.214346][T13953] team0: Port device team_slave_1 added [ 378.275198][T13953] device hsr_slave_0 entered promiscuous mode [ 378.342837][T13953] device hsr_slave_1 entered promiscuous mode [ 378.400226][T13953] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.407415][T13953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.415318][T13953] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.422588][T13953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.494632][T13953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.516230][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.525680][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.534214][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.544926][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 378.564265][T13953] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.585921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.595181][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.602510][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.611217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.620925][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.628171][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.663895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.678243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.697218][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.715627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.732917][T13953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.745671][T13953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.757062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.790926][T13953] 8021q: adding VLAN 0 to HW filter on device batadv0 19:31:32 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) r2 = getegid() openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80000, 0x0) fchown(r0, r1, r2) 19:31:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001880)='/dev/uhid\x00', 0x802, 0x0) read(r0, &(0x7f0000000080)=""/175, 0xaf) 19:31:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:33 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000) 19:31:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001880)='/dev/uhid\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/175, 0xaf) 19:31:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:34 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0x3) socket$inet6(0xa, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) 19:31:34 executing program 1: io_setup(0x401, &(0x7f0000000000)) io_setup(0x3ff, &(0x7f0000000080)) io_setup(0x1000, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000140)) io_setup(0x3, &(0x7f00000001c0)) 19:31:34 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:34 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f0000000100)="953a4df392bfd6702f4d787c6242b414a6c8e95716e567a2c705e6fb3024263565c8d3daa12f290b") getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='mounts\x009\xb1\xf5\xc4o?\x06V\xd3\x95\x1f\x1d?\xd4\xe1\xf2\x8b\xd0\xef\xe2\xee\xa9\x9fr\x81\x13\x8br\xb5\xa7\xebV\xc2<%\xdf%\xd4\x88\xe8\xcf\xedX\x8bSbO\xbc\n\a\xd3\v\xff\xc2\xd2\x86\x03\x01\x00\x0e\x94\xf1\x02RS\a\xd7\xc9_W\x1fZ\xf7\xae\x86\xfe\x00\x1f\xe1\xca\xb3\xac\xfc\xfc\xa91M\x8a\x958\xef\v\x89Xm\x81\b\x19e\xac\x9c\xe2\xadBS3c\t%\x84\x19\xce\xafn\xe2\xb7\x9e\r\x80\xd1n\x13\xb9\xd9}\x1b\xec\x1a\x97\xea\x1dY\x1c<\x17\xc5\x80') ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x82) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20002000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$TCGETA(r2, 0x5405, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x100000000, {0x100000001, 0x80, 0x0, 0x4, 0x2, 0x40}}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000006880)) poll(&(0x7f0000000000), 0x1ffffffffffffd7d, 0xfffffffffffffe00) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="7a390698c10cb43f4a69196c9701dd6fca0a5d4fee3448bc4a", 0x19}], 0x2, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006900)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x7ffd}, 0x10) r4 = syz_open_pts(r0, 0x4000) r5 = dup3(0xffffffffffffffff, r4, 0xffffffffffffffff) setpriority(0x10000000000, 0x0, 0x236f) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 19:31:34 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1, 0x0) 19:31:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x6, 0x9, 0xe, "d78b56c38cce6deadd1a6273f9de8a2e729a7c7ed3c651ea4a7a309d2914a0cb94e0a1d7185e94bfb72fbd7101b64de9a8b8e5dafd4e5a5d683c391b", 0x30, "7868c1cb138e451d6390fb6fe745101428ebeb5f21026af564a709c2d4971f4f3bfba21ce10bbbf11885c2854b4ca8365f88e40d9201a2a1562b4681", 0x38}) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 19:31:34 executing program 5: ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:35 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 19:31:35 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010040400000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) 19:31:35 executing program 5: ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ac4b913e6c6954e057b41bfa172185165560"], 0x12) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x0, 0x101000009b4b62e}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 19:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSERIAL(r1, 0x5424, 0x0) 19:31:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x15c00000000000, 0x0, 0x6, 0xa, 0x15, "f57168745c666d7bf88433cc0e791b480a6b51071928a18fccfb7fa2daa2b545fb62e0d80b575e59edf6ef30f69bb98d495794842fc4fe58d357b49fa7758a93", "5c23096a4eb5ace6ca9a37b6fcdfc4d2fb9c55a7413e17207b9882a4c3a236e7b3fc9dedcc631e13bddebe4fc81deabecdb1d089e7f28e97834b96e7ff9603d4", "a2cf70afaee3ed3e476d95237a3db85e211a123691c0f13ced1b23f43069b01c", [0x9, 0xffff]}) 19:31:35 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010040400000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) 19:31:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:35 executing program 5: ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:35 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00010008410000000000190e000600000000010000000153b4", 0x2e}], 0x1}, 0x0) 19:31:35 executing program 2: unshare(0x600) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:35 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000300)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7ffff) 19:31:35 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:36 executing program 2: add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000880)="6fd9e1da746a74493b458b0b205386564149fbc6fc88b9489fa10e17e402d635150db31bf17cd704d14e3ab28a23ce6ce036da9c5207ea6235d3e80ea4a1913abcd044a80a5f20727d5110f19afcfa23f58361bc7abb4068012854d3dac18b84e0ac6f0e6529db08af5e97639983d34532558b18a63fa96c20034185242c66d9b4f9ae3c12844ede29ea87cddf4a75c95cf67e76833ac9cfdc4727c0f53ff506db12e78fa71177a8d43d5ad384cdbb8bb5df306c3963104c5593575d22a46c2319c89e35222b960bf024c85e1246d0f64466259ebcab4213c587e8983e1224be14c85787880eb1f1eb13a125eefcd53c63ddfc04f48e5143d20a8ee31f8dee789065858f79a69eaadb33c96aeff2cd233dd5002a3c3c1a22775f084e55638c939357baec59b459f5235c3faf77b76f97eafc6b035d9e47c0dab5448e6e1162a2da1582354414febcc2204a30829793c9bc0a51dcaec5a8995c7342c58fe9f5d57604a843f9eecbc1cdde179f081d56cd24eae242c085407ee9527aae6c3f4ad1dfedca739c1d91d6137d29ef8c104d349d94330ca03e5735b112c478c589d0cf72397354840eb46883905c5671457de8245a55e1e6cd87279acc8531ec007cb31cf47622ca1f6e986f3041f381aa031cdf788efe5d966434910a27dfeab0e7279408effda749b85849a5495da61e22314a7e14575a39a7a4f841727a343e5a7ff5b2265f78a33f0428c65b1537f8546bffe86d9053f42c38ff1ca59957345ee211a86378226505d454d443b6c0693b3380ed976ab78242b534c258568ca98b408611427838b2a3a7e282b719f594612a91bc6d6be85dfb86f19f2926d7ae0e03a39ee5c646230ee4dee87e6218163f361f72caa4ccb3376a62dcf5fba2de526bdad705d3be988911cc240504d23bac2b08ba891c7b867fc6a9fc8bce911d4b0a04e13d3d6bc1b1d486c2035e74bfacc552d4f6ee10c577b691d8643618fdca5d949369bb0bc2d53686312f1fb4bf46af09a70d1c62748b8f9cb0b66620e883b8158eb5a082ac748e1e19d70729607a441e137f72377018949f71663e9d9c25fe44320ebc68d1e17ce15315f647f0c9105e261e60c289f0949780237eb9a41c6e349d1d8fbcea001c5cc77bb7df282aa349374720236478cb5b3c6c81c9e42750fcd8751f7869742dc8d6e8475361e5ef1d831536068af676b27065d6a6e40cf290174ce6118707d6b9ba0a1818a4d14cd8a4c8220261468644e736d4c5a4aad38ed95e245925a85bc7a28b6db312763c6846da6372065964c711b3731634de87408af0cd31794342e7f42d0d6624e7071555bdec02145b0e47c88793476a9423cafa18efdddb864595a8786c546ecaee4777d52a404c40bf8901df9c5fff91259cd41baa39f44a9f0cc6a042766d1c214c489a55dfdae125a0e2919c90fa2fed7e92680381ecd99b25fbc7d8841a844a599914f489f0f97c48678401f7c3a3e604d549e980302260c5d974a528bdc0fce6c29b7b25201e912784a76568c750bfab3834ee69dcbcc271a59913a0ec1672cf102fcf58200d6c6f3b501d85aee1dba144e28dda458e1e3c0e859dcffb4f0cdafda79fdb3ebf06f35f54624d7787e3f43c1cea8707359a5a879ef73d01d82bc0254316a79bdbdd1e1ff918163f52fc4dabbe131615ae3be77e2aa908785f6f44aef6d82a2cff34e2101a04bc74278aa5fa1b040f11f83af6c62b9fa987a1b395949fe4a21546e9218aa41b4ba6daa4c54d4b94c3ca5d0ce48e05b2d70b2a99e025f19630b9baf49c98943160c17721028986061791ae68e7a341055c3dbf81c2748178c8f8a26a748932dfd54e7819ddc3541fb65f2680ad788639c13d73ad8d12f2ac5d0bc0be107b3f948dac75d68a9b631e289aae3daafe8cd1c6e30c6ed22aaa6c5e81715c34d7e337b0c5eb5aa5ddcd98a03a9cefbf8432970d4fbe4002c0a4a416cada269f5f8c3f41eb6983aaf88c6489db5b1cce6e16338a781ad01a3b5c404fffd291d7c70867db6552d4033545bc7f1bc8a3b307674d79fc2e707f62e1c49d0c8b60ab4d55d18d156aef87909507603203b9efec2933a98dc0002f6e1c1e6555973c212d9af144545a2f8df3b9f80a4b700d8cacf8582dc1e343eaa0b1bd9a1c2e251e97011ce7b5936b24d0f3221073fba1e9c9a5fa5547c88d77c076881b729ff6316f368970f060897cda645e544f3d3713ecf6864e9f3dbf90b3ee956bf71eb0818d14e53853630f82a9bc2ca0a8abcc85b1bdb502a9cdc11e25f143f80abf4e1f3b9b1dcbf5d08a013a2e2c58371d9657fbaf6752340f44f4b9d256889ab6e4574485295bb135c3154ca924d5392a9f001304b4fc02e750464674b284a86d82a176d47ffbda37c6084e2ac51c0cc2433670daa854f2d821e532059edc8d8837de0424edfb5bd8d0b461f0bc0a2c2bc76e31ea24ccdd2145ec2e3071452039f618434f77aa3171b53c4b58a3259bf0f2c4bf24d8f21c7f1b54d0096093e5298f2d85c40f9780bd30eea9b4c8d2495816a348400a944625d7191aa91e4f0fa8deb203ce626f7dd26e8793c5859a13ac96bd5c0ee01011a4f51e1bbe07739a385fc2b807412c2844020ddb47b15fc904023e873fecf163ed44357340ece55b9c486419e21d777acad04ba42c09d5a772a7f26041f75a8a7792fe82b3f725fba2922089db84b6ca4eed0848d989b5ae1a645ddd7e4767ce5ec3d507f8073095f73b1b40a7916072d872ecaa659c4c33e518812d479b62074909f1b3ba88478d68f61b1aa88a6e3f4c7dffb2caa6d8797d48bc109c313cb99bdb9059060787e553ca27fa712c103660cc3e7992ba4ca13c07652f77d9efc5018bf1998ba8a3f82dc7b9cd27003e45f18351998d897c5c89dc9694d23e0cc6f03c93d06d51d45ea90463f91ace1fff36ac68ae22095152c998cadc3778f02f7e01dca4b12adb3250cec3584d53346b4031e9d713c953e4a8c50bbb1035020f6b2ea3be99e2ce8eee229a40a326a185ce111428965060e1fd85110a1438653f074190c12d477b759ea41628eab1e8ba14f36d63e107476332b67e170f2924f389dfa0f6de4480d35f9cf171c3b69acbdee16d913398b0dc627decd8f6a93b2e33f797dded5ea60c8105531c4a139132914a441fe013c06524bff2cb81fabf7d834036d20952408f5ed48c423af7e2727cb0273a7edc40b28453de2caf6e2ff786a712b22b1762ba23dd7d3aae73b4268b0ad91b5fa7b4663c643894757bf21666d7b656376a16049468e0ba81ce99e496a59e848c787e002617364e1de6ab404522db981f68298a49e1db1953e2a961e5ba4c3548d7c5cc24158de831406fb4869502f238a7ae7c73d64ad0caa7b5c0405ad757866b2b26a5926bda4a386cc65de72cbd47e56009c0af89df6c83b537ae8ed55547c75b280b5b002509fac28cb0320e2b6a54a27fc2f56e86583c5268f697bae8a73e0e84d69d23305eb419870f1355ad7e19f34d24c796cef66d2406fe7f9cc3e7c30618b473669514a49d08c590cdf817050e63f74548cd5038c40e6b8c890f5bbe015bf3bbb10b89a1c6403652b81f41af7238ed9f9386be10e007697251784e784a48d2a40bc5d5107afe307cbd94a4a6351c5c577ee01fe4ba3f94668a81fc10e3934d50787debbe8735c027fea58b135dd1cb4d12a77b2d1d0b0d839c6d536c096691ae1053f342a7abecd654d8ddebcff393dee2b4e96f856138d72f907bb4033858096b1d0fd76ea6fcd42a45a95bcad52a088b85a86937a373c5964ec7983829a18a8cc0585cb333398a33868023f9abf6cfb44e783e6603bd990a22f5bd394b44ceb07fbb5b4cbe97995554cb75ccfda670ddc757ff39e899243becfedffbf0d336d1ab065bad2b488f41c90b6238a4bdca9c5046fc5fb2fc32f3ae005e694119765c58f6742b4eed0c826854db9260f8e42d74c2246da422a3e3ecb8f28bd4b5da788a30f93e14fe01503fd6f485cc4d26c155d866430c48759c9ea7650c5adb4e2300dadf613e80ca3893d43ca04268da93b375cd3104e5e7617c81cbc5e225a979c115aa25a3b31f35c885b5272c440fe9bec6a86932b5c5f1b38091510c57cb725830dc86ec38ef2e67fa92b898a039c3edeba9bb054b9b58b7be285cf0ed6057a96c53a97cc54e5eb6b6f022810b", 0xb97, 0xfffffffffffffffc) 19:31:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1000, 0x200) request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffffb) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x8029, 0x2}) socket$inet6(0xa, 0x0, 0x0) 19:31:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 19:31:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/99, &(0x7f00000001c0)=0x18) 19:31:36 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x0, 0x0, 0x0) 19:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b536a525eeda0fd873ee8a7265c7a47b3610f6"}) 19:31:36 executing program 2: r0 = getpid() write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) sched_setaffinity(0x0, 0xff16, &(0x7f0000000440)=0xa000000000000005) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x3c081, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x101, 0x1}, {0x3f, 0x7}, 0x6bc, 0x2, 0x8}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r0, r4, 0x0, 0x14, &(0x7f0000000e40)='security.capability\x00'}, 0x30) r5 = getpgrp(r0) setpriority(0x0, r5, 0xffff) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x1) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000400)={0x0, 0x800000000000002}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=[&(0x7f00000008c0)='TIPC\x00', &(0x7f0000000900)='%--\x00', &(0x7f0000000940)='system_u:object_r:pam_var_run_t:s0\x00', &(0x7f0000000980)='\r\x00', &(0x7f00000010c0)='systemuser[bdev\x00', &(0x7f0000000a00)='security.capability\x00', &(0x7f0000000a40)='security.capability\x00', &(0x7f0000000f80)='TIPC\x00', &(0x7f0000000fc0)=']\x00', &(0x7f0000001000)='em1\x00'], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 19:31:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:36 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0xfffffffffffffffd, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4, 0x9a) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 19:31:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x2002}, 0xd) 19:31:36 executing program 2: r0 = getpid() write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) sched_setaffinity(0x0, 0xff16, &(0x7f0000000440)=0xa000000000000005) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x3c081, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x101, 0x1}, {0x3f, 0x7}, 0x6bc, 0x2, 0x8}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r0, r4, 0x0, 0x14, &(0x7f0000000e40)='security.capability\x00'}, 0x30) r5 = getpgrp(r0) setpriority(0x0, r5, 0xffff) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x1) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000400)={0x0, 0x800000000000002}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=[&(0x7f00000008c0)='TIPC\x00', &(0x7f0000000900)='%--\x00', &(0x7f0000000940)='system_u:object_r:pam_var_run_t:s0\x00', &(0x7f0000000980)='\r\x00', &(0x7f00000010c0)='systemuser[bdev\x00', &(0x7f0000000a00)='security.capability\x00', &(0x7f0000000a40)='security.capability\x00', &(0x7f0000000f80)='TIPC\x00', &(0x7f0000000fc0)=']\x00', &(0x7f0000001000)='em1\x00'], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 19:31:36 executing program 1: r0 = getpid() write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) sched_setaffinity(0x0, 0xff16, &(0x7f0000000440)=0xa000000000000005) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x3c081, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x101, 0x1}, {0x3f, 0x7}, 0x6bc, 0x2, 0x8}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r0, r4, 0x0, 0x14, &(0x7f0000000e40)='security.capability\x00'}, 0x30) r5 = getpgrp(r0) setpriority(0x0, r5, 0xffff) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x1) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000400)={0x0, 0x800000000000002}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=[&(0x7f00000008c0)='TIPC\x00', &(0x7f0000000900)='%--\x00', &(0x7f0000000940)='system_u:object_r:pam_var_run_t:s0\x00', &(0x7f0000000980)='\r\x00', &(0x7f00000010c0)='systemuser[bdev\x00', &(0x7f0000000a00)='security.capability\x00', &(0x7f0000000a40)='security.capability\x00', &(0x7f0000000f80)='TIPC\x00', &(0x7f0000000fc0)=']\x00', &(0x7f0000001000)='em1\x00'], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 19:31:36 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:37 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 19:31:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4040aea0, &(0x7f0000000a40)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) dup2(r1, r3) 19:31:37 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet(r1, &(0x7f0000009000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_pktinfo={{0x1c}}], 0x40}}], 0x1, 0x0) 19:31:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x2) 19:31:37 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:37 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback}, &(0x7f00000013c0)=0x20) [ 383.652635][T14228] Invalid argument reading file caps for ./bus 19:31:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:37 executing program 4: setresuid(0x0, 0xee01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:31:37 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:38 executing program 0: socket$inet6(0xa, 0x800, 0x4) 19:31:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000300)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7ffff) 19:31:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 19:31:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:38 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:38 executing program 4: syz_emit_ethernet(0xd9, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:38 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0xe4841, 0xa4) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xd, 0x9, {0x55, 0x4, 0x100000000, {0x6, 0x57c4}, {0x2, 0x26}, @period={0x5b, 0x3, 0x9, 0x8, 0x9, {0x20, 0x3, 0xb2cc, 0x7}, 0x2, &(0x7f00000000c0)=[0x401, 0x3]}}, {0x53, 0x200, 0x80000000, {0x4, 0x10000}, {0x401, 0x7fff}, @cond=[{0x252c, 0xff, 0x4, 0x9b34, 0x4, 0x4}, {0x1ff, 0x9, 0x200000000, 0x8, 0x7, 0x8}]}}) 19:31:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSERIAL(r1, 0x5418, 0x0) 19:31:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:38 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:38 executing program 1: setreuid(0x0, 0x0) unshare(0x600) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x80000001, 0x2}) 19:31:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) unshare(0x8000400) ioctl$UI_SET_MSCBIT(r0, 0x4004556b, 0x0) 19:31:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:38 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xfb62597ed9ab24cd, 0xffffffffffffffff, 0x0, 0xfffffffffffffed7) 19:31:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) 19:31:39 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x803, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) socket$inet6(0xa, 0x0, 0x0) 19:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:39 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:39 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 19:31:39 executing program 2: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x7) sendto$inet(r1, &(0x7f0000000a00)='Y', 0x1, 0x0, 0x0, 0x0) 19:31:39 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:39 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) 19:31:39 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:39 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x5a) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) 19:31:39 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:39 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0xffffffffffffffff, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x4, 0x50000}]}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) socket$inet6(0xa, 0x0, 0x5) 19:31:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x24}], 0x3ad, 0x0) 19:31:39 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 19:31:39 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="ae", 0x1}], 0x10000000000000ac, 0x0) 19:31:40 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) 19:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:40 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) 19:31:40 executing program 1: r0 = inotify_init1(0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000280), 0x0, 0x0) 19:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:40 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) 19:31:41 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 19:31:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f455c4106000100051d"], 0xa) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 19:31:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x8, 0x1}) socket$inet6(0xa, 0x200000000000002, 0x1000) 19:31:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:41 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:41 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 19:31:41 executing program 4: setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 19:31:41 executing program 4: setreuid(0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) [ 387.666514][ T30] audit: type=1326 audit(1564428701.711:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14471 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:31:41 executing program 4: setreuid(0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:42 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 19:31:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) 19:31:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:42 executing program 1: socketpair(0x3, 0x0, 0x3, &(0x7f00000016c0)) socketpair(0x15, 0x80f, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 19:31:42 executing program 4: setreuid(0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:42 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x80, 0x28c) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x87, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) 19:31:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:31:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) [ 388.437527][ T30] audit: type=1326 audit(1564428702.481:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14471 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 19:31:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x7, 0x9) 19:31:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00', @remote}) 19:31:42 executing program 4: mknod(0x0, 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:43 executing program 4: mknod(0x0, 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:43 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 19:31:43 executing program 4: mknod(0x0, 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), 0x4) 19:31:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x400, 0x0, 0x50000}]}) socket$inet6(0xa, 0x7, 0x9) 19:31:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:31:43 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:43 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000140)="b3930f239446d1091647ea871ca2", 0xe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000100)) 19:31:43 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) socketpair(0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000280)) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, &(0x7f0000000000)={r0}) 19:31:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40840, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @rand_addr="555f3583bad467870e8854b09ae37f9a", 0x81}}, [0x7, 0x2, 0x1, 0x4, 0x7f, 0x4, 0xa1, 0xf8ad, 0x8001, 0x9, 0x1ff, 0x1, 0xd0de8a5, 0x4d82, 0x5]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x6, 0xa, [0x4, 0x7fffffff, 0x1f, 0x2, 0x3, 0x1, 0x7, 0x9dc, 0x4, 0x4]}, 0x1c) socket$inet6(0xa, 0x0, 0x0) 19:31:43 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:31:43 executing program 1: accept$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080)='IPVS\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000002480)) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000012c0)={&(0x7f00000001c0), 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x20, r1, 0xb01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:31:44 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 19:31:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006c40)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffeb, 0x0, 0x0, 0x0, 0xf3}}], 0x1, 0x102, 0x0) 19:31:44 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x80000000, 0x10000, 0x0, 0x1, 0xfffffffffffffffd, 0x6}) 19:31:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 19:31:44 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:45 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:45 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x1, 0x7}, {0x2, 0xffffffffffffffe9}, 0x0, 0x1, 0x6}) 19:31:45 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:45 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x1, 0x0, 0x0, 0x20000009, 0x0) 19:31:45 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) shutdown(r2, 0x1) 19:31:45 executing program 0: socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x2, 0x4) 19:31:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) 19:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x5}) 19:31:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x80003, 0x5) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 19:31:46 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x1, 0x1) 19:31:46 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x12d801, 0x0) 19:31:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x5}) [ 392.574683][T14740] Invalid argument reading file caps for ./bus 19:31:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0x4, 0x0, 'client1\x00', 0x6, "6be267415095542e", "71f946af473456d74ab3c85bacc43546ac299c8c8f9ce98d6c9a5828a0fbee7f", 0x7, 0x5}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x41000000000013) 19:31:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) socket$inet6(0xa, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 19:31:46 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, 0x14) shutdown(r2, 0x1) 19:31:47 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7}, 0x12c) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 19:31:47 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42440, 0x154) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r0 = epoll_create(0xcb24) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x81) [ 393.091276][T14770] Invalid argument reading file caps for ./bus 19:31:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9426, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffffff}, &(0x7f00000000c0)=0x14) 19:31:47 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setreuid(0x0, 0xee00) r1 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(r1) execve(0x0, 0x0, 0x0) 19:31:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000440), &(0x7f0000000480)=0x30) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x5, {0x3}}, 0x18) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000004c0)=0xc) fcntl$lock(r1, 0x6, &(0x7f0000000500)={0x2, 0x7, 0x0, 0x1, r3}) ioctl$VT_DISALLOCATE(r2, 0x5608) get_robust_list(0x0, &(0x7f0000000340)=&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000000)}, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @initdev}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x10080000, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x40, 0x1, 0xffffffffffffff81}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000540)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x100, 0x0) sendmsg$inet6(r2, &(0x7f00000018c0)={&(0x7f0000000640)={0xa, 0x4e24, 0x8, @rand_addr="9c54cde7b1309696189e5bf440257f55"}, 0x1c, &(0x7f0000001680)=[{0x0}], 0x1, &(0x7f00000016c0)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x73, 0x8, [], [@generic={0x5, 0x15, "73a05439857b68b4b6847c33e2e881ae459a00fb0b"}, @hao={0xc9, 0x10, @rand_addr="e04f1f32dc01cf7b317388deebfdfc2c"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x49b1, 0x3, [0x6b, 0x2]}}]}}}, @hopopts_2292={{0x158, 0x29, 0x36, {0x3f, 0x28, [], [@generic={0x707, 0xd0, "04f645588b03cf7ebee31a637e259eab1646b06d5b389cde2b5979f995de67aacb6a4a4e54a4ca32e3088641a1a21e4870a942c31d428ebc6d6dd1cbc37bd33cee74ad091ebf0f8932167bb7c9134e600fda27a1b106763904eb929dc34dc805f50c165267a3d0f3b1bf6de2cd4e5707ae5dde1ddbcbd29e036a7de6430f658770e0515ef107d821fa1f9b6ad3231627f1dc06c06dfbd01891d4a72ac0b4e994961a8285f44a107a3b070e29d274504f833f0baeff5336e4adf22317cfc0bd2d8ef5690fd31a27ba0e83a4cc8d122486"}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x6b}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x3f, 0x400, [0x8, 0x1000, 0xece8, 0xed41, 0x3, 0x3, 0xffffffffa7e1b7ea, 0x0]}}]}}}], 0x1b8}, 0x4000001) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000200)={0x18, 0x0, 0x8, {0x1000}}, 0x18) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 19:31:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ac4b913e6c6954e057b41bfa172185165560c23ae8aa9de77e39192ff17f436d3103666ec116"], 0x26) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x2}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 393.448660][T14792] Invalid argument reading file caps for ./bus 19:31:47 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:47 executing program 1: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42440, 0x154) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r0 = epoll_create(0xcb24) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x81) 19:31:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) 19:31:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9426, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffffff}, &(0x7f00000000c0)=0x14) 19:31:48 executing program 2: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(r0, 0x0) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6}, 0x14) shutdown(r2, 0x1) 19:31:48 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sysinfo(0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) semget(0x1, 0x1000000000000000, 0x0) r3 = dup2(r2, r2) sendmsg$alg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/83}) write$P9_RATTACH(r3, 0x0, 0x3ba) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffff}}, 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) open(0x0, 0x141042, 0x0) 19:31:48 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f0000000100)="953a4df392bfd6702f4d787c62") getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='mounts\x009\xb1\xf5\xc4o?\x06V\xd3\x95\x1f\x1d?\xd4\xe1\xf2\x8b\xd0\xef\xe2\xee\xa9\x9fr\x81\x13\x8br\xb5\xa7\xebV\xc2<%\xdf%\xd4\x88\xe8\xcf\xedX\x8bSbO\xbc\n\a\xd3\v\xff\xc2\xd2\x86\x03\x01\x00\x0e\x94\xf1\x02RS\a\xd7\xc9_W\x1fZ\xf7\xae\x86\xfe\x00\x1f\xe1\xca\xb3\xac\xfc\xfc\xa91M\x8a\x958\xef\v\x89Xm\x81\b\x19e\xac\x9c\xe2\xadBS3c\t%\x84\x19\xce\xafn\xe2\xb7\x9e\r\x80\xd1n\x13\xb9\xd9}\x1b\xec\x1a\x97\xea\x1dY\x1c<\x17\xc5\x80') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x20002000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x0, {0x0, 0x80, 0x0, 0x4, 0x2, 0x40}}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xe) socket$netlink(0x10, 0x3, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) poll(0x0, 0x0, 0xfffffffffffffe00) pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="7a390698c10cb4", 0x7}], 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 19:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r1) clone(0x8000003102201ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) write$P9_RCREATE(r2, 0x0, 0x0) 19:31:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9426, 0x248880) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffffff}, &(0x7f00000000c0)=0x14) 19:31:48 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 19:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80002) 19:31:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 19:31:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b724a60080000000000000006835401500240012001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:31:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sysinfo(0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) semget(0x1, 0x1000000000000000, 0x0) r3 = dup2(r2, r2) sendmsg$alg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/83}) write$P9_RATTACH(r3, 0x0, 0x3ba) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffff}}, 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) open(0x0, 0x141042, 0x0) 19:31:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:49 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) [ 395.592470][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.602588][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.611951][T14910] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 19:31:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0x4) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@v1={0x2, "e5"}, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:31:49 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="56631ebc0bee6245c1c845fe79", 0xd}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000100)) 19:31:49 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) 19:31:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sysinfo(0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) semget(0x1, 0x1000000000000000, 0x0) r3 = dup2(r2, r2) sendmsg$alg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/83}) write$P9_RATTACH(r3, 0x0, 0x3ba) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffff}}, 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) open(0x0, 0x141042, 0x0) 19:31:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b724a60080000000000000006835401500240012001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:50 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x200c2, 0x0) close(r0) sendfile(r1, r1, 0x0, 0x0) 19:31:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x8}) 19:31:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sysinfo(0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) semget(0x1, 0x1000000000000000, 0x0) r3 = dup2(r2, r2) sendmsg$alg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/83}) write$P9_RATTACH(r3, 0x0, 0x3ba) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffff}}, 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) open(0x0, 0x141042, 0x0) [ 396.066828][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.076603][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.086003][T14938] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 19:31:50 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) 19:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[{0x18, 0x1, 0x1, "f3fe"}], 0x18}}], 0x2, 0x0) 19:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)={0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x6, 0xffffffff}, 0x14) shutdown(r2, 0x0) 19:31:50 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40106308}], 0xff00000000000000, 0x0, 0x0}) 19:31:50 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{}, {}]}, 0x34, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {}, [{}, {}, {}, {}, {}], {}, [{}, {}]}, 0x5c, 0x0) 19:31:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03d88a8b74036e97e0e2bc0186dd60b5000000002f6e00000000200062b95c7d91d2f51cf3702d076da5d50f30000000ca42c021535aedcb"], 0x38) 19:31:50 executing program 4: [ 396.580755][T14969] binder: 14967:14969 ioctl c0306201 200001c0 returned -14 19:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0xfc00) 19:31:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 19:31:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0xcc, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x7, 0x5f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x15, 0x37, 0x91, 0x40, 0x12d1, 0x1e8a, 0xae45, 0x1000, 0x5, 0x5, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x95, 0x100000001, 0x80, 0x101, [{{0x9, 0x4, 0x1b, 0x100000001, 0x0, 0xff, 0x3, 0x73, 0x81, [@generic={0x3b, 0x0, "4820c13260ec712eb718ebf8847b1123a6f7de238df78ec92a006925bf889a52c1ca3c9312ce3ca1a306ec25006df7ca4b193001a965fd28e7"}]}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x10000, 0xfffffffffffffbff, 0xffffffff, 0x40, 0x3ff}, 0x1f0, &(0x7f00000002c0)={0x5, 0xf, 0x1f0, 0x6, [@generic={0x3a, 0x10, 0xb, "efd2d75c0a2f5ac1c3ed5e07fa532e7e97ed60fa5f96b8554b0beade59bff1a0374a7126eeb45333f4ee0663661404f1cdc139df6b26ea"}, @generic={0x75, 0x10, 0x0, "3be80ee53032aee609e569e2b9420ba21deafb412f61d52dbbe8b8c3f7728fe2058afd1fc48e9dead55b22cfe88508344d57769419ef217517b9347ff8d0e0143a723ea8d918c5bcb3c0b741672fd48d966f3a3ca65b8c5403c4625f961d3c397bfb77abb76f1442f090cfb032be61366e28"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x50d, 0x74, 0x401, 0xf6}, @generic={0x101, 0x10, 0x3, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x4, 0xf00f, 0x800, [0xc0, 0xff0000, 0x3f00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7c016f9a13d289708d28a8aed4a95e08"}]}, 0x9, [{0x9b, &(0x7f00000004c0)={0x9b, 0x3, 0x3c59, "2f303926347f49beb7197754526029203b1486a3059cb372487e79a5a7546c7af465439257ae6ff14da123055a7f73e829b103c9a2fdf026416f246f4bd198bd7b3be7c3c5690cf4c998def5eec590c67ea24e49d4beffa828c4ec71dc8a13ad7c2e09918ee94c84cf73074acbc1ca4679b4e831297e3d08547ebfcd320eceb835170a321efa9b363da7e00e96e48d08200b7146c00df3"}}, {0x43, &(0x7f0000000580)={0x43, 0x3, 0x42d, "368323e01af02d9c3fe940c75523a16275f696a95b0832e7427542a2f779be4dfd4dc5aec9a59d962b5a4e53bf7ad7538aa4262363403f1a5d4fbc3a99dbc3"}}, {0x1003, &(0x7f0000000600)={0x1003, 0x3, 0x3c0f, "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"}}, {0xe6, &(0x7f0000001640)={0xe6, 0x3, 0x843, "334e05f8108f714ea238fa4a936d7c11776077e580cead7ec2bf836e8f04f701bd6e67aeaf69606e026b54ad6ecdc40c7cc6271be823bb8e8c1bedfdbf3660777ca68ddd49014ebe90eb80168515979889877668b623d4f1f726f84c9f2111a286eff9efbaf1d66c2903e19070492bd33b2fcdef96ebcfb4f95fa97b79f84276c44156084ff2d999f8e5aad538ee11d765ba555ef27675c1c4082d254e861e8dc333e391f325f1417aaa29f0bda3be8386c5f3edc95a513d3ca09877812b07800d9f72caa5c85d1881ad7b7b9c3feaac1d22fc7eafa9c4678ed6b5bad14d2ec7d29b"}}, {0xfe, &(0x7f0000001740)={0xfe, 0x3, 0x3401, "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"}}, {0xd8, &(0x7f0000001840)={0xd8, 0x3, 0x2409, "c5388058a2a251d3116a660b5e32851cc44d0ea2c325d6e54fb26046aa7cf368a23017d2b4ddd4aa3a1c91e3ee549b006b76ea74a318766908198168528a216d49c3208a833ffe83d40db25baf2e2338e0cd8c1747fc844ef52db7a5ffd035625f01cd4d880cd6b4c86518577a452a00b2067a0b965138efa20c774d0dd65a8f270f1c9522ab9c2ee0e0612556a78566c79ed9cceaf53659dac54c9d3d63e827d9431994e2543bd297f2416db6e8a2ea61eabbbb2b73ca83a4ca9375f6133419cd898f712499636915a57cba15e3e3af85bf8854"}}, {0x19, &(0x7f0000000240)={0x19, 0x3, 0x3c7f, "02540b996952a50e962f12cf86c13251b4f64572f2"}}, {0x81, &(0x7f0000001940)={0x81, 0x3, 0x426, "3198b8fbe8376df4e8799cdcf25ecfdec02f1507f4fb5a304f74ffc7ee3dcb4581a95cab439f29a0fbba30093aa898fdbc5ee149ace737ac4b6d1dade6f186b48ec5948b0598301117f2b043ff7df2d7b206d11fdd60fd3b2129faec5e56934f53134c39681140add09b35d34acf8b33bec04b61baa15c9559d8c4828b"}}, {0x4a, &(0x7f0000001a00)={0x4a, 0x3, 0x445, "3e51978ea62ef8b7dc30152d2b8180b150bca19eb9d49919720ba49804c3699612d365ca05bbad0d238ff3035e03768aba2b192e42be4c4fac77784b11e6c7d102e148f781e3"}}]}) 19:31:50 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sysinfo(0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) semget(0x1, 0x1000000000000000, 0x0) r3 = dup2(r2, r2) sendmsg$alg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec", 0x3}], 0x1}, 0x8005) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/83}) write$P9_RATTACH(r3, 0x0, 0x3ba) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffff}}, 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(0x0, 0x141042, 0x0) 19:31:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getuid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004940)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004d00)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x1400000}, 0xc, 0x0}, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 19:31:50 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setresuid(0x0, 0xee01, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000080)) setgroups(0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x0, 0x0, 0x1, 0x3, 0x3ffc00000000000}, 0x0, 0x21, 0x6}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) msgget(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)=@builtin='builtin_trusted\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_getattr(r4, &(0x7f0000000080)={0x30}, 0x30, 0x0) 19:31:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, &(0x7f0000006340)=[{0x0}, {&(0x7f0000006000)=""/172, 0xac}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) [ 397.133057][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 397.206114][T15002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 397.233926][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.240445][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000009ed9fb77e86ed99d7f5c8268b979b6f0d88c443faab68a8077bb0f9a350b2188edfab0d478e24d745d9040022094b6633d6752197823822774acc25677a2571c5423900a5a58a3bc38003b00c2d74c27a8a9e8a24397", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000adbbb5d5000000000080000000000000000000000000000000000027e3a817fef895291695000000000000000000000000000000000000000000000000000000000000000000567f00"/122], 0xb8}}, 0x0) [ 397.435518][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd 19:31:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000006540)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, &(0x7f0000006340)=[{0x0}, {&(0x7f0000006000)=""/172, 0xac}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 19:31:51 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0}, 0x0) [ 397.783410][ T17] usb 2-1: Using ep0 maxpacket: 8 19:31:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 19:31:52 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 19:31:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[{0x18, 0x1, 0x1, "f3fed6ec"}], 0x18}}], 0x2, 0x0) [ 398.022227][ T17] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 398.030634][ T17] usb 2-1: config 0 has no interface number 0 [ 398.037101][ T17] usb 2-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 398.046387][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.173323][ T17] usb 2-1: config 0 descriptor?? [ 398.433401][ T17] ================================================================== [ 398.441546][ T17] BUG: KMSAN: uninit-value in ax88178_bind+0x635/0xad0 [ 398.448427][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.2.0+ #15 [ 398.455550][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.465661][ T17] Workqueue: usb_hub_wq hub_event [ 398.470705][ T17] Call Trace: [ 398.474024][ T17] dump_stack+0x191/0x1f0 [ 398.478392][ T17] kmsan_report+0x162/0x2d0 [ 398.482933][ T17] __msan_warning+0x75/0xe0 [ 398.487472][ T17] ax88178_bind+0x635/0xad0 [ 398.492017][ T17] ? asix_get_link+0x60/0x60 [ 398.496626][ T17] usbnet_probe+0x10d3/0x3950 [ 398.502007][ T17] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 398.508139][ T17] ? usbnet_disconnect+0x660/0x660 [ 398.513283][ T17] usb_probe_interface+0xd19/0x1310 [ 398.518536][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 398.523846][ T17] really_probe+0x1344/0x1d90 [ 398.528574][ T17] driver_probe_device+0x1ba/0x510 [ 398.533721][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.539656][ T17] __device_attach_driver+0x5b8/0x790 [ 398.545087][ T17] bus_for_each_drv+0x28e/0x3b0 [ 398.549964][ T17] ? deferred_probe_work_func+0x400/0x400 [ 398.555722][ T17] __device_attach+0x489/0x750 [ 398.560537][ T17] device_initial_probe+0x4a/0x60 [ 398.565593][ T17] bus_probe_device+0x131/0x390 [ 398.570484][ T17] device_add+0x25b5/0x2df0 [ 398.575058][ T17] usb_set_configuration+0x309f/0x3710 [ 398.580598][ T17] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 398.586721][ T17] generic_probe+0xe7/0x280 [ 398.591293][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 398.597036][ T17] usb_probe_device+0x146/0x200 [ 398.602271][ T17] ? usb_register_device_driver+0x470/0x470 [ 398.608183][ T17] really_probe+0x1344/0x1d90 [ 398.612912][ T17] driver_probe_device+0x1ba/0x510 [ 398.618054][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.623981][ T17] __device_attach_driver+0x5b8/0x790 [ 398.629396][ T17] bus_for_each_drv+0x28e/0x3b0 [ 398.634260][ T17] ? deferred_probe_work_func+0x400/0x400 [ 398.640004][ T17] __device_attach+0x489/0x750 [ 398.644800][ T17] device_initial_probe+0x4a/0x60 [ 398.649840][ T17] bus_probe_device+0x131/0x390 [ 398.654713][ T17] device_add+0x25b5/0x2df0 [ 398.659270][ T17] usb_new_device+0x23e5/0x2fb0 [ 398.664176][ T17] hub_event+0x5853/0x7320 [ 398.668693][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.674602][ T17] ? led_work+0x720/0x720 [ 398.678939][ T17] ? led_work+0x720/0x720 [ 398.683282][ T17] process_one_work+0x1572/0x1f00 [ 398.688352][ T17] worker_thread+0x111b/0x2460 [ 398.693173][ T17] kthread+0x4b5/0x4f0 [ 398.697253][ T17] ? process_one_work+0x1f00/0x1f00 [ 398.702474][ T17] ? kthread_blkcg+0xf0/0xf0 [ 398.707077][ T17] ret_from_fork+0x35/0x40 [ 398.711508][ T17] [ 398.713839][ T17] Local variable description: ----buf@ax88178_bind [ 398.720328][ T17] Variable was created at: [ 398.724752][ T17] ax88178_bind+0x60/0xad0 [ 398.729172][ T17] usbnet_probe+0x10d3/0x3950 [ 398.733844][ T17] ================================================================== [ 398.741930][ T17] Disabling lock debugging due to kernel taint [ 398.748080][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 398.754673][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.2.0+ #15 [ 398.763164][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.773242][ T17] Workqueue: usb_hub_wq hub_event [ 398.778257][ T17] Call Trace: [ 398.781563][ T17] dump_stack+0x191/0x1f0 [ 398.786015][ T17] panic+0x3c9/0xc1e [ 398.789966][ T17] kmsan_report+0x2ca/0x2d0 [ 398.794496][ T17] __msan_warning+0x75/0xe0 [ 398.799024][ T17] ax88178_bind+0x635/0xad0 [ 398.803734][ T17] ? asix_get_link+0x60/0x60 [ 398.808336][ T17] usbnet_probe+0x10d3/0x3950 [ 398.813032][ T17] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 398.819140][ T17] ? usbnet_disconnect+0x660/0x660 [ 398.824268][ T17] usb_probe_interface+0xd19/0x1310 [ 398.829499][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 398.834793][ T17] really_probe+0x1344/0x1d90 [ 398.839500][ T17] driver_probe_device+0x1ba/0x510 [ 398.844623][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.850532][ T17] __device_attach_driver+0x5b8/0x790 [ 398.855936][ T17] bus_for_each_drv+0x28e/0x3b0 [ 398.860797][ T17] ? deferred_probe_work_func+0x400/0x400 [ 398.866538][ T17] __device_attach+0x489/0x750 [ 398.871336][ T17] device_initial_probe+0x4a/0x60 [ 398.876379][ T17] bus_probe_device+0x131/0x390 [ 398.881254][ T17] device_add+0x25b5/0x2df0 [ 398.885804][ T17] usb_set_configuration+0x309f/0x3710 [ 398.891314][ T17] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 398.897420][ T17] generic_probe+0xe7/0x280 [ 398.902197][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 398.907932][ T17] usb_probe_device+0x146/0x200 [ 398.912797][ T17] ? usb_register_device_driver+0x470/0x470 [ 398.918697][ T17] really_probe+0x1344/0x1d90 [ 398.923402][ T17] driver_probe_device+0x1ba/0x510 [ 398.928527][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.934442][ T17] __device_attach_driver+0x5b8/0x790 [ 398.939847][ T17] bus_for_each_drv+0x28e/0x3b0 [ 398.944704][ T17] ? deferred_probe_work_func+0x400/0x400 [ 398.950442][ T17] __device_attach+0x489/0x750 [ 398.955242][ T17] device_initial_probe+0x4a/0x60 [ 398.960286][ T17] bus_probe_device+0x131/0x390 [ 398.965168][ T17] device_add+0x25b5/0x2df0 [ 398.969720][ T17] usb_new_device+0x23e5/0x2fb0 [ 398.974629][ T17] hub_event+0x5853/0x7320 [ 398.979134][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 398.985034][ T17] ? led_work+0x720/0x720 [ 398.989365][ T17] ? led_work+0x720/0x720 [ 398.993704][ T17] process_one_work+0x1572/0x1f00 [ 398.998802][ T17] worker_thread+0x111b/0x2460 [ 399.003616][ T17] kthread+0x4b5/0x4f0 [ 399.007693][ T17] ? process_one_work+0x1f00/0x1f00 [ 399.012911][ T17] ? kthread_blkcg+0xf0/0xf0 [ 399.017513][ T17] ret_from_fork+0x35/0x40 [ 399.022878][ T17] Kernel Offset: disabled [ 399.027217][ T17] Rebooting in 86400 seconds..